This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/jzJk_mfseFF9ncgZLdTClK8_zIU.roa
File:                     jzJk_mfseFF9ncgZLdTClK8_zIU.roa (raw, json)
Hash identifier:          klOG7+XnANrN6nW8CjY0R1XSAlE3kaGx5+DUYqm/CDQ=
Subject key identifier:   8F:32:64:FE:67:EC:78:51:7D:9D:C8:19:2D:D4:C2:94:AF:3F:CC:85
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       DD
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/jzJk_mfseFF9ncgZLdTClK8_zIU.roa
Signing time:             Mon 01 Dec 2025 01:29:22 +0000
ROA not before:           Mon 01 Dec 2025 01:29:22 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2514
IP address blocks:        160.248.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 05:12:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221 (0xdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Dec  1 01:29:22 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=8F3264FE67EC78517D9DC8192DD4C294AF3FCC85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2e:59:8f:10:90:00:1e:55:b3:87:90:31:89:
                    8d:c2:3e:78:79:27:99:c6:5b:ee:ac:9d:f6:91:93:
                    7e:17:b1:c4:5f:db:74:76:53:e7:dc:6e:e7:f0:b7:
                    07:b9:7f:17:19:9a:86:d7:28:e7:3e:96:b0:67:84:
                    a0:c7:ca:0a:0c:ec:28:76:1f:aa:1a:6b:31:ed:5c:
                    50:1e:fe:31:99:c0:c9:1e:fc:d1:dd:89:e4:34:a5:
                    1b:ac:8e:05:b4:0c:b5:05:f8:09:01:b9:85:3f:47:
                    a7:5d:65:9e:1a:bd:6e:fe:d1:31:63:1d:6f:1b:f3:
                    f5:a4:08:0b:23:be:0e:20:c6:7d:08:4b:3b:90:11:
                    d9:62:50:ce:b8:80:51:a7:f1:20:6c:41:bc:c0:41:
                    1a:93:c9:e5:34:96:a1:85:ec:a0:ac:c4:c9:10:cb:
                    d0:24:0d:c1:7a:fe:29:3e:81:0c:3d:94:78:a2:ae:
                    2c:93:06:af:6f:a8:aa:b0:d0:3a:43:6e:90:ae:c9:
                    47:c5:f1:85:0e:e6:2f:b4:48:6a:c9:ef:cb:67:19:
                    95:22:4b:e6:cc:41:7a:2f:bf:99:cb:22:f8:f6:76:
                    13:47:75:2c:94:80:dd:b2:c4:df:b8:3e:47:96:db:
                    65:da:ad:07:f2:c9:31:ab:dd:bb:5b:c3:24:19:96:
                    66:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:32:64:FE:67:EC:78:51:7D:9D:C8:19:2D:D4:C2:94:AF:3F:CC:85
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/jzJk_mfseFF9ncgZLdTClK8_zIU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:48:89:f7:47:f9:66:da:46:98:5c:5b:7f:58:31:b3:8a:ae:
         e1:b7:bc:ac:b2:a0:a0:d4:38:04:b1:22:df:5b:22:93:18:29:
         78:64:b4:95:3e:7d:c1:2b:a2:72:d5:c0:9f:5d:81:ae:e9:67:
         8a:66:e3:b4:fc:2a:32:1f:b1:30:92:25:f7:a1:42:34:2e:89:
         43:e5:b9:e1:bd:c5:b5:df:a4:ed:83:f0:51:84:78:d1:35:2f:
         08:99:82:ba:44:2d:30:ca:3a:fa:2b:d0:f9:bb:28:4d:28:83:
         38:d8:e7:30:d8:64:ce:8d:24:38:37:05:3c:98:17:d9:71:24:
         ec:98:20:d1:2e:42:d1:81:7a:ef:8b:f8:71:38:18:e8:d9:09:
         8b:d4:2f:fe:ec:3c:12:d2:ec:b5:cc:8f:26:12:99:ae:37:67:
         e8:03:60:00:8e:8a:f6:af:f9:82:56:97:cf:94:60:cf:ac:7f:
         20:24:2a:f3:23:48:74:0f:2d:18:dc:57:4c:77:d8:f1:b7:32:
         29:2d:97:e3:3e:a1:f9:64:55:2a:88:87:e9:52:fd:37:e6:77:
         2f:b2:df:81:fc:2e:c5:db:31:b8:c6:aa:ba:51:c0:b3:14:95:
         89:90:fa:5d:18:8c:91:83:5d:c7:78:de:4f:2b:0f:12:10:a9:
         ad:46:3e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 09:25:05 2025 by rpki-client