This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/877/9PMSbf59vd4qXxrhcb_oWoNFUZk.roa
File:                     9PMSbf59vd4qXxrhcb_oWoNFUZk.roa (raw, json)
Hash identifier:          aC0L2C9PgJGCtxFSx4ZxuD0Bph6GXW86S7mw2vcxsAQ=
Subject key identifier:   F4:F3:12:6D:FE:7D:BD:DE:2A:5F:1A:E1:71:BF:E8:5A:83:45:51:99
Certificate issuer:       /CN=1933DE3EF96450CA120C77A5EA826434DD149549
Certificate serial:       56
Authority key identifier: 19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/9PMSbf59vd4qXxrhcb_oWoNFUZk.roa
Signing time:             Mon 01 Dec 2025 01:31:31 +0000
ROA not before:           Mon 01 Dec 2025 01:31:31 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     17683
IP address blocks:        202.227.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 05:11:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1933DE3EF96450CA120C77A5EA826434DD149549
        Validity
            Not Before: Dec  1 01:31:31 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=F4F3126DFE7DBDDE2A5F1AE171BFE85A83455199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8e:e7:74:0d:48:c3:b0:6e:1d:b7:41:fd:23:
                    51:03:a5:44:a3:dd:3b:15:19:1a:21:78:d9:57:22:
                    61:5f:9c:da:f8:b5:92:f3:13:f2:4f:b1:6b:92:38:
                    01:63:3e:52:24:5e:1b:30:03:89:1a:c5:af:8e:f6:
                    c2:df:6c:08:2d:51:aa:c0:87:dc:88:a4:6e:9e:2b:
                    30:56:9c:23:4c:27:b1:33:80:68:c4:a4:63:98:71:
                    7f:59:92:c8:01:4f:27:8c:0c:96:55:db:17:3a:66:
                    d2:f6:08:26:61:c6:94:0f:1b:0c:40:b6:0c:a6:ff:
                    b9:7c:8e:7d:11:01:91:f8:86:34:c1:a7:14:59:fb:
                    7e:de:f9:36:fa:25:2b:92:36:2d:70:06:24:30:51:
                    d3:6d:a1:bf:f7:48:94:be:bb:39:2e:a2:0d:49:4f:
                    58:b3:c9:2d:b4:66:59:7d:27:54:10:e6:7f:fc:90:
                    72:81:ea:42:e6:40:8d:ee:4e:cc:75:bf:3c:2b:0e:
                    52:19:95:1d:55:fb:c9:35:d9:1d:e0:08:13:fc:10:
                    f3:06:9a:5b:3b:b5:d9:7d:2d:85:d4:de:57:e2:8b:
                    2e:b7:d2:4a:28:70:5e:fa:6a:66:a8:c4:ef:71:77:
                    0e:33:67:26:19:e3:56:37:8b:17:a4:dd:dd:d3:85:
                    6e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F3:12:6D:FE:7D:BD:DE:2A:5F:1A:E1:71:BF:E8:5A:83:45:51:99
            X509v3 Authority Key Identifier:
                keyid:19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/9PMSbf59vd4qXxrhcb_oWoNFUZk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.227.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         85:eb:9c:42:a3:11:66:7b:0b:8d:0e:c8:00:28:ce:3f:3b:69:
         ee:9d:fa:ec:57:ca:95:82:6c:4b:8b:21:22:a2:90:bb:b0:0b:
         1b:15:f5:ea:39:25:e3:77:6f:fe:24:67:37:a7:98:e6:79:2e:
         15:29:63:01:85:db:48:13:93:36:66:c5:1e:3b:93:17:5a:d5:
         10:22:f4:5e:26:3b:9e:61:2e:06:bc:7f:0c:1f:27:a8:f6:b5:
         2c:94:b3:cd:f5:a7:a3:f9:98:73:0e:38:26:8b:5f:3f:04:84:
         7b:fc:e9:3f:8d:b4:ce:68:a7:b2:12:07:7b:86:06:17:b1:79:
         2d:95:8e:a4:eb:87:55:6b:35:fe:dd:56:f9:76:4d:2d:ef:58:
         40:8c:69:04:3c:84:e8:e8:50:f4:c2:d0:48:a6:f9:f4:99:6d:
         2f:6d:93:9b:a9:c2:62:24:16:8d:35:ba:2c:ee:5e:e1:0d:f0:
         fa:57:c6:60:2b:3b:8e:bc:e2:cd:8a:e1:82:6e:fb:d7:24:80:
         70:a4:d6:54:d9:c1:e2:0b:16:c1:3e:b6:08:cd:b6:ce:b4:1a:
         bc:4f:a6:96:c5:c5:aa:01:ac:a4:00:6f:bf:31:46:19:48:35:
         00:2c:9f:2d:cd:d8:1e:b9:93:83:da:b6:0d:54:8e:0c:be:32:
         40:c3:3a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:21:25 2025 by rpki-client