This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/4GotcfeZOvBvrU4XoVtBtKMva8U.roa
File:                     4GotcfeZOvBvrU4XoVtBtKMva8U.roa (raw, json)
Hash identifier:          gezLwyQTCmPGtkPY4Y3Nc809X3Pz0zoRXLr3abOT9N4=
Subject key identifier:   E0:6A:2D:71:F7:99:3A:F0:6F:AD:4E:17:A1:5B:41:B4:A3:2F:6B:C5
Certificate issuer:       /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Certificate serial:       61
Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/4GotcfeZOvBvrU4XoVtBtKMva8U.roa
Signing time:             Mon 01 Dec 2025 01:34:23 +0000
ROA not before:           Mon 01 Dec 2025 01:34:23 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     9619
IP address blocks:        211.125.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 05:11:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
        Validity
            Not Before: Dec  1 01:34:23 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=E06A2D71F7993AF06FAD4E17A15B41B4A32F6BC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:63:35:5c:f2:24:24:84:89:c1:68:37:af:46:
                    7d:4b:32:3e:de:b0:6f:d1:19:c0:94:49:ff:05:d5:
                    58:3c:80:23:b4:ce:15:f9:19:2e:99:59:20:2f:a3:
                    65:13:54:91:bd:0c:78:1d:db:86:6b:a9:c9:d1:ac:
                    ea:48:c0:66:00:e2:44:e8:29:0e:f1:9b:15:56:56:
                    e7:c6:d7:ed:d2:f1:d0:dc:8c:97:7d:00:5a:9d:1b:
                    86:ff:73:3f:b9:c8:60:2b:77:62:a1:78:e4:b0:09:
                    55:94:40:97:c2:ba:ad:9e:84:b0:b3:8d:14:c8:43:
                    b0:5d:b9:bb:37:a7:99:f3:fc:cd:19:5f:a7:65:07:
                    56:98:85:49:97:82:b3:c2:6d:18:80:d2:44:bf:4f:
                    64:e1:40:02:22:c7:01:35:a5:2f:93:6d:c0:49:e3:
                    93:b0:1a:ba:0b:37:49:0e:65:b8:24:0c:87:9e:48:
                    40:f7:cd:1d:ef:2b:3a:12:49:53:87:dc:c4:7e:52:
                    2e:c8:48:49:45:c1:fc:0a:e6:c9:bc:ff:fd:82:57:
                    d6:01:de:b4:fe:6f:e9:9c:17:64:4f:66:8c:df:b1:
                    22:0f:00:80:d7:36:ae:4c:a1:b1:8a:23:f4:fe:bc:
                    94:26:07:bd:59:54:ea:85:5e:e3:97:4d:20:29:83:
                    4e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:6A:2D:71:F7:99:3A:F0:6F:AD:4E:17:A1:5B:41:B4:A3:2F:6B:C5
            X509v3 Authority Key Identifier:
                keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/4GotcfeZOvBvrU4XoVtBtKMva8U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:ac:da:6b:4c:98:c7:58:7a:9c:a7:01:cd:e6:d3:77:e7:fa:
         0a:ed:33:30:35:de:70:d0:03:d0:bc:42:cd:8e:42:37:a3:c7:
         4c:5b:29:f2:ba:20:5f:c9:8a:21:c0:6e:96:fb:55:98:16:74:
         73:8a:bf:06:37:d2:0c:ac:aa:74:38:77:da:58:b8:a5:f8:14:
         b6:8c:ed:13:15:5c:4f:5f:e2:f7:64:9e:9a:42:aa:e5:24:74:
         9d:c6:b6:af:10:d0:34:90:67:b7:bc:24:13:b9:f2:04:97:fd:
         bf:6a:c9:3f:c5:30:ee:28:83:2f:0c:5e:6f:92:af:4a:e0:63:
         50:a0:58:70:03:82:88:17:67:ce:6e:58:74:3b:d5:30:8e:72:
         80:5f:12:26:1b:e9:b2:08:bc:7a:91:55:ca:86:4e:f6:66:50:
         14:35:98:f6:d9:96:1c:78:38:1e:71:0f:fb:26:4f:d0:c4:6c:
         d8:97:e5:14:9d:61:65:a3:57:10:6c:dc:cc:02:7c:09:04:34:
         bc:39:31:7a:02:d2:6a:31:64:8d:1e:45:75:6a:e4:a9:8a:31:
         56:54:ad:3e:d1:4b:3f:5f:df:ce:3c:c3:70:26:47:94:5b:91:
         d9:bf:14:3b:e8:5f:a4:d3:2f:e5:19:62:65:8f:80:dd:db:83:
         41:cf:4c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:42:19 2025 by rpki-client