This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/BazgHOx_O_HhFE3IcV9QSoGxKNA.roa
File:                     BazgHOx_O_HhFE3IcV9QSoGxKNA.roa (raw, json)
Hash identifier:          h3+06NKcLbgHauuQrekGR558pygGGbUtfZQej9go7TE=
Subject key identifier:   05:AC:E0:1C:EC:7F:3B:F1:E1:14:4D:C8:71:5F:50:4A:81:B1:28:D0
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       049F
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/BazgHOx_O_HhFE3IcV9QSoGxKNA.roa
Signing time:             Mon 01 Dec 2025 01:31:47 +0000
ROA not before:           Mon 01 Dec 2025 01:31:47 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     10013
IP address blocks:        61.192.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1183 (0x49f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Dec  1 01:31:47 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=05ACE01CEC7F3BF1E1144DC8715F504A81B128D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:18:78:bc:01:eb:c4:c0:60:29:69:dd:fd:95:
                    c6:cf:4e:76:97:2c:3d:f4:de:64:34:e6:99:40:e6:
                    45:39:3b:20:66:45:38:fa:1c:c1:22:54:5c:a8:fc:
                    03:bd:4a:bc:5c:e9:85:ef:f9:1d:d5:20:ca:fc:2b:
                    d7:0e:b5:74:c0:74:39:f0:a1:2a:7a:4d:b9:1a:1f:
                    a5:7d:a2:34:e7:16:fc:de:c6:c2:63:06:19:ab:ed:
                    27:4d:0f:16:fa:82:36:b7:33:40:a8:3f:e3:72:30:
                    c9:b6:c3:52:a7:e1:31:54:54:f7:20:3e:81:1b:26:
                    b5:c4:ef:45:8a:5b:5b:e3:a8:c3:70:57:be:6a:a8:
                    3d:48:01:14:69:6c:93:74:ae:65:d1:06:0d:0a:51:
                    00:6f:84:4e:83:c9:30:86:4c:97:6c:39:76:07:57:
                    1b:10:ca:98:a2:3b:28:6d:27:1d:ee:21:6b:00:3b:
                    64:07:b6:07:e8:18:bf:ad:54:17:0d:0a:b2:26:f2:
                    44:a8:f8:5d:82:f4:4e:2c:bb:3a:e5:9b:cd:dc:37:
                    ed:7d:4b:43:17:2f:de:b9:fe:27:06:03:ce:5a:2c:
                    51:ff:c7:30:80:c8:b7:f5:15:9d:fb:e8:37:de:29:
                    54:7c:63:ed:ee:a4:6f:14:47:9a:2f:09:8c:45:0d:
                    1a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:AC:E0:1C:EC:7F:3B:F1:E1:14:4D:C8:71:5F:50:4A:81:B1:28:D0
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/BazgHOx_O_HhFE3IcV9QSoGxKNA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.192.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:c1:64:11:69:a0:3c:4e:be:1f:b4:b0:3b:45:5a:9c:1c:70:
         55:31:c1:85:66:eb:af:bc:80:3a:31:44:b8:af:3c:ca:bd:af:
         d8:4b:72:8d:80:4e:92:dc:e8:34:ed:cd:81:c6:32:2c:03:52:
         f8:9c:4d:7f:fd:1a:c2:0e:c8:fd:a4:f0:cc:3d:ee:72:9f:ac:
         7f:69:15:70:a8:f9:02:51:4f:13:09:c8:ab:09:45:58:5b:a7:
         e1:e8:fd:f4:25:6a:3b:66:51:cc:7f:d9:f5:63:a9:6d:3c:5f:
         fa:5d:e5:9c:36:da:4a:a7:aa:00:d8:1a:b9:0e:cc:3f:9a:8e:
         3a:81:5f:d3:4e:a4:70:7f:ac:a1:d7:68:99:08:18:e1:31:c4:
         24:cd:9b:88:f3:b5:46:a3:61:23:41:0b:05:ae:f8:d4:37:c5:
         12:ff:c7:ee:05:1b:5e:f3:3c:c6:85:55:0f:35:4e:d8:20:c4:
         29:67:cc:e6:d9:85:d8:80:68:e8:1e:98:e1:30:65:57:f9:29:
         85:47:d0:30:65:b6:6e:3a:ee:d1:cd:8e:2a:0f:c8:f4:1c:39:
         75:e5:0a:d3:3e:c4:49:0b:64:02:fb:cc:43:e8:2d:05:05:08:
         f2:7e:37:34:cb:c7:ec:8b:b2:83:0c:06:a8:46:15:a8:ab:73:
         af:2f:f5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:08:35 2025 by rpki-client