This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/-nOq_tzEO3pmD1tg5w8gdWqm-OE.roa
File:                     -nOq_tzEO3pmD1tg5w8gdWqm-OE.roa (raw, json)
Hash identifier:          Sr5DK39F5yXVA50ZEMoGHxCjYo/LZ+nnxPMr+N5eBiA=
Subject key identifier:   FA:73:AA:FE:DC:C4:3B:7A:66:0F:5B:60:E7:0F:20:75:6A:A6:F8:E1
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       049E
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/-nOq_tzEO3pmD1tg5w8gdWqm-OE.roa
Signing time:             Mon 01 Dec 2025 01:31:46 +0000
ROA not before:           Mon 01 Dec 2025 01:31:46 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     10013
IP address blocks:        61.192.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1182 (0x49e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Dec  1 01:31:46 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=FA73AAFEDCC43B7A660F5B60E70F20756AA6F8E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a1:a1:21:0c:37:91:2a:d2:89:c6:f6:af:15:
                    76:6d:ea:e7:3a:d2:41:a2:80:13:4b:20:56:b7:dc:
                    c3:9f:ed:3d:fc:0b:c2:a8:55:65:3c:95:3e:77:c1:
                    1f:01:ac:a6:1d:9c:56:c5:b0:cf:de:83:fa:a7:72:
                    6e:7b:ab:24:1e:1b:e0:cd:57:3f:31:76:19:06:cd:
                    24:16:d2:ca:4e:7b:25:93:9a:b1:27:79:ce:27:55:
                    3a:39:fc:ae:88:89:34:e9:84:c4:58:17:be:0f:d5:
                    fe:55:eb:db:31:df:07:5a:fc:21:2e:90:0e:e4:34:
                    83:23:84:ea:cf:59:76:b4:86:e5:9a:88:7a:17:3d:
                    df:18:41:46:dc:7a:5a:60:83:d7:34:db:ea:ee:e5:
                    4d:50:a5:a3:1e:d6:e8:b3:ef:5d:e4:97:ef:2c:76:
                    f4:54:03:60:97:ba:ad:13:69:fb:23:cd:fb:d7:ba:
                    6d:7b:10:6f:fe:d4:ee:f1:ef:9f:f0:69:02:a5:18:
                    ce:96:b8:80:a5:ea:8d:20:93:82:9b:c9:62:0b:d3:
                    b0:f5:f5:55:0f:05:67:52:03:cf:2e:7c:25:aa:0a:
                    bf:a7:83:a3:3f:77:cd:97:00:7c:34:2f:94:c9:aa:
                    4b:e7:09:4a:9a:8d:41:19:36:80:12:e2:d0:25:46:
                    1e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:73:AA:FE:DC:C4:3B:7A:66:0F:5B:60:E7:0F:20:75:6A:A6:F8:E1
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/-nOq_tzEO3pmD1tg5w8gdWqm-OE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.192.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:04:10:ee:58:43:a4:e0:20:f2:e9:4b:13:e6:04:06:88:85:
         4d:f1:23:c9:1f:a6:ed:1b:71:5f:bc:52:5b:8a:38:92:a4:71:
         bd:64:97:b0:e8:42:98:09:5f:37:eb:f3:a9:9f:20:31:5b:b1:
         86:5b:bd:1b:56:14:0d:53:d6:68:4a:09:3c:72:08:76:88:d1:
         8b:49:80:8a:5a:54:3b:b8:fe:c0:5f:02:70:54:bf:00:71:74:
         e3:f2:12:e2:e2:74:96:17:34:d7:84:36:49:98:cf:ed:44:42:
         bc:ff:50:e0:d6:60:ef:1b:e9:39:b8:02:c4:54:62:9f:49:ab:
         6a:54:42:e5:3d:ec:b6:ff:bb:cf:09:68:a5:52:de:43:e7:19:
         3f:20:b7:4e:44:44:e2:13:12:47:bd:74:f1:de:25:76:b5:21:
         86:1e:a3:ae:8c:39:ab:74:39:85:19:a1:14:54:48:d6:6b:13:
         d4:df:95:78:c2:94:19:5e:3d:97:52:dc:d5:72:55:d8:bd:9f:
         e5:c8:ea:08:db:3f:f4:10:6e:c0:48:f1:61:b5:fa:5a:a2:0d:
         65:75:66:4b:ad:ae:49:d6:e4:1d:77:db:3e:cd:18:d2:ff:bc:
         e3:13:59:56:d6:01:cc:c7:38:9a:a8:ed:59:38:cb:7d:3f:9d:
         f3:53:46:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:22:24 2025 by rpki-client