This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30299/U5cjxAKWaFXIkQUUxaL01Ty22mI.roa
File:                     U5cjxAKWaFXIkQUUxaL01Ty22mI.roa (raw, json)
Hash identifier:          uol7F3u21GSAEFA74mbO2bZEbPTxOoKKWTv/QuE8weY=
Subject key identifier:   53:97:23:C4:02:96:68:55:C8:91:05:14:C5:A2:F4:D5:3C:B6:DA:62
Certificate issuer:       /CN=C441193AC56882F9FD638B6CA5F07811C61F16E0
Certificate serial:       2F
Authority key identifier: C4:41:19:3A:C5:68:82:F9:FD:63:8B:6C:A5:F0:78:11:C6:1F:16:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xEEZOsVogvn9Y4tspfB4EcYfFuA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30299/U5cjxAKWaFXIkQUUxaL01Ty22mI.roa
Signing time:             Mon 01 Dec 2025 01:34:14 +0000
ROA not before:           Mon 01 Dec 2025 01:34:14 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     131923
IP address blocks:        2401:5ac0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30299/xEEZOsVogvn9Y4tspfB4EcYfFuA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30299/xEEZOsVogvn9Y4tspfB4EcYfFuA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xEEZOsVogvn9Y4tspfB4EcYfFuA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 08:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C441193AC56882F9FD638B6CA5F07811C61F16E0
        Validity
            Not Before: Dec  1 01:34:14 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=539723C402966855C8910514C5A2F4D53CB6DA62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cc:7f:02:34:06:4a:89:cb:22:3d:a1:57:6e:
                    84:3f:85:72:e1:d2:68:35:22:76:99:8c:e8:2b:a5:
                    02:2f:1a:15:41:57:3b:89:23:71:4a:94:56:7a:bf:
                    16:10:3e:ff:98:75:13:24:a5:53:f3:71:ba:8a:37:
                    fa:6f:5f:98:38:ae:cc:e7:1f:b2:b9:3a:12:65:9b:
                    36:25:ea:77:57:c9:3c:cf:20:05:c1:4e:97:d4:03:
                    9e:5b:3f:3a:10:9b:bf:a6:42:ea:6c:6a:c4:05:de:
                    29:bb:31:fd:5d:2e:1f:81:ec:a1:e0:eb:c8:3c:2b:
                    9a:86:ba:fc:2d:50:b4:6d:f8:c0:54:54:2f:d2:ae:
                    da:96:91:f9:57:f3:6a:7a:54:e0:7a:b4:7e:54:56:
                    a8:43:07:16:9f:b1:df:56:55:b0:50:45:62:19:5b:
                    7b:88:c3:8f:aa:bc:53:65:97:9e:40:21:bb:eb:fc:
                    5c:bb:30:fd:ea:ce:87:8f:8f:8b:c0:5d:18:a3:49:
                    5a:dd:a0:ad:05:39:5e:34:76:85:b2:dd:25:9b:f5:
                    d0:6a:03:64:f0:d5:87:04:d1:26:a9:63:a7:f9:a8:
                    06:3f:28:d7:52:60:a9:c7:7b:08:0b:ac:40:8c:9f:
                    d9:cf:2f:48:78:a8:b4:7f:34:93:7a:1e:96:d4:72:
                    9c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:97:23:C4:02:96:68:55:C8:91:05:14:C5:A2:F4:D5:3C:B6:DA:62
            X509v3 Authority Key Identifier:
                keyid:C4:41:19:3A:C5:68:82:F9:FD:63:8B:6C:A5:F0:78:11:C6:1F:16:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30299/xEEZOsVogvn9Y4tspfB4EcYfFuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xEEZOsVogvn9Y4tspfB4EcYfFuA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30299/U5cjxAKWaFXIkQUUxaL01Ty22mI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:5ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:98:16:6b:ae:c5:f9:d3:59:4f:f0:f5:a9:44:98:a3:5b:3e:
         b6:b2:b0:5d:2f:f4:71:6a:5b:08:47:33:12:93:c9:63:4e:3c:
         96:da:b1:cb:58:eb:a0:bf:62:bb:dc:cc:88:dd:ec:20:aa:67:
         f2:7c:73:e6:72:71:23:5b:33:2a:bf:d4:70:7a:ad:e4:a5:30:
         90:2f:e5:8d:1d:fc:30:d0:fc:fa:8d:7a:14:ce:5c:7a:a3:bb:
         47:76:52:1c:45:1a:fe:1f:4f:03:b8:03:b5:9e:08:e9:d6:ad:
         e2:b1:3c:60:04:60:ce:c7:f9:0b:e8:6a:a7:aa:f8:8f:c3:52:
         0e:23:de:ce:61:77:3d:00:52:e0:2e:50:9b:f0:f4:8c:b2:5e:
         83:15:80:37:9b:3a:6d:18:43:d2:f9:ad:ea:43:60:e3:bb:ce:
         cf:4c:1f:f4:b2:c3:c3:1b:58:92:d9:87:ac:df:91:08:28:3b:
         d6:a5:dc:8a:6d:ab:7c:50:c2:bf:4e:b3:93:45:22:0e:89:0e:
         aa:d6:ca:30:98:3b:ab:17:87:7b:c8:28:93:4f:5d:ea:29:ef:
         f3:31:1f:eb:f3:ef:0d:b7:40:dc:eb:82:0e:25:31:1a:8b:e9:
         39:d1:15:27:d7:d9:1c:a1:38:55:88:e1:e3:ad:53:87:f2:7b:
         c3:90:47:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 12:31:11 2025 by rpki-client