This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/4Tr8Q72joe_SXIhT04tydRWmrSg.roa
File:                     4Tr8Q72joe_SXIhT04tydRWmrSg.roa (raw, json)
Hash identifier:          nt+qcAGimGCnzhKdx/IHNVZPG5p6iQESjU6dEDK+eI0=
Subject key identifier:   E1:3A:FC:43:BD:A3:A1:EF:D2:5C:88:53:D3:8B:72:75:15:A6:AD:28
Certificate issuer:       /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Certificate serial:       5D
Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/4Tr8Q72joe_SXIhT04tydRWmrSg.roa
Signing time:             Mon 01 Dec 2025 01:34:22 +0000
ROA not before:           Mon 01 Dec 2025 01:34:22 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     9619
IP address blocks:        211.125.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 05:11:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
        Validity
            Not Before: Dec  1 01:34:22 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=E13AFC43BDA3A1EFD25C8853D38B727515A6AD28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6c:a1:00:7a:06:0b:8f:4b:3b:28:c9:8a:a2:
                    dd:2b:74:d1:dd:8c:00:8c:38:e2:bd:f7:19:24:b1:
                    36:df:87:bd:ba:29:0e:48:88:11:0d:09:23:af:1c:
                    51:6e:7b:10:d1:31:b7:e4:aa:a2:05:c9:14:b7:a6:
                    a9:5c:08:8f:0a:8c:33:6c:5a:ec:29:a6:b1:d6:5c:
                    c6:7a:52:d2:a2:11:13:87:f1:bd:6b:2e:c1:2c:46:
                    60:96:9a:26:11:c0:a9:da:2c:2d:31:87:7e:aa:e8:
                    f3:53:3c:18:ec:17:fc:1b:70:bb:fb:38:36:6e:71:
                    48:c4:fe:42:87:0d:cc:4c:82:1d:be:1c:64:08:e7:
                    32:10:18:cb:a3:21:30:67:c5:8b:43:7c:dc:d2:25:
                    f0:26:5d:78:62:89:10:50:8f:8d:bb:c7:bb:c2:70:
                    f3:4c:d4:c7:14:26:71:35:5d:70:2b:d9:a5:3e:bf:
                    17:4a:fb:2a:58:bd:3c:43:55:fb:c9:35:e7:7c:6f:
                    c7:aa:c2:ef:54:5d:a6:c6:a9:0e:81:40:f5:9c:24:
                    6a:8e:de:9b:09:55:fe:7e:5a:08:cb:89:cf:9d:8a:
                    8a:fe:6c:9b:3c:29:8e:a2:a4:24:32:db:3e:1a:c6:
                    87:64:6a:98:d5:f6:ec:ff:ab:ed:05:82:b1:11:76:
                    3f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:3A:FC:43:BD:A3:A1:EF:D2:5C:88:53:D3:8B:72:75:15:A6:AD:28
            X509v3 Authority Key Identifier:
                keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/4Tr8Q72joe_SXIhT04tydRWmrSg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:06:88:6f:03:01:93:af:e3:4f:c2:62:cf:e3:4f:dd:c1:c9:
         c2:35:2f:01:13:41:15:44:52:54:ea:b1:c4:cd:a4:2b:6d:63:
         f2:d3:5d:1c:aa:a2:a7:d0:54:35:c7:90:a5:48:09:3e:a8:3a:
         07:02:c7:b4:d3:d6:7f:9c:d7:86:cc:f5:5d:53:18:1e:3e:35:
         9b:a9:56:83:50:03:ce:6b:ea:0d:bc:e9:3a:2e:9f:0d:02:ec:
         fb:4e:2a:d6:c2:7e:71:a1:9c:7c:dd:57:dc:bd:a3:82:d7:f4:
         b7:ea:2d:9b:3c:dc:3c:e1:f5:2d:65:23:57:aa:fb:4d:a8:50:
         f0:64:f3:95:ff:67:8c:fc:21:a5:dd:13:58:dc:d1:a0:5a:58:
         ac:db:fa:ee:f3:42:14:77:00:20:17:51:5f:57:35:5d:e0:71:
         15:50:07:38:24:39:90:4d:f7:88:06:c5:30:70:9e:f7:76:6b:
         a6:f5:d1:a8:1d:a4:b1:96:a9:2c:67:57:d0:d4:e7:79:98:af:
         a0:13:36:8a:70:0c:63:53:cd:e6:9a:2c:fb:16:b2:cf:70:ea:
         e9:92:c4:4f:4a:10:d4:64:f4:a2:02:98:b5:3c:1b:94:70:e9:
         43:fb:92:53:99:74:b9:d1:28:b1:32:82:56:ea:be:e9:ee:df:
         c3:0d:bd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:41:26 2025 by rpki-client