This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30419/nnECCHBXlBzIJcK6pVcA0xNaDvI.roa
File:                     nnECCHBXlBzIJcK6pVcA0xNaDvI.roa (raw, json)
Hash identifier:          fuEWXULdSQWKMOwTKclyNvFZySpQ1w4X2lsODvWLwmA=
Subject key identifier:   9E:71:02:08:70:57:94:1C:C8:25:C2:BA:A5:57:00:D3:13:5A:0E:F2
Certificate issuer:       /CN=5C94D460126D3E224B1DBD6646FAE9243A60EC41
Certificate serial:       22
Authority key identifier: 5C:94:D4:60:12:6D:3E:22:4B:1D:BD:66:46:FA:E9:24:3A:60:EC:41
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XJTUYBJtPiJLHb1mRvrpJDpg7EE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30419/nnECCHBXlBzIJcK6pVcA0xNaDvI.roa
Signing time:             Mon 01 Dec 2025 01:32:37 +0000
ROA not before:           Mon 01 Dec 2025 01:32:37 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     150366
IP address blocks:        2400:fba0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30419/XJTUYBJtPiJLHb1mRvrpJDpg7EE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30419/XJTUYBJtPiJLHb1mRvrpJDpg7EE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XJTUYBJtPiJLHb1mRvrpJDpg7EE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 05:11:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C94D460126D3E224B1DBD6646FAE9243A60EC41
        Validity
            Not Before: Dec  1 01:32:37 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=9E7102087057941CC825C2BAA55700D3135A0EF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f8:2f:92:99:10:48:23:8a:62:a1:5d:2f:15:
                    08:a5:88:af:03:60:4e:03:76:3c:d8:54:9a:b8:de:
                    86:d3:a0:5d:58:aa:e4:13:8c:66:ad:be:6d:3d:49:
                    6a:98:d0:d9:12:a1:1f:1e:ec:0e:3f:f2:ca:02:cb:
                    89:59:37:a4:44:8e:74:0c:1a:31:b3:55:9f:fd:c4:
                    13:fb:f2:a6:20:c6:97:a2:92:46:6d:67:03:41:cc:
                    5a:5e:6c:61:e6:8a:2b:73:bc:e9:e2:c7:3e:6c:89:
                    30:66:48:7c:44:3c:1b:f6:85:63:3e:e0:dc:47:65:
                    98:bb:e5:51:10:3f:8e:34:ba:34:28:5a:06:4d:78:
                    bf:d5:af:de:6e:2f:04:19:4d:89:e6:e5:6c:15:bd:
                    60:62:ea:21:1d:fe:cb:01:fe:cb:56:3a:56:6a:c8:
                    f1:db:b9:4d:63:ec:21:42:6f:65:46:be:58:17:e4:
                    47:d0:f9:3f:fc:24:63:9c:20:5d:d5:08:5e:d1:19:
                    35:f3:50:92:75:f2:ca:77:83:85:8b:c2:19:6a:59:
                    74:6f:2f:19:fc:20:a8:4f:a2:be:a5:17:50:fb:25:
                    46:59:c1:3f:66:a0:41:e7:13:4a:67:20:91:06:49:
                    dc:89:90:74:83:59:fc:dc:7c:b1:ed:53:ae:1e:31:
                    f8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:71:02:08:70:57:94:1C:C8:25:C2:BA:A5:57:00:D3:13:5A:0E:F2
            X509v3 Authority Key Identifier:
                keyid:5C:94:D4:60:12:6D:3E:22:4B:1D:BD:66:46:FA:E9:24:3A:60:EC:41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30419/XJTUYBJtPiJLHb1mRvrpJDpg7EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XJTUYBJtPiJLHb1mRvrpJDpg7EE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30419/nnECCHBXlBzIJcK6pVcA0xNaDvI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:fba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:a1:d5:c8:d6:d3:1b:40:e7:17:e0:3d:35:9c:8a:eb:ac:92:
         a0:af:8c:6b:a2:37:85:c0:b3:17:4e:2a:57:35:3b:23:c5:61:
         96:cd:49:fa:da:57:f9:94:2f:23:29:61:5f:00:b4:e7:1e:5b:
         e2:2d:38:4e:d0:8c:c0:66:01:46:6b:72:38:dc:bb:31:0a:13:
         80:68:8c:f1:19:e8:6b:4c:b7:0c:ee:ba:b3:81:cf:b7:2d:73:
         72:f5:c5:3e:3d:e4:39:12:2d:8c:9f:a6:3b:2d:05:f2:1b:1b:
         3f:72:d2:21:e7:bb:8b:ab:dd:79:42:d1:17:2a:b1:1a:3e:5f:
         df:b3:1b:70:42:d4:78:4e:b3:f2:92:9a:ed:eb:f9:30:ef:44:
         d8:37:95:40:96:74:0e:38:cd:8b:bc:42:50:02:94:da:52:6a:
         6f:c4:1d:76:b8:c3:2b:14:c6:6c:10:25:ab:94:f3:9f:49:fd:
         64:ea:d8:53:3e:c7:27:38:ba:ad:b9:f2:ac:ea:3d:0a:fd:47:
         09:55:82:c4:88:a4:f0:ea:e6:a3:b1:57:93:ea:da:13:2b:3e:
         da:49:80:a0:2f:40:ef:1f:c1:cc:ee:0d:41:5d:d9:c8:87:d8:
         a4:88:9d:2e:b6:53:f7:3c:de:91:cf:38:34:ac:ee:e3:28:c1:
         0a:2e:fd:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:20:07 2025 by rpki-client