This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/822/8AInTprTVliEtrwDBGtyCzjr-Eo.roa
File:                     8AInTprTVliEtrwDBGtyCzjr-Eo.roa (raw, json)
Hash identifier:          kFLmgoGTpfJJ+3guCTcXNVVZouqAbw6y9bfadbnqnI0=
Subject key identifier:   F0:02:27:4E:9A:D3:56:58:84:B6:BC:03:04:6B:72:0B:38:EB:F8:4A
Certificate issuer:       /CN=55061B7BA6111F230BDB61E29781E46D0165E99E
Certificate serial:       5C
Authority key identifier: 55:06:1B:7B:A6:11:1F:23:0B:DB:61:E2:97:81:E4:6D:01:65:E9:9E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VQYbe6YRHyML22Hil4HkbQFl6Z4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/8AInTprTVliEtrwDBGtyCzjr-Eo.roa
Signing time:             Mon 01 Dec 2025 01:28:36 +0000
ROA not before:           Mon 01 Dec 2025 01:28:36 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     9354
IP address blocks:        210.158.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/VQYbe6YRHyML22Hil4HkbQFl6Z4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/VQYbe6YRHyML22Hil4HkbQFl6Z4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VQYbe6YRHyML22Hil4HkbQFl6Z4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 11:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55061B7BA6111F230BDB61E29781E46D0165E99E
        Validity
            Not Before: Dec  1 01:28:36 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=F002274E9AD3565884B6BC03046B720B38EBF84A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f8:70:4f:de:83:04:c2:ad:9c:68:9a:86:ca:
                    aa:07:e7:5f:c8:e5:4c:d1:22:23:60:47:29:7f:ac:
                    a9:82:0d:82:90:60:54:2f:bd:c6:92:82:e2:f3:1b:
                    68:69:67:95:2c:b8:e2:48:a1:ab:4f:d0:5f:3c:86:
                    8f:e8:f3:e5:8c:d5:01:ec:fa:cf:3f:25:d4:53:d7:
                    d6:f2:83:a5:06:38:6c:bd:15:bc:4e:ed:02:f9:83:
                    02:5a:a8:95:68:82:f8:d7:22:5f:60:c1:85:31:11:
                    b2:4c:11:56:8a:e4:2e:b3:12:7e:5f:f0:61:f5:a9:
                    d8:64:5c:e7:c3:f8:81:e7:d3:ad:76:ed:3b:5a:a6:
                    6e:c8:67:5f:9a:c4:86:4b:6f:4e:90:e3:44:7d:50:
                    2f:47:06:3b:7b:35:04:1c:4f:98:fc:20:31:41:74:
                    f9:58:b3:a5:6f:39:9a:cb:70:e4:16:93:eb:45:bf:
                    d7:15:46:49:4c:11:ab:82:08:d8:10:33:87:c2:e9:
                    9c:f9:ea:1b:fe:b6:c5:22:ae:8a:0c:1c:9e:78:05:
                    74:5b:2d:4a:41:fa:81:05:d3:c8:31:32:b5:6b:02:
                    7f:cc:3c:d4:03:17:0e:8a:c1:ad:39:34:3e:98:f6:
                    c7:b3:7e:16:3f:e3:2f:07:cc:77:7d:e8:86:e1:5b:
                    72:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:02:27:4E:9A:D3:56:58:84:B6:BC:03:04:6B:72:0B:38:EB:F8:4A
            X509v3 Authority Key Identifier:
                keyid:55:06:1B:7B:A6:11:1F:23:0B:DB:61:E2:97:81:E4:6D:01:65:E9:9E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/VQYbe6YRHyML22Hil4HkbQFl6Z4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VQYbe6YRHyML22Hil4HkbQFl6Z4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/8AInTprTVliEtrwDBGtyCzjr-Eo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.158.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         27:b7:7f:5d:bf:1a:3b:48:f5:4f:e8:af:fe:38:9a:be:94:4a:
         95:f9:b6:f2:91:b8:43:5f:a3:6a:b6:b4:86:3d:cf:f9:a0:50:
         b0:50:ed:a1:55:a1:cd:b1:26:e7:a4:6b:00:2f:7b:f3:9c:ec:
         c3:50:da:10:e6:dd:a0:84:a3:7f:fa:3a:56:84:b8:ca:ff:f8:
         89:c6:0f:9c:cd:3d:de:8a:20:1d:02:ce:b3:6c:47:ec:18:0f:
         6b:6b:f8:0a:72:16:ad:f2:7b:d6:4d:41:f6:33:45:70:e9:6d:
         d2:af:51:41:e6:4f:1b:53:b9:f4:3f:df:b3:8a:89:f5:1d:36:
         e4:98:f3:55:9b:b3:b0:67:47:7e:9a:1f:ea:cf:18:d7:ce:bf:
         a4:76:cc:0c:bc:08:ca:1e:b1:ba:35:01:61:f3:b9:f3:ee:8f:
         e9:3c:11:4f:f0:f8:ce:54:94:f3:40:81:81:ca:64:5f:ac:13:
         98:92:37:c2:66:f5:1e:92:7a:82:d3:90:34:7b:c9:96:6c:e1:
         60:8a:05:cb:71:96:f6:74:7b:c7:34:95:e7:67:4a:0f:73:b0:
         b6:39:72:88:7a:b7:53:0e:5b:31:73:02:20:f1:cb:3f:63:7c:
         20:f4:a5:a2:49:9c:a1:aa:8c:c0:d4:c3:bf:20:58:85:57:64:
         c1:b1:60:32
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBXDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1NTA2
MUI3QkE2MTExRjIzMEJEQjYxRTI5NzgxRTQ2RDAxNjVFOTlFMB4XDTI1MTIwMTAx
MjgzNloXDTI2MTExNTAxMzAwMlowMzExMC8GA1UEAxMoRjAwMjI3NEU5QUQzNTY1
ODg0QjZCQzAzMDQ2QjcyMEIzOEVCRjg0QTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANr4cE/egwTCrZxomobKqgfnX8jlTNEiI2BHKX+sqYINgpBgVC+9
xpKC4vMbaGlnlSy44kihq0/QXzyGj+jz5YzVAez6zz8l1FPX1vKDpQY4bL0VvE7t
AvmDAlqolWiC+NciX2DBhTERskwRVorkLrMSfl/wYfWp2GRc58P4gefTrXbtO1qm
bshnX5rEhktvTpDjRH1QL0cGO3s1BBxPmPwgMUF0+VizpW85mstw5BaT60W/1xVG
SUwRq4II2BAzh8LpnPnqG/62xSKuigwcnngFdFstSkH6gQXTyDEytWsCf8w81AMX
DorBrTk0Ppj2x7N+Fj/jLwfMd33ohuFbch0CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTwAidOmtNWWIS2vAMEa3ILOOv4SjAfBgNVHSMEGDAWgBRVBht7phEfIwvbYeKX
geRtAWXpnjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODIyL1ZRWWJlNllSSHlNTDIySGlsNEhrYlFGbDZaNC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1ZRWWJlNllSSHlNTDIySGlsNEhrYlFG
bDZaNC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84MjIvOEFJblRwclRWbGlFdHJ3REJHdHlDempyLUVvLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBNKekDANBgkqhkiG9w0BAQsFAAOCAQEAJ7d/Xb8aO0j1T+iv/jiavpRKlfm2
8pG4Q1+jara0hj3P+aBQsFDtoVWhzbEm56RrAC9785zsw1DaEObdoISjf/o6VoS4
yv/4icYPnM093oogHQLOs2xH7BgPa2v4CnIWrfJ71k1B9jNFcOlt0q9RQeZPG1O5
9D/fs4qJ9R025JjzVZuzsGdHfpof6s8Y186/pHbMDLwIyh6xujUBYfO58+6P6TwR
T/D4zlSU80CBgcpkX6wTmJI3wmb1HpJ6gtOQNHvJlmzhYIoFy3GW9nR7xzSV52dK
D3OwtjlyiHq3Uw5bMXMCIPHLP2N8IPSlokmcoaqMwNTDvyBYhVdkwbFgMg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:31:06 2025 by rpki-client