This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/v0MRwPLLZqso4FgYhcTgLY7jBKM.roa
File:                     v0MRwPLLZqso4FgYhcTgLY7jBKM.roa (raw, json)
Hash identifier:          tXbGsIycQSpqHbI9WF5ztM8xbrssps4ww57nrzH7G+A=
Subject key identifier:   BF:43:11:C0:F2:CB:66:AB:28:E0:58:18:85:C4:E0:2D:8E:E3:04:A3
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0515
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/v0MRwPLLZqso4FgYhcTgLY7jBKM.roa
Signing time:             Mon 01 Dec 2025 01:32:15 +0000
ROA not before:           Mon 01 Dec 2025 01:32:15 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:5c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1301 (0x515)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Dec  1 01:32:15 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=BF4311C0F2CB66AB28E0581885C4E02D8EE304A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c0:1f:71:cb:14:81:6d:0c:74:03:0d:3e:0e:
                    15:1e:c6:4d:86:b5:b1:b0:70:4c:5e:4d:1c:59:a8:
                    c1:e9:79:73:f9:06:68:43:1d:4b:52:39:9c:bf:4c:
                    24:8f:61:62:29:41:2b:97:83:47:a6:50:8d:72:a5:
                    76:90:b6:2c:e9:09:3f:84:dc:19:fa:59:81:85:d7:
                    d1:91:0d:e7:4a:50:12:e8:69:a8:9a:54:38:9f:0d:
                    d0:78:91:d5:8e:25:3e:d0:13:01:86:16:cb:27:5c:
                    8d:fb:75:82:89:01:ba:e0:4e:01:0d:19:65:0c:bf:
                    82:b2:45:bc:c6:bb:d8:2d:e6:29:1e:8d:7a:84:78:
                    75:49:6a:f4:f3:12:d8:47:6f:cf:3e:d5:b4:33:6c:
                    1e:35:e2:6f:49:ef:4e:02:8c:30:58:a7:33:c8:8c:
                    2a:0c:f1:a9:2e:84:26:39:9d:df:2d:69:6e:a9:8e:
                    db:bd:25:70:c7:52:4b:4d:47:c7:57:d7:9c:64:18:
                    07:aa:df:17:52:ea:e6:1e:c8:b5:28:33:01:b5:56:
                    63:13:83:7a:18:da:f7:ea:96:f0:1b:b6:2f:41:8d:
                    fc:4f:a6:54:bd:22:9a:55:46:74:dc:f1:94:63:f5:
                    c1:3b:04:42:ad:45:21:cd:54:14:2d:af:42:39:1f:
                    b2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:43:11:C0:F2:CB:66:AB:28:E0:58:18:85:C4:E0:2D:8E:E3:04:A3
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/v0MRwPLLZqso4FgYhcTgLY7jBKM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:5c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         7d:d9:48:1e:52:36:f1:f8:40:d9:0c:b1:1e:49:cb:50:3d:d8:
         1c:1f:7d:91:76:26:79:ff:51:8f:aa:7b:d0:1e:72:09:29:98:
         25:56:b3:31:fe:85:c2:f7:6f:f6:50:dc:94:62:ae:e8:10:95:
         95:5e:c3:70:b8:dd:b8:33:de:28:7f:f5:1a:80:25:15:3c:3b:
         88:8d:2a:32:bf:f9:f1:b1:04:80:ed:70:3d:58:ce:e6:ac:8f:
         6c:a9:11:10:38:1d:cd:87:f9:f0:88:82:b6:aa:a2:f7:84:96:
         1b:8c:a1:da:d8:6e:a3:c6:30:cb:2e:21:ee:33:fb:e9:11:ca:
         82:43:4c:0f:77:ef:76:a9:a9:2c:42:e1:6f:55:04:89:ed:0d:
         01:52:cc:5c:80:6b:a3:c7:0e:00:8f:71:89:17:1f:e3:f4:c2:
         01:a5:6b:a9:7b:c1:91:d1:d2:4f:5a:fc:82:e4:42:ee:5f:8c:
         8a:62:13:37:5f:46:e7:d9:c7:73:90:ca:5d:cd:5d:d4:f6:c5:
         b0:5e:80:b5:5f:a6:9e:4a:c3:90:aa:9f:ed:fa:cb:87:c6:30:
         4b:42:d5:94:25:40:e1:65:ba:4a:1e:62:0f:95:2b:cb:cf:dd:
         9f:6a:33:61:36:56:31:bf:64:41:84:a4:01:f5:07:6c:d0:87:
         e1:c2:4a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:31:40 2025 by rpki-client