This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/yRtuH5NPziDd0iD5oa86y6QIqWw.roa
File:                     yRtuH5NPziDd0iD5oa86y6QIqWw.roa (raw, json)
Hash identifier:          iiG443p1Vygz31a1LRRl+sHqAsR+ZlBeAgaEvhccdiY=
Subject key identifier:   C9:1B:6E:1F:93:4F:CE:20:DD:D2:20:F9:A1:AF:3A:CB:A4:08:A9:6C
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       D9
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/yRtuH5NPziDd0iD5oa86y6QIqWw.roa
Signing time:             Mon 01 Dec 2025 01:29:20 +0000
ROA not before:           Mon 01 Dec 2025 01:29:20 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2514
IP address blocks:        160.248.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 05:12:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 217 (0xd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Dec  1 01:29:20 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=C91B6E1F934FCE20DDD220F9A1AF3ACBA408A96C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cb:83:bd:94:4a:7a:f7:77:52:e0:8b:6b:a9:
                    5a:bb:4a:41:47:d8:64:e8:fa:11:8e:b8:bf:d4:26:
                    49:60:e6:1e:b6:46:f8:4b:7e:cd:cf:b2:a2:f7:1a:
                    af:d3:9a:38:9d:49:bc:1b:d9:e9:4d:f9:a5:d4:f9:
                    7c:c8:98:c3:1a:10:5d:71:19:7b:e8:dd:e2:1c:85:
                    44:d2:38:f8:93:d5:d6:e9:68:3b:2d:4f:47:70:37:
                    84:ea:99:e0:00:21:53:24:3d:0b:fa:8d:aa:9c:7a:
                    39:59:a6:01:87:90:c2:88:8a:be:22:1c:e1:7b:41:
                    0d:9b:2d:d4:12:00:20:25:fe:7a:79:25:d0:60:ad:
                    29:1d:15:01:0e:a6:bb:f6:ec:18:e6:c9:a9:18:0d:
                    e1:18:0d:36:8d:db:82:20:4f:46:57:b1:68:1b:3a:
                    77:4d:2f:ac:64:82:01:20:eb:9e:6e:8c:14:7f:76:
                    39:12:62:cc:ec:e6:20:9d:a2:28:9e:10:ee:90:60:
                    91:54:f1:e5:2a:ed:c9:55:22:16:cd:3d:cf:dd:28:
                    1c:05:e6:d3:fa:ac:9a:b3:f1:04:cf:91:b3:dc:c0:
                    ef:5c:a3:0b:ff:68:27:17:c8:50:24:a3:82:08:5c:
                    f8:00:89:7e:30:07:4f:2d:3d:90:4a:0f:ef:8f:ae:
                    fd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:1B:6E:1F:93:4F:CE:20:DD:D2:20:F9:A1:AF:3A:CB:A4:08:A9:6C
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/yRtuH5NPziDd0iD5oa86y6QIqWw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:14:56:92:fe:ce:07:0e:42:10:79:6c:de:aa:8b:4f:d8:80:
         aa:de:58:63:21:9b:9a:2e:54:60:0b:e8:f9:71:2a:9e:d6:9c:
         ce:80:38:09:25:2a:39:51:6c:81:49:6e:bc:10:ab:1b:c9:ba:
         6f:a4:49:2d:42:2f:b5:61:84:ed:1a:0e:33:24:25:3b:e6:1a:
         43:56:c6:52:c7:4a:22:f9:e7:55:8e:47:b5:aa:9d:c9:81:75:
         6e:c7:6c:e3:38:f1:73:44:32:42:6a:ad:b8:50:f9:e4:fa:6f:
         51:9d:8e:c9:9b:89:85:7c:f9:3b:81:bb:77:69:c5:0a:3a:58:
         36:38:f6:82:ff:29:bf:fb:a4:53:8e:a4:8f:45:10:4c:14:75:
         4a:c8:90:8c:d0:ad:d6:4d:34:88:a3:af:54:71:05:a4:dc:e4:
         bd:ff:2c:d8:b1:63:89:fa:cb:a1:9c:9b:eb:1e:67:94:7d:4d:
         a0:6a:a8:f1:2d:c2:99:42:5c:97:f8:65:c9:7c:ce:b2:b6:23:
         f9:21:82:22:99:22:27:a4:61:ff:25:85:66:4b:03:2b:6d:05:
         a9:79:7f:15:30:69:2b:62:72:aa:7f:f1:21:cc:c9:f4:c8:60:
         b9:31:7c:03:01:ef:40:45:47:01:77:96:03:1b:86:38:43:84:
         fc:79:8c:5c
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgICANkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDE0
MDBBQjg5QjZENzJGN0RCNDI0RjRBQUE4Q0NGRjY0MzhEM0Q0QTAeFw0yNTEyMDEw
MTI5MjBaFw0yNjExMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM5MUI2RTFGOTM0RkNF
MjBEREQyMjBGOUExQUYzQUNCQTQwOEE5NkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCay4O9lEp693dS4ItrqVq7SkFH2GTo+hGOuL/UJklg5h62RvhL
fs3PsqL3Gq/TmjidSbwb2elN+aXU+XzImMMaEF1xGXvo3eIchUTSOPiT1dbpaDst
T0dwN4TqmeAAIVMkPQv6jaqcejlZpgGHkMKIir4iHOF7QQ2bLdQSACAl/np5JdBg
rSkdFQEOprv27BjmyakYDeEYDTaN24IgT0ZXsWgbOndNL6xkggEg655ujBR/djkS
Yszs5iCdoiieEO6QYJFU8eUq7clVIhbNPc/dKBwF5tP6rJqz8QTPkbPcwO9cowv/
aCcXyFAko4IIXPgAiX4wB08tPZBKD++Prv2PAgMBAAGjggIiMIICHjAdBgNVHQ4E
FgQUyRtuH5NPziDd0iD5oa86y6QIqWwwHwYDVR0jBBgwFoAU0UAKuJttcvfbQk9K
qozP9kONPUowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzI5LzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtPTlBVby5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtP
TlBVby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yOS95UnR1SDVOUHppRGQwaUQ1b2E4Nnk2UUlxV3cucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAoPjLMA0GCSqGSIb3DQEBCwUAA4IBAQCXFFaS/s4HDkIQeWzeqotP2ICq3lhj
IZuaLlRgC+j5cSqe1pzOgDgJJSo5UWyBSW68EKsbybpvpEktQi+1YYTtGg4zJCU7
5hpDVsZSx0oi+edVjke1qp3JgXVux2zjOPFzRDJCaq24UPnk+m9RnY7Jm4mFfPk7
gbt3acUKOlg2OPaC/ym/+6RTjqSPRRBMFHVKyJCM0K3WTTSIo69UcQWk3OS9/yzY
sWOJ+suhnJvrHmeUfU2gaqjxLcKZQlyX+GXJfM6ytiP5IYIimSInpGH/JYVmSwMr
bQWpeX8VMGkrYnKqf/EhzMn0yGC5MXwDAe9ARUcBd5YDG4Y4Q4T8eYxc
-----END CERTIFICATE-----
Generated at Sun Dec 7 09:25:19 2025 by rpki-client