This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/hH1kCATsZgtSCpHajoJjvRH5dik.roa
File:                     hH1kCATsZgtSCpHajoJjvRH5dik.roa (raw, json)
Hash identifier:          x0uBKtuBmOukg9tjf9Kcc2OB9ch/kBkwjwXeF9F1zhI=
Subject key identifier:   84:7D:64:08:04:EC:66:0B:52:0A:91:DA:8E:82:63:BD:11:F9:76:29
Certificate issuer:       /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Certificate serial:       58
Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/hH1kCATsZgtSCpHajoJjvRH5dik.roa
Signing time:             Mon 01 Dec 2025 01:34:19 +0000
ROA not before:           Mon 01 Dec 2025 01:34:19 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     9619
IP address blocks:        211.125.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 05:11:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
        Validity
            Not Before: Dec  1 01:34:19 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=847D640804EC660B520A91DA8E8263BD11F97629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cb:1e:ae:d8:75:9e:4d:87:c5:42:6e:cc:cb:
                    b9:60:1c:8b:ac:76:0b:7c:d8:0c:7a:4d:f0:d4:90:
                    6b:71:83:c3:a9:69:a3:15:f2:bc:23:c0:75:8b:56:
                    e7:ef:b0:8d:1b:08:ce:00:27:19:1a:34:29:59:73:
                    b6:97:f1:c0:5a:a9:e1:ac:ab:68:0a:e9:97:4a:05:
                    14:a3:e3:96:4e:cc:37:26:2f:6c:ca:ca:82:f6:53:
                    c0:89:ed:7c:31:66:55:13:dd:e0:59:7d:2a:50:cf:
                    8e:8c:7d:44:0e:91:2f:af:6b:43:73:e5:9e:2f:5d:
                    46:19:b9:26:d3:f1:04:f3:d2:4b:81:1c:49:cd:9a:
                    10:2c:67:61:90:ef:10:d8:6c:59:e9:8d:56:27:b7:
                    a1:d7:9f:03:95:90:b1:ef:3e:a3:0c:af:07:b2:95:
                    6e:39:71:b7:44:d4:f8:23:02:d3:85:c1:e3:5b:8f:
                    4a:08:7e:12:3e:b9:56:3d:e6:2a:3b:63:12:5e:92:
                    cf:06:7b:7e:cc:ce:2d:b5:3c:aa:f6:e6:20:f5:f2:
                    21:ca:d7:34:f8:08:a1:01:d3:8f:4f:0e:b7:bb:8f:
                    0c:0c:f6:8c:b7:19:34:70:4e:59:25:bb:a9:24:a4:
                    42:01:87:90:4c:a9:9a:a6:cc:37:b3:f0:2d:90:89:
                    c5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:7D:64:08:04:EC:66:0B:52:0A:91:DA:8E:82:63:BD:11:F9:76:29
            X509v3 Authority Key Identifier:
                keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/hH1kCATsZgtSCpHajoJjvRH5dik.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:ab:f0:19:15:46:e8:5b:f3:22:58:bd:20:88:d0:cb:54:e7:
         c1:0b:2d:fd:7d:32:e6:a5:39:5a:98:dd:74:d0:15:33:a4:c2:
         7e:95:2a:02:5e:37:70:5c:2e:9f:99:6d:ca:c6:ee:30:ef:e6:
         ba:25:37:de:41:83:2f:be:f1:02:b4:b6:98:1a:72:cb:dd:e6:
         18:7d:8e:b9:a4:83:86:f8:5d:4c:24:ec:d7:7e:92:60:d6:5e:
         c6:f2:b8:96:1f:d6:a8:57:42:db:c7:94:98:ca:5c:98:bb:73:
         99:99:05:50:24:71:e6:b5:22:26:b4:40:cd:fb:78:e1:48:74:
         40:3c:d2:8b:b3:8a:48:7d:7b:22:6e:70:f2:62:64:8f:ab:54:
         ce:5c:ef:db:61:c4:74:0b:a8:f5:76:e7:3b:54:4f:a8:5c:3e:
         8c:d7:7d:b0:59:a7:8e:35:54:1f:ce:84:f5:00:a6:67:70:fd:
         b8:8b:3c:f6:f7:d2:c1:53:3e:fb:b5:b7:d9:ef:e8:f6:db:b1:
         3a:f8:1f:19:2b:51:c7:f4:f8:81:24:de:f2:65:e1:ff:4d:11:
         7d:24:1e:97:50:a6:17:a5:5a:c2:c5:72:90:a0:64:d0:1a:4f:
         74:8b:3c:4f:31:41:c6:c1:1f:28:21:a7:17:61:2a:96:6d:3a:
         28:a1:9c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:42:19 2025 by rpki-client