This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/r_0szxNW4yKw1ba6Sx85a2UaQ6I.roa
File:                     r_0szxNW4yKw1ba6Sx85a2UaQ6I.roa (raw, json)
Hash identifier:          F06ne6s7KwsMthku3ZoSWyVTBPINhLW4UP/PBnaGuss=
Subject key identifier:   AF:FD:2C:CF:13:56:E3:22:B0:D5:B6:BA:4B:1F:39:6B:65:1A:43:A2
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       E1
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/r_0szxNW4yKw1ba6Sx85a2UaQ6I.roa
Signing time:             Mon 01 Dec 2025 01:29:24 +0000
ROA not before:           Mon 01 Dec 2025 01:29:24 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2514
IP address blocks:        160.248.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 05:12:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 225 (0xe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Dec  1 01:29:24 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=AFFD2CCF1356E322B0D5B6BA4B1F396B651A43A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c0:de:c1:c0:70:f2:21:78:be:6d:67:90:00:
                    05:10:e0:a0:78:20:17:80:7b:77:be:e9:58:c9:ad:
                    18:0a:79:60:7f:dc:b5:9c:11:d4:7a:71:13:3f:23:
                    e4:8d:51:5c:b3:e1:fc:2d:55:bc:88:75:36:2f:f5:
                    4e:97:6f:42:88:0e:87:b6:08:a6:a2:ee:a6:47:03:
                    12:95:49:0d:bc:85:29:be:52:8b:c4:5b:5f:28:ff:
                    97:aa:57:dd:62:95:19:27:17:c8:cc:e3:13:b2:ac:
                    ae:7a:e8:79:ed:c1:84:bf:6c:78:00:16:8b:3f:ac:
                    f7:e5:33:94:02:83:7a:a0:b7:04:bf:6d:32:83:0d:
                    8f:3e:d3:32:96:1c:47:3d:f3:0d:bb:e1:31:71:10:
                    61:a8:93:d6:c4:98:84:1c:77:08:8b:04:29:a2:01:
                    12:75:45:25:f1:0b:b9:24:72:7a:57:83:0f:58:6e:
                    4a:7d:7d:9e:6e:4e:24:9c:6d:c1:28:26:94:8a:f2:
                    19:cf:92:1e:17:be:01:df:02:75:3e:51:1f:fa:5a:
                    b7:14:f4:0b:25:5e:3e:c5:85:a4:33:ed:1b:27:ac:
                    ab:e7:e4:6e:55:fb:58:a2:a9:fe:5a:2c:6c:0c:27:
                    c7:2b:af:f9:cf:b6:e8:7a:f4:87:ce:93:ee:4c:cf:
                    9e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:FD:2C:CF:13:56:E3:22:B0:D5:B6:BA:4B:1F:39:6B:65:1A:43:A2
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/r_0szxNW4yKw1ba6Sx85a2UaQ6I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:0e:32:67:b8:af:62:65:cd:4e:05:1e:b8:06:e4:7f:00:b1:
         06:d2:f2:04:bf:63:23:8c:38:5a:ca:77:d1:b3:cc:9b:f3:6a:
         78:bc:62:30:5d:5d:6e:b5:70:08:c9:d4:c8:67:d4:b9:96:1a:
         e2:bb:17:be:86:a4:f6:bc:07:73:9a:30:04:8c:3c:41:e5:1f:
         b3:37:4d:0e:d4:e0:30:a4:71:50:46:e5:30:3a:fa:58:b9:c2:
         a2:d0:90:92:bb:76:54:23:8b:e5:a2:a5:b3:15:14:e3:c6:bd:
         c7:e0:0d:0f:97:bf:df:72:8d:4c:bb:45:20:78:98:25:9b:29:
         2d:50:51:dd:10:82:36:64:40:40:64:f6:c3:6c:fd:00:d0:4d:
         e9:c1:cf:62:85:2a:bd:1d:8c:eb:0a:33:30:b4:3e:67:e9:02:
         03:2d:70:80:05:b7:1d:7c:95:40:4b:b0:76:24:3c:17:cf:37:
         91:51:f5:e4:12:f1:ff:2d:23:0b:0d:7c:55:6b:c7:d2:c5:60:
         e7:77:3e:61:3a:48:0a:17:fe:1b:70:05:da:76:80:35:ab:f6:
         6e:93:a5:c8:c6:d8:68:65:3d:b3:0b:2a:b5:c5:4a:47:4a:ab:
         80:6d:2e:c6:19:d2:1a:3c:8d:47:34:d6:19:e8:a6:d9:0b:bb:
         71:01:dc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 09:25:19 2025 by rpki-client