This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/5DqAmImESpFpvtC4fN54YmI-r1Y.roa
File:                     5DqAmImESpFpvtC4fN54YmI-r1Y.roa (raw, json)
Hash identifier:          QN/YYxW0McfQbAIkvIsxm94qMsS0R/hixkAmyhrgjRE=
Subject key identifier:   E4:3A:80:98:89:84:4A:91:69:BE:D0:B8:7C:DE:78:62:62:3E:AF:56
Certificate issuer:       /CN=1B20A06A21205820B28FD06CE0A84F03FCDAEBC5
Certificate serial:       74
Authority key identifier: 1B:20:A0:6A:21:20:58:20:B2:8F:D0:6C:E0:A8:4F:03:FC:DA:EB:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/5DqAmImESpFpvtC4fN54YmI-r1Y.roa
Signing time:             Sat 01 Nov 2025 01:31:04 +0000
ROA not before:           Sat 01 Nov 2025 01:31:04 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     55900
IP address blocks:        218.223.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B20A06A21205820B28FD06CE0A84F03FCDAEBC5
        Validity
            Not Before: Nov  1 01:31:04 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=E43A809889844A9169BED0B87CDE7862623EAF56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ef:22:a5:9e:c2:f5:3c:28:e4:6c:49:db:f3:
                    5d:fd:91:cb:48:bc:a5:a5:6b:73:ed:55:eb:d4:31:
                    cf:ac:06:63:30:42:70:d2:69:27:e2:20:a8:98:ec:
                    5d:b1:cd:08:67:43:8a:c2:cf:75:00:32:f9:59:2a:
                    d2:fe:21:89:50:a0:cf:8f:3b:37:e6:c0:b8:c3:ab:
                    22:1b:6f:cc:d8:a7:10:e4:15:89:18:7a:95:f7:37:
                    3c:0a:2a:a1:55:33:f5:0a:62:78:6a:4d:6b:e0:46:
                    7d:0c:2a:6b:e1:0f:7f:af:3f:a6:90:2e:f5:66:e2:
                    9e:7f:ac:a9:ea:58:0c:a8:2c:d9:8e:3e:bb:2d:fd:
                    44:ff:9e:a4:50:b5:0d:4a:d8:72:06:52:d6:c2:b8:
                    aa:97:26:f9:ac:4f:57:cc:70:b8:9a:1b:2c:21:38:
                    fe:c6:75:38:b1:7b:27:dc:24:bb:31:06:fd:0c:ea:
                    c7:66:af:ac:31:64:05:b0:a3:a0:ec:b3:d8:61:c5:
                    ec:4f:18:0c:3d:1f:25:93:5e:95:d4:eb:25:b1:96:
                    05:8c:3e:86:fc:0a:4f:e2:df:3e:62:5b:8f:aa:d2:
                    ef:de:4c:ac:9c:7b:02:bf:37:5c:5a:ca:e5:f4:94:
                    7c:37:12:d1:24:2f:c6:87:b7:c4:7c:bf:ed:97:b7:
                    d4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3A:80:98:89:84:4A:91:69:BE:D0:B8:7C:DE:78:62:62:3E:AF:56
            X509v3 Authority Key Identifier:
                keyid:1B:20:A0:6A:21:20:58:20:B2:8F:D0:6C:E0:A8:4F:03:FC:DA:EB:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/5DqAmImESpFpvtC4fN54YmI-r1Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.223.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:d0:52:b5:e1:68:2b:ce:ad:3c:7c:06:3e:b3:29:f9:4d:6e:
         2e:6b:d4:9e:cd:cc:4e:23:c7:ba:df:65:78:fe:75:fa:eb:18:
         b6:a5:d5:d0:90:e3:3b:a0:93:a3:0b:77:e2:75:a5:83:8c:bf:
         0a:06:8c:5a:63:e6:a8:fc:18:bb:4b:ef:57:5b:07:df:0c:61:
         1d:87:bf:2e:0e:87:c1:68:51:dc:2e:21:0e:e7:e6:8e:46:1e:
         08:62:47:cf:c1:7b:22:2c:f9:78:6c:dd:70:4d:f9:a5:a3:39:
         3d:50:d1:10:56:21:4e:43:71:e3:95:ce:b0:20:e3:6f:de:2a:
         9b:1b:b4:1a:84:59:e3:23:f6:cc:b7:d3:bb:29:82:f0:c5:6e:
         16:b9:38:c1:62:ce:b1:de:e4:ca:1a:33:b8:c3:6a:31:89:9d:
         7c:30:4d:20:6f:6b:24:15:e2:30:dc:7c:8f:53:8f:21:3b:c1:
         64:ca:cc:a9:0a:a4:bb:b7:e1:8e:2d:3a:0a:38:f1:38:db:23:
         4d:57:03:87:c5:8d:d5:70:16:fb:1d:42:fe:93:31:d1:31:82:
         38:95:19:22:9b:4f:6e:dc:8b:8a:28:ce:61:53:ea:7f:3d:fa:
         91:34:b0:ee:6f:60:d0:28:41:e7:7c:b9:2e:c3:dc:e7:67:ab:
         13:8f:2d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:33:59 2025 by rpki-client