This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/vK_wQJJrj_iM92QfjzlwzXiggqM.roa
File:                     vK_wQJJrj_iM92QfjzlwzXiggqM.roa (raw, json)
Hash identifier:          4+OU6GeyL48jmL5kWRsBxfrZoD3kANiFnySxIuM1DB4=
Subject key identifier:   BC:AF:F0:40:92:6B:8F:F8:8C:F7:64:1F:8F:39:70:CD:78:A0:82:A3
Certificate issuer:       /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Certificate serial:       5E
Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/vK_wQJJrj_iM92QfjzlwzXiggqM.roa
Signing time:             Mon 01 Dec 2025 01:34:22 +0000
ROA not before:           Mon 01 Dec 2025 01:34:22 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     9619
IP address blocks:        211.125.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 05:11:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
        Validity
            Not Before: Dec  1 01:34:22 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=BCAFF040926B8FF88CF7641F8F3970CD78A082A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8f:54:25:87:3f:3d:67:2c:11:44:63:66:e7:
                    e0:a2:0d:68:66:82:c0:1c:ab:a9:82:a7:2e:31:ea:
                    09:a9:55:b5:07:ca:5f:8c:89:5c:29:f1:8f:4b:60:
                    da:4f:76:ea:80:b2:15:5b:f2:0c:83:db:f8:35:f0:
                    22:ac:a9:66:e3:27:db:4d:d2:56:52:72:91:60:9a:
                    01:f4:00:69:fd:f3:fc:37:a9:4e:eb:6e:7d:da:dc:
                    51:a5:e3:ff:a1:61:86:d0:45:b5:52:c8:15:c0:25:
                    97:39:c5:55:af:8a:ab:f2:f8:21:88:50:29:62:c8:
                    78:5b:8a:3d:f8:53:33:c9:62:e4:53:17:7d:31:da:
                    1c:57:62:d1:b5:b7:7d:52:66:11:6c:3d:0e:53:e1:
                    b9:36:a1:9c:22:c3:b6:2c:f0:fd:18:90:b9:f2:33:
                    7a:4b:2e:2a:7d:20:73:4c:fb:b8:61:e6:a7:9f:95:
                    39:97:82:26:c1:ef:47:05:c5:00:d1:34:87:44:e1:
                    a2:a9:c2:7f:16:b3:3c:dd:4f:6e:10:2f:78:15:a8:
                    3e:6f:82:ec:6d:ee:b0:4c:6c:6e:26:8f:5f:bb:51:
                    4b:3a:e0:4f:36:b7:9e:23:81:a9:16:be:c4:cc:2f:
                    bc:8b:80:c5:ca:dc:63:66:0f:aa:84:cf:1e:0a:df:
                    56:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:AF:F0:40:92:6B:8F:F8:8C:F7:64:1F:8F:39:70:CD:78:A0:82:A3
            X509v3 Authority Key Identifier:
                keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/vK_wQJJrj_iM92QfjzlwzXiggqM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:7e:35:af:b2:f1:57:9d:24:5b:b3:52:8c:58:19:a5:d7:3a:
         ca:19:1e:a2:b3:b8:5e:0a:7d:bd:20:78:78:e3:77:3c:34:cd:
         1f:ed:9a:d6:00:69:c8:15:20:d7:06:a6:e9:29:c2:31:1d:7f:
         0e:c6:20:55:8b:27:4c:fa:3b:87:2b:64:7a:33:19:de:80:5f:
         4d:81:92:3b:28:dc:f2:60:c3:43:72:49:82:ea:31:e8:26:a5:
         07:8a:24:f6:f9:da:5a:f4:fd:ab:5c:14:36:7b:c2:8a:da:b3:
         e9:3f:b3:72:7a:7b:16:a2:17:99:dd:d3:bd:d3:a3:b6:dd:5f:
         66:27:86:49:6a:44:e1:7c:f1:5a:67:a1:10:23:49:4b:51:af:
         a8:e7:2e:c6:3f:24:84:09:e9:f7:43:12:fd:b2:cd:e4:40:39:
         c5:95:ca:dc:dd:2c:dc:e9:ee:6a:e8:01:fb:3b:12:c8:6d:ad:
         a0:81:c4:57:a6:8d:9f:08:1e:a2:18:7d:74:dd:fb:a7:c1:45:
         b2:3c:e4:88:ca:7c:9d:5e:02:88:e3:58:2a:82:3d:b8:8c:42:
         f9:f4:99:bd:d5:de:d5:be:66:be:80:9a:06:28:8e:cd:b9:de:
         c4:db:fb:99:14:31:13:e7:dc:bf:49:8a:d7:30:3f:31:11:b0:
         59:1f:16:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:42:13 2025 by rpki-client