This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/17cSKWnzRvpYqV_34b1izjPOW3w.roa
File:                     17cSKWnzRvpYqV_34b1izjPOW3w.roa (raw, json)
Hash identifier:          76z29SiCzJIsoVh4hCGUx8ydvtDi13apbOC2kaqgJWA=
Subject key identifier:   D7:B7:12:29:69:F3:46:FA:58:A9:5F:F7:E1:BD:62:CE:33:CE:5B:7C
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       04A3
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/17cSKWnzRvpYqV_34b1izjPOW3w.roa
Signing time:             Mon 01 Dec 2025 01:31:50 +0000
ROA not before:           Mon 01 Dec 2025 01:31:50 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     10013
IP address blocks:        61.192.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1187 (0x4a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Dec  1 01:31:50 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=D7B7122969F346FA58A95FF7E1BD62CE33CE5B7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2b:30:40:55:ba:60:3e:bb:58:a7:20:d1:bf:
                    65:b0:6c:70:a2:07:58:c5:16:46:3d:a6:b8:b6:22:
                    70:4a:5f:92:2d:36:89:b6:df:72:74:4d:b3:51:df:
                    06:73:5a:6e:78:b5:11:28:b9:98:01:8c:f8:24:08:
                    8d:03:db:28:8d:c0:a5:bb:05:4a:92:7c:aa:47:6a:
                    bd:87:78:c7:06:fd:fd:b1:47:09:7a:06:b6:e9:e3:
                    d3:b4:4b:89:18:84:85:a2:ef:ad:a7:95:6f:b1:2c:
                    d7:3e:fe:01:98:af:a5:e8:ae:c4:d8:79:e7:c9:d7:
                    cd:b3:40:f3:9c:35:34:6f:e6:47:6b:89:61:aa:09:
                    79:e7:17:e0:10:fe:36:06:04:bd:b7:15:3e:5d:d2:
                    c0:54:73:67:f9:bf:ef:9f:c0:29:2a:fe:c4:0b:7a:
                    16:45:90:0f:57:6c:5f:51:78:d5:a9:f3:c2:d5:08:
                    4c:be:ad:2b:84:cf:d2:bf:27:b0:fe:fc:14:a8:bf:
                    d0:e5:04:b4:98:db:ca:86:c3:6d:ae:74:0a:a4:c1:
                    11:18:9d:c0:0a:e3:40:ed:f1:b7:fd:30:bb:f7:2d:
                    41:33:05:ab:a3:6e:f6:2d:01:36:45:ab:0e:33:97:
                    d3:0c:e8:56:49:db:07:33:a2:c4:ea:1e:7e:a5:8d:
                    45:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B7:12:29:69:F3:46:FA:58:A9:5F:F7:E1:BD:62:CE:33:CE:5B:7C
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/17cSKWnzRvpYqV_34b1izjPOW3w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.192.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         78:6c:2c:15:52:32:e1:17:32:e5:32:b9:85:f3:14:d0:12:4f:
         03:07:1c:11:a5:43:e9:0d:8a:5f:5f:2e:9c:7d:84:d7:a1:1d:
         98:ea:7f:43:2c:95:4a:29:84:c3:8e:67:1d:d8:8f:e1:e2:51:
         06:cf:50:30:31:43:61:cd:14:59:ac:f2:06:7e:92:5a:84:44:
         b4:7a:6c:f1:9d:49:e7:fb:ec:8c:34:ba:43:f6:ed:38:77:27:
         1d:82:12:61:a7:2d:68:8e:68:d1:83:d6:f6:7f:9d:05:98:d4:
         ad:20:04:e2:be:0e:99:f5:a9:fe:b0:d8:e9:b2:28:b7:98:47:
         9e:82:f4:79:7e:db:ce:c6:b2:09:50:1f:a2:0b:28:e1:27:14:
         51:95:32:86:a0:f9:d0:30:45:c8:8b:cd:d2:4b:95:51:3e:7e:
         ec:90:b4:22:2b:9d:c9:d1:a5:e6:b9:de:07:1e:41:6c:e4:05:
         2b:cd:d0:d2:b5:ee:3d:fb:e0:32:29:ae:83:d5:25:04:bb:ad:
         fc:45:29:d0:3c:52:c0:2a:bd:e9:f8:03:dc:08:7a:2b:78:3a:
         eb:96:fa:4b:d0:1b:5a:c5:8b:4e:67:34:32:42:5c:44:bb:6d:
         de:77:ae:1a:ba:4c:1e:0f:8b:2c:d1:32:cd:ed:25:47:5b:83:
         7c:2f:73:a9
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBKMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTEyMDEw
MTMxNTBaFw0yNjExMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ3QjcxMjI5NjlGMzQ2
RkE1OEE5NUZGN0UxQkQ2MkNFMzNDRTVCN0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVKzBAVbpgPrtYpyDRv2WwbHCiB1jFFkY9pri2InBKX5ItNom2
33J0TbNR3wZzWm54tREouZgBjPgkCI0D2yiNwKW7BUqSfKpHar2HeMcG/f2xRwl6
Brbp49O0S4kYhIWi762nlW+xLNc+/gGYr6XorsTYeefJ182zQPOcNTRv5kdriWGq
CXnnF+AQ/jYGBL23FT5d0sBUc2f5v++fwCkq/sQLehZFkA9XbF9ReNWp88LVCEy+
rSuEz9K/J7D+/BSov9DlBLSY28qGw22udAqkwREYncAK40Dt8bf9MLv3LUEzBauj
bvYtATZFqw4zl9MM6FZJ2wczosTqHn6ljUUpAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU17cSKWnzRvpYqV/34b1izjPOW3wwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0LzE3Y1NLV256UnZwWXFWXzM0YjFpempQT1czdy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAM9wNAwDQYJKoZIhvcNAQELBQADggEBAHhsLBVSMuEXMuUyuYXzFNASTwMH
HBGlQ+kNil9fLpx9hNehHZjqf0MslUophMOOZx3Yj+HiUQbPUDAxQ2HNFFms8gZ+
klqERLR6bPGdSef77Iw0ukP27Th3Jx2CEmGnLWiOaNGD1vZ/nQWY1K0gBOK+Dpn1
qf6w2OmyKLeYR56C9Hl+287GsglQH6ILKOEnFFGVMoag+dAwRciLzdJLlVE+fuyQ
tCIrncnRpea53gceQWzkBSvN0NK17j374DIproPVJQS7rfxFKdA8UsAqven4A9wI
eit4OuuW+kvQG1rFi05nNDJCXES7bd53rhq6TB4PiyzRMs3tJUdbg3wvc6k=
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:07:19 2025 by rpki-client