This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/v9SuOeCBYCs6KO4QBOm-9NLlrfI.roa
File:                     v9SuOeCBYCs6KO4QBOm-9NLlrfI.roa (raw, json)
Hash identifier:          LiVSCmxG6Ge8VwzSEClfJyOxSS4YYS55fvGeicFuJvQ=
Subject key identifier:   BF:D4:AE:39:E0:81:60:2B:3A:28:EE:10:04:E9:BE:F4:D2:E5:AD:F2
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0516
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/v9SuOeCBYCs6KO4QBOm-9NLlrfI.roa
Signing time:             Mon 01 Dec 2025 01:32:15 +0000
ROA not before:           Mon 01 Dec 2025 01:32:15 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:5e00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1302 (0x516)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Dec  1 01:32:15 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=BFD4AE39E081602B3A28EE1004E9BEF4D2E5ADF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f2:c6:95:c8:7d:94:c7:e9:c1:10:cf:60:37:
                    96:b6:0d:6f:14:08:81:46:19:2d:58:43:c8:11:d5:
                    9e:11:46:2a:4b:2c:7a:a2:1e:08:f3:6d:fe:8d:9a:
                    43:5f:c5:a9:ce:55:60:1a:08:b0:dd:75:35:d9:c1:
                    f8:5d:ac:b3:fe:94:7e:52:14:34:94:3a:8e:cf:90:
                    d4:15:98:af:f0:43:be:6a:66:7b:6b:98:8e:7c:48:
                    57:64:46:94:9b:7e:78:cf:de:44:b4:26:a8:76:88:
                    7d:9c:2c:31:aa:4c:fe:6b:f9:93:fb:bc:b2:77:b0:
                    91:cb:41:7f:9b:21:a1:bc:e9:07:b6:77:be:f7:5b:
                    6c:b9:81:12:8f:79:47:f8:14:64:a6:08:29:68:b5:
                    7b:11:41:83:28:5f:78:b9:76:7b:20:39:65:06:c2:
                    13:67:18:5c:56:10:d2:58:05:96:db:d5:90:a9:3d:
                    06:b8:3e:a7:10:e2:b5:73:7d:af:6c:d5:a3:51:0b:
                    ae:70:e9:22:cb:35:b7:ad:86:b2:7b:3a:2f:96:d4:
                    78:91:41:b7:ea:36:c4:f0:22:15:88:42:a7:4b:fb:
                    ea:c2:52:15:97:cd:32:a3:f3:18:44:98:19:5c:79:
                    46:c1:57:50:15:41:e5:ab:0c:c5:62:6a:a9:42:fb:
                    0c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D4:AE:39:E0:81:60:2B:3A:28:EE:10:04:E9:BE:F4:D2:E5:AD:F2
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/v9SuOeCBYCs6KO4QBOm-9NLlrfI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:5e00::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:35:c6:78:66:17:86:65:dc:09:90:cd:a7:27:c9:02:26:17:
         f5:94:27:54:17:d9:64:44:c3:c7:fe:72:ed:85:3a:ba:df:5e:
         c2:fb:f5:49:fa:1f:a7:5c:93:20:9d:7d:a3:82:d9:65:fa:78:
         45:86:a8:a0:fe:00:8e:1d:37:19:90:23:06:a8:94:34:1a:69:
         12:68:a3:f8:a5:b2:7f:86:26:dc:cd:ab:69:7f:a3:31:c5:e2:
         41:bc:06:50:3b:fd:39:b3:e7:fe:72:08:c6:92:20:48:91:c8:
         15:64:a3:98:57:d3:33:1a:7d:5d:6b:3b:41:6f:50:4a:39:e3:
         77:ba:b3:5e:12:39:0d:05:da:7a:d8:42:a5:f1:25:f9:a5:8a:
         bc:89:33:64:7e:4b:e6:91:66:ab:58:eb:1e:d9:0b:65:ba:f0:
         59:1b:6f:98:a7:07:d3:a2:8a:4b:00:1b:b8:6a:62:21:11:48:
         a8:a3:f5:3a:22:39:d9:ae:ba:29:11:69:a6:f9:96:56:72:cc:
         2f:a3:02:95:da:14:2a:ab:14:72:8d:60:e8:11:e9:7b:c8:c8:
         e7:4e:92:34:94:59:0d:57:02:7b:b2:42:da:e9:a7:96:60:f8:
         a2:74:5c:d6:76:7e:e6:93:b3:f3:c5:a0:f3:11:3f:61:a2:ce:
         43:97:3e:ba
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgICBRYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNTEyMDEw
MTMyMTVaFw0yNjExMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEJGRDRBRTM5RTA4MTYw
MkIzQTI4RUUxMDA0RTlCRUY0RDJFNUFERjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDc8saVyH2Ux+nBEM9gN5a2DW8UCIFGGS1YQ8gR1Z4RRipLLHqi
Hgjzbf6NmkNfxanOVWAaCLDddTXZwfhdrLP+lH5SFDSUOo7PkNQVmK/wQ75qZntr
mI58SFdkRpSbfnjP3kS0Jqh2iH2cLDGqTP5r+ZP7vLJ3sJHLQX+bIaG86Qe2d773
W2y5gRKPeUf4FGSmCClotXsRQYMoX3i5dnsgOWUGwhNnGFxWENJYBZbb1ZCpPQa4
PqcQ4rVzfa9s1aNRC65w6SLLNbethrJ7Oi+W1HiRQbfqNsTwIhWIQqdL++rCUhWX
zTKj8xhEmBlceUbBV1AVQeWrDMViaqlC+wyBAgMBAAGjggIrMIICJzAdBgNVHQ4E
FgQUv9SuOeCBYCs6KO4QBOm+9NLlrfIwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS92OVN1T2VDQllDczZLTzRRQk9tLTlOTGxyZkku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAoAYV4AMA0GCSqGSIb3DQEBCwUAA4IBAQCCNcZ4ZheGZdwJkM2n
J8kCJhf1lCdUF9lkRMPH/nLthTq6317C+/VJ+h+nXJMgnX2jgtll+nhFhqig/gCO
HTcZkCMGqJQ0GmkSaKP4pbJ/hibczatpf6MxxeJBvAZQO/05s+f+cgjGkiBIkcgV
ZKOYV9MzGn1daztBb1BKOeN3urNeEjkNBdp62EKl8SX5pYq8iTNkfkvmkWarWOse
2QtluvBZG2+YpwfToopLABu4amIhEUioo/U6IjnZrropEWmm+ZZWcswvowKV2hQq
qxRyjWDoEel7yMjnTpI0lFkNVwJ7skLa6aeWYPiidFzWdn7mk7PzxaDzET9hos5D
lz66
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:32:52 2025 by rpki-client