This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/gzsGykrKrxSsYvS0VpCxZovfMWc.roa
File:                     gzsGykrKrxSsYvS0VpCxZovfMWc.roa (raw, json)
Hash identifier:          Bcfpy/8CLcYOz6F2FLyUPqvgpPwuq/o2hYY1rwIi5M8=
Subject key identifier:   83:3B:06:CA:4A:CA:AF:14:AC:62:F4:B4:56:90:B1:66:8B:DF:31:67
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       97
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/gzsGykrKrxSsYvS0VpCxZovfMWc.roa
Signing time:             Mon 01 Dec 2025 01:29:30 +0000
ROA not before:           Mon 01 Dec 2025 01:29:30 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2514
IP address blocks:        202.229.0.0/16 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Dec  1 01:29:30 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=833B06CA4ACAAF14AC62F4B45690B1668BDF3167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c8:48:f6:51:94:47:32:c0:5b:ae:fd:a7:5d:
                    60:45:5d:b0:f1:a7:c0:41:42:12:a0:3f:2d:d0:ca:
                    f2:19:96:86:51:72:ff:ac:10:d3:c8:c8:49:b0:02:
                    fd:e1:37:89:9d:c1:2f:e2:53:cf:8e:60:9d:52:5d:
                    d4:95:4a:6c:3b:7e:a8:39:fc:b0:39:50:44:45:a8:
                    5e:fc:3f:54:d8:bd:49:45:5c:e2:5e:b7:ab:34:3b:
                    79:2e:92:71:79:8a:57:ef:98:51:90:37:08:cd:77:
                    35:5c:09:6c:4d:f1:d1:72:a3:62:61:50:a2:27:ac:
                    b8:1f:d9:60:13:13:c1:56:39:9d:3d:b0:f9:fd:92:
                    1c:cc:54:e8:7d:c4:40:84:f0:9c:b9:9b:27:56:ec:
                    18:35:d3:90:6a:39:c7:57:2a:7f:2e:b4:21:0c:a4:
                    20:33:1c:ce:95:a4:ca:56:31:9e:79:05:28:4a:94:
                    fa:10:82:a9:f6:54:10:0e:a9:40:3c:57:f4:0e:65:
                    7e:8a:08:65:ce:66:b2:97:1c:44:2f:28:76:5f:1d:
                    ed:39:53:a2:f1:66:f5:39:3c:1a:fa:eb:be:6e:7c:
                    6f:23:7f:c0:dc:4e:0f:24:07:25:e4:2f:d3:c9:37:
                    f1:6e:c4:e7:e7:6d:7e:bf:91:54:d7:4b:54:f8:22:
                    4e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:3B:06:CA:4A:CA:AF:14:AC:62:F4:B4:56:90:B1:66:8B:DF:31:67
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/gzsGykrKrxSsYvS0VpCxZovfMWc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.229.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8f:4e:cb:c2:78:1b:6f:9c:68:f1:cf:61:fc:87:e3:16:15:b2:
         41:da:16:38:76:e4:7d:46:87:90:f9:98:98:74:cf:02:52:c7:
         7a:4e:22:b1:b4:f9:29:10:14:b4:0c:b5:39:2c:4b:b7:2a:5e:
         96:b3:65:28:67:d8:8e:a7:7f:59:5f:6b:97:34:e8:21:ec:6c:
         89:67:36:b7:63:2f:65:63:39:b3:02:35:df:68:90:71:5a:44:
         42:fb:70:e3:42:c6:d2:6b:c7:43:4d:87:80:dc:b5:e6:7c:2e:
         9f:08:f7:03:7f:4a:60:47:e9:45:07:9c:94:03:5f:79:0c:2a:
         53:f0:12:88:15:f7:0a:2b:c7:28:e6:3d:30:1c:96:cd:a3:1b:
         c5:30:96:af:4d:97:1d:f3:90:65:7f:ec:1c:b1:46:ea:f9:92:
         fc:6b:f8:49:20:e1:ef:e2:81:41:7c:a8:cd:71:09:14:66:63:
         b0:d4:fa:30:46:b1:2c:8f:9b:37:4b:98:ce:97:12:ce:6d:37:
         77:dd:4d:07:2e:f1:f4:aa:44:37:73:aa:a2:5f:f9:18:c5:6c:
         c4:30:5d:20:e1:75:d7:d4:a8:69:fc:a0:ec:fe:dc:fd:bb:29:
         c4:19:80:a4:d5:af:51:47:f8:9e:0e:49:50:af:8f:26:02:c6:
         d7:8e:7a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 09:20:15 2025 by rpki-client