This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/820/x-uBZeExeGljNu0RVdcHfU8bPK8.roa
File:                     x-uBZeExeGljNu0RVdcHfU8bPK8.roa (raw, json)
Hash identifier:          1Qw7DAQzr9Jq3U/T8yb4IiVAFqANR9tUDta+3b48rEE=
Subject key identifier:   C7:EB:81:65:E1:31:78:69:63:36:ED:11:55:D7:07:7D:4F:1B:3C:AF
Certificate issuer:       /CN=9FEB105C67E5FD5C9E1AFD06A343C841F05A7F15
Certificate serial:       43
Authority key identifier: 9F:EB:10:5C:67:E5:FD:5C:9E:1A:FD:06:A3:43:C8:41:F0:5A:7F:15
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n-sQXGfl_VyeGv0Go0PIQfBafxU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/x-uBZeExeGljNu0RVdcHfU8bPK8.roa
Signing time:             Mon 01 Dec 2025 01:31:58 +0000
ROA not before:           Mon 01 Dec 2025 01:31:58 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     23614
IP address blocks:        210.158.184.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/n-sQXGfl_VyeGv0Go0PIQfBafxU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/n-sQXGfl_VyeGv0Go0PIQfBafxU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n-sQXGfl_VyeGv0Go0PIQfBafxU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 16:35:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FEB105C67E5FD5C9E1AFD06A343C841F05A7F15
        Validity
            Not Before: Dec  1 01:31:58 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=C7EB8165E13178696336ED1155D7077D4F1B3CAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:67:84:01:cc:14:ef:1f:b3:b1:f3:3c:f7:51:
                    22:07:1d:66:e4:5c:44:97:33:cd:8f:ac:3e:e5:cb:
                    5e:d0:fe:1b:e8:63:f5:ba:a7:27:9f:6a:87:29:bc:
                    c0:a4:af:ac:46:e0:9a:39:86:71:1f:be:ea:7a:64:
                    fb:62:eb:f9:f9:32:ea:7f:8f:f1:d7:7b:e8:a4:fc:
                    e9:f3:36:b2:1b:ae:82:1d:0f:2e:02:8c:7d:2d:26:
                    7b:a1:99:ce:fc:cd:52:f6:11:bc:7a:3e:50:db:65:
                    33:25:c0:63:3d:8f:ec:17:cc:53:4b:8e:77:e3:49:
                    5b:1c:0f:43:46:58:b5:c2:10:81:0d:d8:ab:68:60:
                    d9:52:95:3d:65:17:47:ff:8c:9f:55:3a:88:89:5f:
                    85:3f:58:86:de:05:75:12:a3:e4:fc:b3:fa:ad:6c:
                    c9:8e:0a:20:a6:be:a7:75:eb:7d:bd:c0:46:ff:12:
                    7c:71:65:bd:68:c3:58:57:31:50:1c:74:b0:21:aa:
                    fe:c4:c1:29:26:f4:e4:7d:91:58:77:14:96:ba:c4:
                    c7:cc:28:ad:6e:d3:cb:4e:4d:3a:b6:ea:06:3e:84:
                    07:de:32:e6:32:92:96:c0:56:62:eb:64:b4:94:be:
                    03:d8:43:cf:dd:da:6b:9f:7f:07:d5:f7:ca:c0:91:
                    cf:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:EB:81:65:E1:31:78:69:63:36:ED:11:55:D7:07:7D:4F:1B:3C:AF
            X509v3 Authority Key Identifier:
                keyid:9F:EB:10:5C:67:E5:FD:5C:9E:1A:FD:06:A3:43:C8:41:F0:5A:7F:15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/n-sQXGfl_VyeGv0Go0PIQfBafxU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n-sQXGfl_VyeGv0Go0PIQfBafxU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/x-uBZeExeGljNu0RVdcHfU8bPK8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.158.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         38:26:a4:61:bc:51:f5:be:20:43:f5:dc:3f:33:cb:47:3e:67:
         bd:10:a2:fe:4a:16:bf:28:6c:92:af:91:ba:90:87:af:75:75:
         71:2a:a5:6a:b1:44:a6:f8:bb:cb:26:75:fe:c3:24:cc:ec:72:
         75:98:6e:b4:bc:f3:95:31:2f:af:a3:ce:a4:31:99:f2:96:05:
         7b:eb:e6:46:7c:67:c1:1a:9c:ea:a2:7b:c8:e9:fa:8a:d4:f0:
         6c:d2:34:b6:d5:81:48:d6:99:e2:69:3e:ec:f9:23:c3:d9:b3:
         d6:77:e4:5b:32:68:79:1c:cd:bc:a3:46:6a:cf:90:85:3c:fb:
         c3:08:6e:fc:4a:d9:c9:f2:92:b1:a4:2b:6f:d4:4a:85:6a:b5:
         e1:f3:e1:24:90:9a:47:75:57:b4:76:61:8c:30:5e:8b:e8:2b:
         3e:6d:61:2d:c7:e6:c0:c8:0c:d8:fa:88:d2:3a:bb:b4:7d:d5:
         34:93:c4:96:c9:93:6e:cf:0c:67:37:a5:f4:b9:93:b5:f3:39:
         40:4a:1f:cf:fc:8b:06:8c:c3:18:77:ca:6a:c7:10:95:14:1c:
         4e:f7:dc:10:01:c7:5e:a8:9e:ae:a1:73:38:3b:2c:9e:96:17:
         31:d5:f2:aa:6b:36:94:28:52:08:6b:32:aa:29:00:39:5a:e4:
         a3:a5:16:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 18:18:26 2025 by rpki-client