This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/cqwkrzFCi8aope_0D4K-3puUmng.roa
File:                     cqwkrzFCi8aope_0D4K-3puUmng.roa (raw, json)
Hash identifier:          BgUGHPwcBer7Uwufq+j20kYyaZGKBnHt2C9rWiBH8n0=
Subject key identifier:   72:AC:24:AF:31:42:8B:C6:A8:A5:EF:F4:0F:82:BE:DE:9B:94:9A:78
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       04A8
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/cqwkrzFCi8aope_0D4K-3puUmng.roa
Signing time:             Mon 01 Dec 2025 01:31:52 +0000
ROA not before:           Mon 01 Dec 2025 01:31:52 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     10013
IP address blocks:        61.195.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1192 (0x4a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Dec  1 01:31:52 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=72AC24AF31428BC6A8A5EFF40F82BEDE9B949A78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a6:32:d6:cd:7d:86:f4:6a:09:30:0c:3f:f0:
                    d1:dc:29:ca:57:5a:b7:03:97:4b:6c:91:65:e1:c3:
                    0f:22:6c:9b:39:6e:d0:34:8a:8d:81:3c:ba:54:3a:
                    5e:19:5d:3a:11:b1:8b:5c:0c:86:ad:d7:c5:1e:21:
                    ad:85:7c:7b:b4:9a:41:93:4b:dd:0a:29:50:d0:3b:
                    9f:77:1a:29:c3:64:b5:df:33:2d:db:a0:6c:53:8a:
                    3a:a4:4f:94:5d:9b:56:07:de:82:b4:a5:bd:5b:21:
                    c6:82:a1:85:a1:01:e7:c3:ee:54:5e:f3:64:82:5d:
                    61:b5:64:ea:b1:50:43:9d:fd:81:a0:c8:41:d4:cb:
                    26:4e:15:08:bb:43:cd:4e:35:55:66:57:df:3d:83:
                    28:b5:a7:57:bf:72:48:68:9d:64:90:eb:74:a4:7a:
                    6f:34:47:30:a7:5e:64:75:ef:d5:b1:1f:cf:fb:5f:
                    c0:36:57:a0:45:09:c6:0d:24:77:1b:34:96:35:2e:
                    51:11:3d:d9:e4:92:4f:4f:e5:03:5b:41:d0:c6:dd:
                    3a:8a:b9:db:87:e2:dd:13:1f:a6:8d:8b:27:3b:87:
                    1f:7e:43:c4:f0:de:d3:a9:a0:42:2a:4f:7a:11:a9:
                    d6:93:66:cc:3f:49:a6:f5:f2:51:9e:6c:c3:20:63:
                    ea:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:AC:24:AF:31:42:8B:C6:A8:A5:EF:F4:0F:82:BE:DE:9B:94:9A:78
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/cqwkrzFCi8aope_0D4K-3puUmng.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.195.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         78:ec:67:5d:09:88:42:2e:dc:4a:09:83:6f:9c:be:9e:56:84:
         bf:20:e4:2a:04:0f:e9:85:d3:db:c9:25:ff:c3:f7:e6:62:4f:
         32:fd:40:51:b7:5b:c9:2d:55:10:5c:44:85:eb:7f:0a:5b:80:
         e0:46:b5:91:eb:9e:a0:34:4b:ae:dc:29:ca:ca:5e:2e:32:b7:
         3b:6e:e1:24:a5:58:cd:c3:d5:52:ef:65:88:6e:a4:b1:df:75:
         d6:52:25:c6:4e:3c:75:d5:11:9d:66:04:b3:f4:20:92:14:c0:
         0f:38:f0:d1:ba:d6:b4:42:48:72:96:99:87:1c:ae:30:02:c4:
         80:72:85:0b:6d:5b:85:c3:54:14:d4:cd:86:c8:64:9f:ea:a2:
         54:13:5b:07:db:fe:1b:ec:f4:75:c4:ad:d0:38:43:89:53:b9:
         fe:ec:bd:82:eb:ef:ad:b2:a6:27:68:e2:e1:65:4d:b9:41:96:
         ff:b7:d3:1b:b9:a0:54:a9:0c:c8:02:14:db:e1:25:dc:b5:37:
         f7:77:e2:58:85:fb:2b:b3:f2:cd:1e:d7:e5:2d:ce:77:ed:23:
         1a:1b:fb:18:7b:f1:94:9b:2e:88:c8:ff:55:61:a8:46:7a:89:
         55:da:9d:27:27:40:5d:f0:34:b7:f0:60:94:0b:81:8d:76:ef:
         07:65:28:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:03:55 2025 by rpki-client