This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/vduxG7h12O2fSjD5dvvOsbWAmtY.roa
File:                     vduxG7h12O2fSjD5dvvOsbWAmtY.roa (raw, json)
Hash identifier:          Z9GWPe65AMG4aj2J8p9OSQguz5sapU2p+oa6MoRbkQc=
Subject key identifier:   BD:DB:B1:1B:B8:75:D8:ED:9F:4A:30:F9:76:FB:CE:B1:B5:80:9A:D6
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       049C
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/vduxG7h12O2fSjD5dvvOsbWAmtY.roa
Signing time:             Mon 01 Dec 2025 01:31:44 +0000
ROA not before:           Mon 01 Dec 2025 01:31:44 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     10013
IP address blocks:        61.192.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1180 (0x49c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Dec  1 01:31:44 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=BDDBB11BB875D8ED9F4A30F976FBCEB1B5809AD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:80:61:1d:ce:80:41:c7:76:35:60:70:4d:1d:
                    24:65:f2:9e:79:32:09:f2:78:8d:2b:51:44:6c:ed:
                    a9:96:fc:54:e6:f6:5c:cc:70:c4:43:04:09:50:bc:
                    f5:4a:5f:73:60:05:e6:c3:99:97:ab:83:9f:e5:42:
                    46:e2:b2:e6:54:5e:86:97:c9:78:96:4c:d5:b1:40:
                    02:91:29:b1:5f:87:65:f7:b4:f1:31:da:b9:4c:8a:
                    89:07:19:ef:6d:3c:08:40:0e:a4:69:03:65:59:a8:
                    1d:76:22:01:59:90:60:6f:3a:98:92:a0:1e:0e:ad:
                    80:de:87:0f:af:40:49:85:fa:61:5d:c2:da:e8:e5:
                    dd:32:85:50:21:23:87:7e:f0:80:49:2d:f9:71:88:
                    02:b2:6a:77:dc:84:39:57:5a:f7:ee:ab:02:1f:59:
                    97:da:29:cf:d4:0b:44:7d:ba:e3:64:ee:01:9e:1f:
                    0e:14:b3:91:ed:e3:8b:1b:4a:4e:4e:e5:a4:c1:f7:
                    d1:f3:ee:f7:f7:77:ea:3d:5c:67:bf:39:65:c0:d0:
                    a9:7a:5e:1d:41:58:2d:75:22:1f:1d:9a:08:57:ac:
                    5d:16:58:74:78:97:43:28:73:1f:d7:f0:d4:6a:c9:
                    29:a7:31:6a:d9:0b:87:51:78:fb:82:f3:a0:13:78:
                    1e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:DB:B1:1B:B8:75:D8:ED:9F:4A:30:F9:76:FB:CE:B1:B5:80:9A:D6
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/vduxG7h12O2fSjD5dvvOsbWAmtY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.192.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         03:80:50:d3:01:eb:21:e8:26:54:76:94:e8:ff:35:a0:7e:6d:
         ce:25:f7:88:c5:31:66:9a:6f:d9:7b:bc:49:b8:0e:cb:1b:28:
         a0:b1:b2:8d:0e:11:d3:50:d3:6b:fc:12:98:cc:c2:33:b7:9a:
         ce:c5:b6:20:5b:8f:90:88:0a:5d:f1:4c:32:7e:25:5d:13:ea:
         39:63:70:be:c5:f0:87:f4:8a:9c:30:45:33:aa:c1:51:40:b9:
         b1:5c:41:e7:57:93:88:49:0a:88:a7:6d:50:83:16:57:ab:bf:
         3b:14:c6:f1:2c:d7:ea:43:69:15:19:b7:36:cc:ce:3f:b3:34:
         d3:8d:4f:8c:99:6e:a9:11:12:19:ad:ad:c8:2d:b2:0a:9a:7a:
         2d:60:26:93:a7:4e:19:64:5d:40:8d:66:bc:76:8c:69:2e:b8:
         ba:9c:95:25:5c:96:09:b1:db:64:0e:f3:36:57:7c:70:cc:7a:
         f3:20:9e:37:50:68:51:02:1b:5c:a9:5d:73:03:b6:0b:de:5c:
         1d:a7:7c:ee:79:6d:04:f4:73:da:df:43:7f:d7:92:09:50:d4:
         37:76:ab:be:12:a0:97:51:8a:d1:1c:f4:54:23:62:53:24:36:
         e7:3b:ca:0e:d8:96:1c:3a:ac:0a:70:25:52:54:7f:5a:ad:97:
         30:f1:b8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:05:22 2025 by rpki-client