This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/hcvLFs30wriFgmtv5VXGVAPshSM.roa
File:                     hcvLFs30wriFgmtv5VXGVAPshSM.roa (raw, json)
Hash identifier:          djH9SoAXnYNEanBqcBV1QQooPtPkvigY2AVSTxJB+NI=
Subject key identifier:   85:CB:CB:16:CD:F4:C2:B8:85:82:6B:6F:E5:55:C6:54:03:EC:85:23
Certificate issuer:       /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Certificate serial:       5F
Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/hcvLFs30wriFgmtv5VXGVAPshSM.roa
Signing time:             Mon 01 Dec 2025 01:34:23 +0000
ROA not before:           Mon 01 Dec 2025 01:34:23 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     9619
IP address blocks:        211.125.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 05:11:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
        Validity
            Not Before: Dec  1 01:34:23 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=85CBCB16CDF4C2B885826B6FE555C65403EC8523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a2:3a:cb:67:17:24:62:30:5f:ff:ef:a2:08:
                    0b:ee:6a:b3:82:be:29:bf:63:78:54:dd:ee:13:a8:
                    31:2f:22:22:0b:97:d1:08:04:b7:2f:97:67:e8:95:
                    79:8b:e1:d6:4f:8a:23:7a:09:97:34:ce:9e:47:d9:
                    6d:a0:62:c7:fe:8b:a0:33:b0:01:58:fd:36:4d:ff:
                    e4:82:9f:be:26:91:5d:bd:d7:d9:f7:d2:0d:2a:9f:
                    22:b1:a4:e1:86:21:07:4b:98:5a:6f:c9:76:28:c9:
                    b4:e1:ec:28:43:63:81:fd:b5:05:02:3f:eb:1d:55:
                    01:db:a0:f4:29:a4:0c:38:f3:25:6e:9f:bd:14:1c:
                    9a:12:6e:dd:92:55:dd:02:5e:1a:eb:b6:e3:44:73:
                    c0:8e:2c:21:f2:29:71:1a:e7:a6:54:3f:f9:5d:17:
                    b9:6e:f4:8b:dd:9f:bd:92:80:59:7a:f0:f2:43:d8:
                    5c:eb:6f:79:57:81:a6:28:4d:23:60:27:97:79:5e:
                    ba:2e:1d:92:6d:76:aa:9f:9c:95:41:98:83:a1:b7:
                    70:6c:85:6e:61:63:1d:75:80:8c:5d:ef:59:cf:37:
                    32:d6:8f:10:c3:f8:5c:fb:fa:42:77:14:66:97:cf:
                    f8:a9:86:0f:1b:1a:fa:52:ff:0e:25:e7:3d:89:6a:
                    dd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:CB:CB:16:CD:F4:C2:B8:85:82:6B:6F:E5:55:C6:54:03:EC:85:23
            X509v3 Authority Key Identifier:
                keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/hcvLFs30wriFgmtv5VXGVAPshSM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:36:07:75:03:bc:e0:f8:64:be:43:eb:3c:9d:05:35:d9:24:
         08:4e:3f:e8:14:33:91:99:ef:bd:be:ae:12:3f:e9:53:14:6a:
         fc:11:dc:58:18:18:2f:4c:7a:92:7b:7a:9e:69:42:42:7f:5c:
         4a:96:81:88:e2:c0:3a:b7:29:6f:af:52:d6:72:77:1c:dd:e8:
         8a:9b:ce:dc:3e:0d:62:e3:1e:f5:04:de:21:3c:20:e2:66:73:
         9f:72:11:df:98:1f:5c:bc:73:c9:27:2f:e7:b0:fa:39:96:1e:
         73:3e:79:50:04:14:45:da:66:c2:80:9b:23:94:d7:a3:bf:b2:
         85:fa:db:99:92:c2:b3:a5:fb:b7:cf:f3:58:bf:9c:a4:a9:99:
         e0:b3:42:64:90:6f:3d:2f:ae:bb:0e:46:5d:83:ac:18:b0:fe:
         bf:70:20:7c:45:ef:b7:54:ca:27:af:d9:b7:53:8c:22:00:5e:
         bc:bf:96:81:c1:d8:07:2d:05:b0:1b:36:52:f1:50:73:47:b2:
         5f:02:28:14:70:7d:46:a7:1c:86:2c:ad:f8:fc:00:52:f0:27:
         2a:88:36:9f:7f:47:5f:4d:a6:28:bf:11:60:2c:2d:9a:bb:bf:
         d9:9c:6d:f3:a2:84:61:1b:8f:95:7e:49:79:a5:14:56:ba:fb:
         f1:aa:d3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:42:12 2025 by rpki-client