This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/877/3aDh3XWXp-141WEWvoENgUYRaoU.roa
File:                     3aDh3XWXp-141WEWvoENgUYRaoU.roa (raw, json)
Hash identifier:          abUzgEaYZRAUtwX7QV42XutH9bSXDDbkAItMprBrm7w=
Subject key identifier:   DD:A0:E1:DD:75:97:A7:ED:78:D5:61:16:BE:81:0D:81:46:11:6A:85
Certificate issuer:       /CN=1933DE3EF96450CA120C77A5EA826434DD149549
Certificate serial:       58
Authority key identifier: 19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/3aDh3XWXp-141WEWvoENgUYRaoU.roa
Signing time:             Mon 01 Dec 2025 01:31:32 +0000
ROA not before:           Mon 01 Dec 2025 01:31:32 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     17683
IP address blocks:        202.174.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1933DE3EF96450CA120C77A5EA826434DD149549
        Validity
            Not Before: Dec  1 01:31:32 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=DDA0E1DD7597A7ED78D56116BE810D8146116A85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3b:a8:11:61:df:27:1c:3c:57:89:b1:14:7e:
                    b7:b6:f5:75:e3:76:cd:2a:82:d9:da:12:e4:93:72:
                    19:db:48:a5:b9:84:3f:71:05:9d:79:34:a9:21:40:
                    9b:3c:47:43:2d:c7:67:f4:1e:ce:41:bb:f6:02:64:
                    3e:42:54:42:e2:32:61:f0:38:53:05:96:ba:7f:f1:
                    9b:a6:d7:c9:e3:6d:e4:36:e6:92:8f:06:10:9d:59:
                    24:75:d7:00:56:40:f9:35:7d:a3:ec:b7:03:69:ac:
                    6d:5e:3a:20:2f:8d:1c:ca:71:f6:50:d2:be:aa:cd:
                    65:9b:36:52:e2:db:ae:9a:37:d6:73:9a:b9:ef:81:
                    86:87:c8:08:15:58:d8:8f:90:3a:26:1a:5b:13:31:
                    d3:40:f0:33:c1:fe:5b:9b:19:cd:7e:bd:08:03:cf:
                    40:9d:5a:87:d6:82:4c:11:4f:b3:10:8a:0c:a9:04:
                    9e:bb:03:47:fd:43:e8:24:03:f7:39:0b:d1:16:ed:
                    24:56:92:8b:89:ab:63:19:ed:79:66:3e:81:3d:f8:
                    bd:3c:d9:0f:0e:64:12:81:ae:47:20:75:36:cc:12:
                    bd:ee:66:17:fe:b6:c6:3e:8d:38:ca:f1:6e:2f:11:
                    4f:82:b8:e3:a9:59:02:5b:8f:5d:f6:3f:f5:87:72:
                    46:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A0:E1:DD:75:97:A7:ED:78:D5:61:16:BE:81:0D:81:46:11:6A:85
            X509v3 Authority Key Identifier:
                keyid:19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/3aDh3XWXp-141WEWvoENgUYRaoU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.174.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         13:c6:d8:45:f4:e4:be:bc:a3:73:fd:3d:c2:69:d1:07:1e:de:
         d5:d3:28:fb:4a:f9:80:1f:7a:7b:84:8b:3c:2b:7e:bb:6e:cf:
         f1:6d:29:8c:aa:e1:f5:56:17:6a:36:ec:14:5e:d6:dd:54:cd:
         93:14:e4:ad:08:27:8e:3a:f0:ec:50:f3:07:15:eb:19:03:dc:
         8a:85:77:77:bf:35:ab:f2:f4:1f:b4:05:64:5b:ec:9a:15:61:
         32:0a:46:58:d3:16:10:9a:ed:e9:83:ca:01:0b:b0:5e:9b:5d:
         ee:72:1f:c0:e8:d7:a0:51:84:d1:e8:82:57:d3:5b:9b:28:6b:
         0e:cb:d9:45:06:49:7a:72:2b:10:5b:9d:18:0f:c2:02:4c:74:
         b8:b1:1a:0e:39:ed:e1:9c:36:28:36:a6:82:d7:56:0b:16:3f:
         e7:04:5d:9b:31:d2:a6:0a:82:af:d1:de:f0:00:a4:61:85:49:
         32:dd:44:c2:9f:37:cc:73:6b:9b:34:8d:57:40:71:a9:5b:89:
         df:5a:01:bb:0a:a1:72:3e:e4:61:e9:b3:04:c1:ab:51:cb:c2:
         bc:12:2d:1c:c0:80:ec:f3:04:65:ff:84:74:b7:26:54:f5:f1:
         e6:ba:d1:7b:49:55:b3:f6:9a:2f:d5:fb:fa:5b:07:cf:6d:9f:
         47:19:45:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:32:14 2025 by rpki-client