This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30040/7uwN90HvmjOPvf6JmHYgHgWZ0iE.roa
File:                     7uwN90HvmjOPvf6JmHYgHgWZ0iE.roa (raw, json)
Hash identifier:          yKf9EAshRQu02Fpzx2qfdlG8NTkyaMotnEDbPrRrGh0=
Subject key identifier:   EE:EC:0D:F7:41:EF:9A:33:8F:BD:FE:89:98:76:20:1E:05:99:D2:21
Certificate issuer:       /CN=5DEFF9E1A97D46CCDC12F606EEB38A3E64DBC81F
Certificate serial:       36
Authority key identifier: 5D:EF:F9:E1:A9:7D:46:CC:DC:12:F6:06:EE:B3:8A:3E:64:DB:C8:1F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xe_54al9RszcEvYG7rOKPmTbyB8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/7uwN90HvmjOPvf6JmHYgHgWZ0iE.roa
Signing time:             Mon 01 Dec 2025 01:34:30 +0000
ROA not before:           Mon 01 Dec 2025 01:34:30 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     9619
IP address blocks:        2001:cf8:acf::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/Xe_54al9RszcEvYG7rOKPmTbyB8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/Xe_54al9RszcEvYG7rOKPmTbyB8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xe_54al9RszcEvYG7rOKPmTbyB8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 05:11:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DEFF9E1A97D46CCDC12F606EEB38A3E64DBC81F
        Validity
            Not Before: Dec  1 01:34:30 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=EEEC0DF741EF9A338FBDFE899876201E0599D221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:60:73:30:11:56:d2:19:3a:07:f7:4e:86:58:
                    41:df:1e:f6:7e:70:bb:76:62:c7:18:aa:ce:dc:5c:
                    24:92:e0:5a:e6:84:b1:90:52:2f:18:69:12:18:7b:
                    57:fb:19:a0:63:1a:fa:f8:be:fd:6f:68:3b:1e:11:
                    c1:aa:4b:2d:27:c8:76:1a:8e:b0:f4:7a:4f:da:62:
                    2a:e0:e2:1c:d7:7a:c1:a8:0e:a7:76:02:81:b6:94:
                    51:78:ca:b6:09:e0:ac:66:d6:50:a0:16:9e:9b:46:
                    71:64:bc:16:c9:20:09:4e:d3:5d:e7:02:1c:d2:9e:
                    f6:9d:fe:8c:db:09:68:63:14:50:78:de:5d:56:22:
                    8f:35:27:0f:21:3b:1a:3c:31:c6:5d:c8:b7:b9:85:
                    a1:c0:3c:4f:dd:e4:b2:c4:ea:5e:d1:37:54:08:5e:
                    62:6e:ce:86:b0:61:06:48:70:ec:ab:5d:25:e9:4f:
                    84:52:f7:e1:1c:79:e5:88:05:83:1e:bc:ab:8e:9b:
                    35:3d:1c:66:09:d8:dd:22:d4:33:79:c1:bb:66:17:
                    75:8a:6d:a0:65:20:81:8d:3d:2d:aa:a2:24:01:af:
                    bf:0c:98:a3:a8:70:08:d8:f4:f3:70:0b:8d:f0:2e:
                    44:33:e5:ca:2e:e1:4b:68:71:ff:d8:ec:b3:41:c5:
                    bb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:EC:0D:F7:41:EF:9A:33:8F:BD:FE:89:98:76:20:1E:05:99:D2:21
            X509v3 Authority Key Identifier:
                keyid:5D:EF:F9:E1:A9:7D:46:CC:DC:12:F6:06:EE:B3:8A:3E:64:DB:C8:1F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/Xe_54al9RszcEvYG7rOKPmTbyB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xe_54al9RszcEvYG7rOKPmTbyB8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/7uwN90HvmjOPvf6JmHYgHgWZ0iE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:cf8:acf::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:27:c2:6c:50:1c:0e:41:1f:14:d6:5d:db:92:c7:42:78:85:
         31:0a:6f:a3:a1:86:1f:1d:0b:6d:e3:b9:46:a4:0e:63:73:bb:
         df:76:20:91:26:f9:c3:ce:50:b5:80:04:df:ad:72:bc:8a:03:
         b7:57:db:b1:bd:42:15:ae:30:f7:a3:11:de:33:e6:71:5c:1e:
         b9:32:5b:67:f4:8c:d3:f7:94:81:54:0b:d7:d6:f2:72:96:13:
         37:7e:0e:e2:19:b6:ce:e1:c9:8e:b8:c2:85:c1:83:20:af:75:
         ce:b9:4c:99:5e:01:bb:27:53:fa:83:c4:23:09:e5:c7:77:3c:
         a8:80:c5:de:8a:0d:7c:19:9d:f8:f0:d7:ec:57:00:9c:aa:a4:
         e4:0a:66:00:5c:36:c1:cb:26:19:43:19:8a:4a:b2:aa:51:da:
         8e:c9:8e:50:10:28:be:3f:d3:e4:ab:e7:16:93:ec:92:59:81:
         91:6d:4e:bf:06:25:08:d6:35:55:a5:6c:c9:d2:d3:8e:4e:28:
         cd:51:ff:47:02:b5:fa:77:8d:1b:11:34:de:1e:df:35:94:18:
         c6:9b:b0:da:6a:33:e8:6e:18:89:b9:c7:7b:90:e1:b8:5e:d7:
         0a:fc:f9:22:a7:f9:9d:f6:ba:a7:ba:6d:12:1b:16:ab:b8:c6:
         5a:fc:2b:5b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgIBNjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1REVG
RjlFMUE5N0Q0NkNDREMxMkY2MDZFRUIzOEEzRTY0REJDODFGMB4XDTI1MTIwMTAx
MzQzMFoXDTI2MTExNTAxMzAwMlowMzExMC8GA1UEAxMoRUVFQzBERjc0MUVGOUEz
MzhGQkRGRTg5OTg3NjIwMUUwNTk5RDIyMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANZgczARVtIZOgf3ToZYQd8e9n5wu3ZixxiqztxcJJLgWuaEsZBS
LxhpEhh7V/sZoGMa+vi+/W9oOx4RwapLLSfIdhqOsPR6T9piKuDiHNd6wagOp3YC
gbaUUXjKtgngrGbWUKAWnptGcWS8FskgCU7TXecCHNKe9p3+jNsJaGMUUHjeXVYi
jzUnDyE7Gjwxxl3It7mFocA8T93kssTqXtE3VAheYm7OhrBhBkhw7KtdJelPhFL3
4Rx55YgFgx68q46bNT0cZgnY3SLUM3nBu2YXdYptoGUggY09LaqiJAGvvwyYo6hw
CNj083ALjfAuRDPlyi7hS2hx/9jss0HFu5UCAwEAAaOCAiswggInMB0GA1UdDgQW
BBTu7A33Qe+aM4+9/omYdiAeBZnSITAfBgNVHSMEGDAWgBRd7/nhqX1GzNwS9gbu
s4o+ZNvIHzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwNDAvWGVfNTRhbDlSc3pjRXZZRzdyT0tQbVRieUI4LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWGVfNTRhbDlSc3pjRXZZRzdyT0tQ
bVRieUI4LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMDQwLzd1d045MEh2bWpPUHZmNkptSFlnSGdXWjBpRS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAgAQz4Cs8wDQYJKoZIhvcNAQELBQADggEBAHgnwmxQHA5BHxTWXduS
x0J4hTEKb6Ohhh8dC23juUakDmNzu992IJEm+cPOULWABN+tcryKA7dX27G9QhWu
MPejEd4z5nFcHrkyW2f0jNP3lIFUC9fW8nKWEzd+DuIZts7hyY64woXBgyCvdc65
TJleAbsnU/qDxCMJ5cd3PKiAxd6KDXwZnfjw1+xXAJyqpOQKZgBcNsHLJhlDGYpK
sqpR2o7JjlAQKL4/0+Sr5xaT7JJZgZFtTr8GJQjWNVWlbMnS045OKM1R/0cCtfp3
jRsRNN4e3zWUGMabsNpqM+huGIm5x3uQ4bhe1wr8+SKn+Z32uqe6bRIbFqu4xlr8
K1s=
-----END CERTIFICATE-----
Generated at Sun Dec 7 07:42:10 2025 by rpki-client