This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/onJzDUCSszKCFMa4kvtd7GPgdxo.roa
File:                     onJzDUCSszKCFMa4kvtd7GPgdxo.roa (raw, json)
Hash identifier:          nJ/yXyFHifgAuKCiiuakWJBU9nOeXcu5Hfz4nI/4EmI=
Subject key identifier:   A2:72:73:0D:40:92:B3:32:82:14:C6:B8:92:FB:5D:EC:63:E0:77:1A
Certificate issuer:       /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Certificate serial:       59
Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/onJzDUCSszKCFMa4kvtd7GPgdxo.roa
Signing time:             Mon 01 Dec 2025 01:34:20 +0000
ROA not before:           Mon 01 Dec 2025 01:34:20 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     9619
IP address blocks:        211.125.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 05:11:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
        Validity
            Not Before: Dec  1 01:34:20 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=A272730D4092B3328214C6B892FB5DEC63E0771A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:2d:39:3c:5c:e9:71:03:9b:3d:b0:ce:a1:00:
                    66:f2:74:e2:50:ba:f5:07:a8:f4:05:bc:63:bf:15:
                    8f:e4:5e:fe:c2:f7:a3:95:a7:04:88:da:48:a4:1c:
                    97:df:fa:1c:66:5e:b5:55:e0:22:5b:8d:ca:be:e4:
                    4c:b9:c9:c1:2d:d2:2a:54:22:38:ab:7e:70:8a:d5:
                    47:20:7b:fc:cb:87:3d:48:db:cb:bd:03:06:59:88:
                    85:ac:61:c0:07:ca:20:7e:5e:03:d1:e5:62:dc:06:
                    f4:b3:2f:66:3d:db:89:ed:8d:1b:1e:88:d1:83:59:
                    41:16:60:0a:cb:bd:9e:0d:84:23:d8:7b:82:43:3f:
                    0a:80:fd:82:50:64:ab:02:cc:7c:eb:c4:a9:66:69:
                    9f:7f:93:42:48:28:1b:86:31:99:3e:29:f2:10:c0:
                    34:e8:6d:43:01:86:8f:08:57:90:89:05:ed:6a:a4:
                    33:96:4d:f3:c9:22:e6:88:e5:16:cc:23:93:29:3b:
                    54:41:6d:00:b0:9d:23:b2:78:f3:96:68:49:d5:af:
                    1d:9e:1a:2d:5c:8c:54:c5:b9:13:85:69:21:e9:4f:
                    cb:ac:5e:f7:68:b3:9f:dd:fa:50:8a:8d:c0:f0:5b:
                    5d:87:5e:2c:cd:df:d2:29:0b:c9:6c:38:c2:84:d2:
                    6e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:72:73:0D:40:92:B3:32:82:14:C6:B8:92:FB:5D:EC:63:E0:77:1A
            X509v3 Authority Key Identifier:
                keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/onJzDUCSszKCFMa4kvtd7GPgdxo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:b7:05:cb:8f:02:48:fe:b8:c1:7d:21:68:47:0b:49:6f:19:
         32:fe:80:9f:c5:f1:35:12:e7:27:d3:83:59:d5:fd:c9:19:57:
         b6:91:43:ae:ee:df:ff:d5:aa:88:b9:fb:56:b8:7d:83:a4:25:
         62:ea:f2:04:ba:b3:9d:ff:08:e7:a3:84:f8:47:01:a0:ec:6c:
         21:16:5e:36:86:79:a3:47:32:fb:1f:ba:81:68:07:15:ae:49:
         e1:5c:4f:09:60:c7:5b:55:d2:06:b4:72:e5:eb:8d:ca:2c:31:
         6b:f0:01:89:e4:61:e6:77:72:7f:ad:83:2d:d5:6b:4b:1a:cd:
         e0:a5:e2:5a:7c:c6:d0:f5:bf:4b:19:56:b1:d3:fe:74:42:fa:
         da:ec:d8:97:c9:06:50:73:fd:43:57:99:a6:ad:55:7c:f4:59:
         fb:86:47:4d:27:d0:12:85:6b:51:ec:3a:df:2c:f4:b0:5e:f6:
         a1:e6:26:39:df:0d:f7:d8:73:6f:c4:5b:4e:bf:03:93:f1:fb:
         20:87:38:c6:fb:a0:9f:56:c3:12:9a:42:ea:dc:5b:57:fd:27:
         d8:04:5e:74:fc:1f:c9:97:e6:48:06:a6:7d:77:1a:e7:c8:5f:
         52:af:1d:eb:0e:cc:d3:ad:02:20:72:5a:d9:b3:21:23:55:c2:
         5d:9e:62:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:42:19 2025 by rpki-client