This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/822/QfeQwW3DHKDqcO8nzZ3QNobBEkY.roa
File:                     QfeQwW3DHKDqcO8nzZ3QNobBEkY.roa (raw, json)
Hash identifier:          k1PP32DKDz2AoOs9qw3zLST1rPnX6vQ+1Go3xli9V8s=
Subject key identifier:   41:F7:90:C1:6D:C3:1C:A0:EA:70:EF:27:CD:9D:D0:36:86:C1:12:46
Certificate issuer:       /CN=55061B7BA6111F230BDB61E29781E46D0165E99E
Certificate serial:       5A
Authority key identifier: 55:06:1B:7B:A6:11:1F:23:0B:DB:61:E2:97:81:E4:6D:01:65:E9:9E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VQYbe6YRHyML22Hil4HkbQFl6Z4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/QfeQwW3DHKDqcO8nzZ3QNobBEkY.roa
Signing time:             Mon 01 Dec 2025 01:28:32 +0000
ROA not before:           Mon 01 Dec 2025 01:28:32 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     9354
IP address blocks:        103.131.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/VQYbe6YRHyML22Hil4HkbQFl6Z4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/VQYbe6YRHyML22Hil4HkbQFl6Z4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VQYbe6YRHyML22Hil4HkbQFl6Z4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55061B7BA6111F230BDB61E29781E46D0165E99E
        Validity
            Not Before: Dec  1 01:28:32 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=41F790C16DC31CA0EA70EF27CD9DD03686C11246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:79:78:d7:ee:bb:00:22:c6:c1:65:2b:1d:5f:
                    d4:b7:5b:9f:3a:d6:1c:95:d6:0f:9d:fa:2d:b0:cf:
                    33:4e:b5:65:e1:d8:db:12:3e:ae:34:41:f5:fa:06:
                    bf:66:5b:74:4e:bd:9c:bd:39:19:35:3d:41:8f:20:
                    b6:ec:ed:8f:61:8b:53:bc:ab:44:4d:d8:d1:52:52:
                    b1:d5:ca:9b:cb:fb:28:b0:7f:6c:4e:b6:fa:ed:bb:
                    2c:0e:a6:c9:e6:0e:7a:47:45:6d:a1:95:ed:3b:c6:
                    e5:1f:6c:c5:f4:7e:16:ea:97:05:63:ef:7f:0b:e6:
                    f9:2b:c2:37:70:01:a0:b1:de:38:01:37:84:5b:de:
                    6b:c7:96:1d:30:81:96:f0:71:2e:ec:42:c4:e5:5f:
                    1a:14:e0:f7:b5:bd:c8:35:5a:b1:f5:a0:dc:e6:11:
                    29:cd:41:e2:4b:e3:e5:88:b3:57:a4:28:2d:0f:6b:
                    7a:de:d3:45:31:35:c6:1f:7a:68:4e:32:f8:3f:5c:
                    89:22:4a:54:c8:cf:17:65:57:1e:00:d7:a0:20:e6:
                    21:44:4b:e0:9d:39:46:37:b0:d3:3d:90:82:39:68:
                    0c:e5:c4:87:a6:a7:3e:66:ee:6e:66:cb:0f:59:a1:
                    88:1e:22:54:1b:09:c7:14:82:87:59:8b:bc:90:ae:
                    45:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F7:90:C1:6D:C3:1C:A0:EA:70:EF:27:CD:9D:D0:36:86:C1:12:46
            X509v3 Authority Key Identifier:
                keyid:55:06:1B:7B:A6:11:1F:23:0B:DB:61:E2:97:81:E4:6D:01:65:E9:9E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/VQYbe6YRHyML22Hil4HkbQFl6Z4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VQYbe6YRHyML22Hil4HkbQFl6Z4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/QfeQwW3DHKDqcO8nzZ3QNobBEkY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:40:fa:00:1f:98:75:6e:bb:a8:ea:52:0a:f0:bd:e2:e1:52:
         f9:35:c2:6d:5c:0b:dd:6f:81:02:18:5f:b3:a2:a7:36:f6:41:
         76:6d:68:2d:54:f2:de:01:17:36:ab:e1:07:d4:2b:50:91:b7:
         26:f8:a3:fd:db:c1:65:65:ad:2e:4b:dd:72:90:d8:d2:87:70:
         91:62:3b:0f:5e:09:16:83:10:88:09:c6:79:13:6b:8b:94:ce:
         45:e1:3a:ae:9a:7f:40:45:14:bd:a6:0d:5a:90:e0:87:2b:27:
         61:65:90:8a:5b:da:86:9d:80:47:5a:f4:eb:83:0a:20:78:10:
         3d:12:b6:84:ef:ab:7d:c2:99:77:42:f2:d1:e4:3f:bd:df:69:
         59:bb:9c:b5:a6:22:ce:9c:9a:99:72:38:cd:4a:68:37:c0:cc:
         93:38:6b:7f:e2:c1:82:9b:85:bf:de:fd:da:51:68:e1:54:0a:
         e0:0c:eb:f8:cb:17:fb:0d:4a:43:55:7a:7f:e1:0d:1a:9a:89:
         b2:20:cd:cf:00:de:62:79:99:ad:49:d1:f6:05:03:cb:58:9a:
         d5:18:26:1f:78:c1:3f:33:c7:08:55:3c:98:b2:4a:91:d7:7e:
         5b:3c:dc:4f:59:f5:53:c6:5a:c6:0d:6f:13:c3:64:e4:10:db:
         d7:61:d2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:49:41 2025 by rpki-client