This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30438/IvXOr25ZCaZKTOOWTSP8PlZwbqI.roa
File:                     IvXOr25ZCaZKTOOWTSP8PlZwbqI.roa (raw, json)
Hash identifier:          B6uwYMat0bjDbsYSzEKBkxBHP95j/znKWPa+QcDpzEk=
Subject key identifier:   22:F5:CE:AF:6E:59:09:A6:4A:4C:E3:96:4D:23:FC:3E:56:70:6E:A2
Certificate issuer:       /CN=BF791915BC4356AAB7A6EFCD6393E1930B502728
Certificate serial:       13
Authority key identifier: BF:79:19:15:BC:43:56:AA:B7:A6:EF:CD:63:93:E1:93:0B:50:27:28
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/v3kZFbxDVqq3pu_NY5PhkwtQJyg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30438/IvXOr25ZCaZKTOOWTSP8PlZwbqI.roa
Signing time:             Mon 10 Nov 2025 12:50:28 +0000
ROA not before:           Mon 10 Nov 2025 12:50:28 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     1008
IP address blocks:        2401:a920::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30438/v3kZFbxDVqq3pu_NY5PhkwtQJyg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30438/v3kZFbxDVqq3pu_NY5PhkwtQJyg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/v3kZFbxDVqq3pu_NY5PhkwtQJyg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 11:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF791915BC4356AAB7A6EFCD6393E1930B502728
        Validity
            Not Before: Nov 10 12:50:28 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=22F5CEAF6E5909A64A4CE3964D23FC3E56706EA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0b:b9:74:08:5d:de:93:42:c4:51:28:eb:a2:
                    83:41:d4:2c:71:0e:7b:e7:46:53:03:4c:bc:0e:56:
                    83:54:64:c0:a6:33:f9:63:aa:3e:1b:48:d7:9b:6f:
                    33:4f:53:73:ad:60:5e:ed:b7:aa:7a:42:47:e0:c8:
                    c1:0a:32:da:2b:4d:b1:87:9c:7e:91:42:d2:6e:9b:
                    76:c4:26:a5:2e:72:cb:2d:4e:c0:43:6b:5b:2c:f8:
                    47:2e:97:dd:16:9e:17:62:bd:0b:dc:4d:f9:3e:41:
                    c1:25:bc:1c:4b:7c:51:05:e3:cc:10:e7:06:67:ba:
                    47:76:5f:82:8a:de:67:6a:81:f6:c8:a1:78:72:4f:
                    df:a2:13:3b:cb:ef:2b:62:29:e7:70:b2:fe:77:02:
                    a6:da:1b:ce:e9:f0:05:52:1b:39:ae:7c:32:71:5b:
                    ec:0e:37:ea:40:38:c1:43:06:1e:f7:94:35:c2:fa:
                    a8:ce:b9:89:c6:01:73:02:75:a4:0c:b2:dc:55:a2:
                    86:e4:2d:a1:6d:5e:fe:e5:f7:6d:d8:66:53:37:80:
                    62:a8:7b:95:72:fe:da:c9:e6:7d:c8:14:7f:87:94:
                    cd:e5:4c:43:c4:23:33:74:84:c8:dc:40:ae:21:df:
                    31:f5:f3:52:54:96:57:d9:20:f8:31:6d:cb:5d:7f:
                    23:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F5:CE:AF:6E:59:09:A6:4A:4C:E3:96:4D:23:FC:3E:56:70:6E:A2
            X509v3 Authority Key Identifier:
                keyid:BF:79:19:15:BC:43:56:AA:B7:A6:EF:CD:63:93:E1:93:0B:50:27:28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30438/v3kZFbxDVqq3pu_NY5PhkwtQJyg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/v3kZFbxDVqq3pu_NY5PhkwtQJyg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30438/IvXOr25ZCaZKTOOWTSP8PlZwbqI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:a920::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:68:bb:76:2f:5f:d0:13:4d:d4:e7:87:91:ac:d4:4f:72:f0:
         0b:96:a3:f1:27:95:7d:1c:85:1e:c7:a1:27:0f:b8:f0:0f:28:
         ec:8b:a9:b8:5e:37:b6:8b:a1:99:a7:4e:a9:ba:fb:6b:23:f4:
         d4:9f:a3:98:d9:18:c1:3a:be:31:e1:fb:32:74:29:45:e4:e2:
         dd:cd:8c:3e:c8:6f:14:b2:f7:be:8a:a2:f4:78:fd:86:a0:e6:
         f4:35:bb:18:ec:f6:a8:35:bb:80:3e:f7:08:fb:47:2b:2d:8b:
         84:a0:c9:41:b1:fa:fa:c9:a1:e0:eb:00:c5:45:41:ae:9f:79:
         d0:a1:a0:19:ce:24:91:93:9a:13:e0:2b:d4:4a:a2:56:e3:fc:
         c8:ee:50:a0:ca:64:e0:a0:b8:89:27:36:34:eb:9f:68:5b:1e:
         24:40:23:ef:af:23:e0:fb:e2:5c:dc:c3:d7:49:2f:53:85:34:
         60:50:30:f2:c9:5c:91:6f:77:41:4d:c9:4f:35:44:9b:1b:de:
         80:37:00:61:d3:cd:b5:73:8d:62:ce:17:f1:ce:9f:0f:07:6e:
         db:2c:e2:5f:01:b7:42:04:04:9f:4d:e5:6d:c3:0e:cb:6b:80:
         e0:28:6d:68:75:31:3a:b0:70:c6:ae:67:71:13:2c:9c:09:85:
         d0:50:85:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:30:01 2025 by rpki-client