This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/820/-nq1sxWAP26fG_oWnsoM6FJrxhY.roa
File:                     -nq1sxWAP26fG_oWnsoM6FJrxhY.roa (raw, json)
Hash identifier:          3fWD3fztjV79xqUr6/rEzWaef5ZGL4WgvqL5YjaZQHk=
Subject key identifier:   FA:7A:B5:B3:15:80:3F:6E:9F:1B:FA:16:9E:CA:0C:E8:52:6B:C6:16
Certificate issuer:       /CN=9FEB105C67E5FD5C9E1AFD06A343C841F05A7F15
Certificate serial:       40
Authority key identifier: 9F:EB:10:5C:67:E5:FD:5C:9E:1A:FD:06:A3:43:C8:41:F0:5A:7F:15
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n-sQXGfl_VyeGv0Go0PIQfBafxU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/-nq1sxWAP26fG_oWnsoM6FJrxhY.roa
Signing time:             Mon 01 Dec 2025 01:31:56 +0000
ROA not before:           Mon 01 Dec 2025 01:31:56 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     23614
IP address blocks:        210.158.176.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/n-sQXGfl_VyeGv0Go0PIQfBafxU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/n-sQXGfl_VyeGv0Go0PIQfBafxU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n-sQXGfl_VyeGv0Go0PIQfBafxU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 16:35:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FEB105C67E5FD5C9E1AFD06A343C841F05A7F15
        Validity
            Not Before: Dec  1 01:31:56 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=FA7AB5B315803F6E9F1BFA169ECA0CE8526BC616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ce:fb:43:80:2d:4e:61:38:ae:76:c9:8c:73:
                    b8:6b:d6:73:a3:3e:4d:2f:40:ed:13:75:86:ae:b6:
                    8c:55:c6:1f:84:50:8f:b5:ac:5d:6b:ac:6e:6b:1b:
                    2e:25:31:0d:99:fc:2d:e9:e6:2d:27:16:19:36:09:
                    e7:4a:07:d0:5d:39:a7:7f:f7:63:45:4e:6b:17:f5:
                    28:dc:2e:44:be:6d:24:81:52:f6:eb:63:3b:ac:f3:
                    dc:e4:74:28:a3:fa:54:47:a5:a2:e5:fb:32:fc:b5:
                    d8:c0:c2:ab:40:56:2f:e4:2e:79:95:23:35:a7:fe:
                    e7:56:7b:97:da:92:d8:b0:6a:5d:a8:b2:f6:65:b2:
                    43:0d:48:99:97:8c:0c:e6:2b:4b:71:b7:01:74:fd:
                    b2:ea:d7:bf:46:9e:14:9c:1d:43:56:48:21:b1:10:
                    e8:bb:cd:3b:4a:a7:47:67:bb:aa:01:cc:f2:d8:53:
                    e4:12:74:f2:44:03:41:83:e6:13:25:23:58:73:7c:
                    98:af:27:2c:77:e6:b3:7f:98:ad:de:b9:16:f7:14:
                    9c:fc:31:00:8d:9b:53:b0:90:ac:39:51:f3:19:a3:
                    7c:57:88:d3:c9:51:92:65:cf:a0:ce:dd:4c:30:70:
                    2d:9f:ae:40:4c:6d:fe:c2:6c:84:ce:e8:24:b4:c9:
                    66:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:7A:B5:B3:15:80:3F:6E:9F:1B:FA:16:9E:CA:0C:E8:52:6B:C6:16
            X509v3 Authority Key Identifier:
                keyid:9F:EB:10:5C:67:E5:FD:5C:9E:1A:FD:06:A3:43:C8:41:F0:5A:7F:15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/n-sQXGfl_VyeGv0Go0PIQfBafxU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n-sQXGfl_VyeGv0Go0PIQfBafxU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/-nq1sxWAP26fG_oWnsoM6FJrxhY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.158.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:24:a1:73:17:f9:06:1a:ee:d5:7c:d7:7f:b0:50:f4:09:0f:
         36:19:5f:bb:c7:e8:7a:12:35:8c:fd:94:a6:4e:7b:c2:2c:23:
         66:f1:c5:75:29:91:6f:05:49:e2:67:6c:80:9c:e6:b0:45:96:
         7f:5f:07:f9:19:eb:97:bf:14:0a:69:de:d2:a3:e5:d7:20:e1:
         2b:27:54:a2:a5:45:e4:30:be:ef:61:1e:8d:3b:f4:81:c0:e4:
         f7:d1:ea:24:a9:f7:08:74:6c:ce:31:51:07:ab:7d:11:43:2a:
         c0:9b:60:84:1e:00:ad:b6:90:de:65:61:f5:bf:8f:e8:ed:f4:
         ac:a2:df:f8:4a:3b:9b:1a:24:24:c1:77:fb:25:82:04:d6:67:
         46:08:1e:cc:0a:c3:85:d8:d8:f7:00:2d:26:f5:f8:d5:1a:f1:
         6b:0e:e1:5b:87:dc:eb:64:ed:4a:ba:fa:a5:e6:b9:d8:2c:64:
         5b:2b:38:7b:e6:40:6f:92:f7:60:b3:7a:ae:42:ba:2f:5c:7b:
         cd:e4:2c:0c:9b:5a:b0:22:c2:3a:60:6f:ea:05:b8:59:ae:68:
         54:35:fa:0b:8f:4f:3f:82:44:d2:56:69:74:ed:c4:ba:3c:b0:
         a6:aa:1b:6c:8c:e8:f2:bd:f3:ce:f1:4f:3b:2e:55:cd:38:14:
         cd:00:4a:f1
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBQDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5RkVC
MTA1QzY3RTVGRDVDOUUxQUZEMDZBMzQzQzg0MUYwNUE3RjE1MB4XDTI1MTIwMTAx
MzE1NloXDTI2MTExNTAxMzAwMlowMzExMC8GA1UEAxMoRkE3QUI1QjMxNTgwM0Y2
RTlGMUJGQTE2OUVDQTBDRTg1MjZCQzYxNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKrO+0OALU5hOK52yYxzuGvWc6M+TS9A7RN1hq62jFXGH4RQj7Ws
XWusbmsbLiUxDZn8LenmLScWGTYJ50oH0F05p3/3Y0VOaxf1KNwuRL5tJIFS9utj
O6zz3OR0KKP6VEelouX7Mvy12MDCq0BWL+QueZUjNaf+51Z7l9qS2LBqXaiy9mWy
Qw1ImZeMDOYrS3G3AXT9surXv0aeFJwdQ1ZIIbEQ6LvNO0qnR2e7qgHM8thT5BJ0
8kQDQYPmEyUjWHN8mK8nLHfms3+Yrd65FvcUnPwxAI2bU7CQrDlR8xmjfFeI08lR
kmXPoM7dTDBwLZ+uQExt/sJshM7oJLTJZskCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBT6erWzFYA/bp8b+haeygzoUmvGFjAfBgNVHSMEGDAWgBSf6xBcZ+X9XJ4a/Qaj
Q8hB8Fp/FTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODIwL24tc1FYR2ZsX1Z5ZUd2MEdvMFBJUWZCYWZ4VS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL24tc1FYR2ZsX1Z5ZUd2MEdvMFBJUWZC
YWZ4VS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84MjAvLW5xMXN4V0FQMjZmR19vV25zb002RkpyeGhZLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAtKesDANBgkqhkiG9w0BAQsFAAOCAQEASyShcxf5Bhru1XzXf7BQ9AkPNhlf
u8foehI1jP2Upk57wiwjZvHFdSmRbwVJ4mdsgJzmsEWWf18H+Rnrl78UCmne0qPl
1yDhKydUoqVF5DC+72EejTv0gcDk99HqJKn3CHRszjFRB6t9EUMqwJtghB4ArbaQ
3mVh9b+P6O30rKLf+Eo7mxokJMF3+yWCBNZnRggezArDhdjY9wAtJvX41Rrxaw7h
W4fc62TtSrr6pea52CxkWys4e+ZAb5L3YLN6rkK6L1x7zeQsDJtasCLCOmBv6gW4
Wa5oVDX6C49PP4JE0lZpdO3EujywpqobbIzo8r3zzvFPOy5VzTgUzQBK8Q==
-----END CERTIFICATE-----
Generated at Sun Dec 7 18:18:26 2025 by rpki-client