This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/877/PSWNdOxBlIvhZQsHDOOtiphJ4Eg.roa
File:                     PSWNdOxBlIvhZQsHDOOtiphJ4Eg.roa (raw, json)
Hash identifier:          R969rr2YofDAbwQCy+YWT4rC2ImQhVIKpTpBIOU8Ujw=
Subject key identifier:   3D:25:8D:74:EC:41:94:8B:E1:65:0B:07:0C:E3:AD:8A:98:49:E0:48
Certificate issuer:       /CN=1933DE3EF96450CA120C77A5EA826434DD149549
Certificate serial:       53
Authority key identifier: 19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/PSWNdOxBlIvhZQsHDOOtiphJ4Eg.roa
Signing time:             Mon 01 Dec 2025 01:31:30 +0000
ROA not before:           Mon 01 Dec 2025 01:31:30 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     55385
IP address blocks:        103.2.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 05:11:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1933DE3EF96450CA120C77A5EA826434DD149549
        Validity
            Not Before: Dec  1 01:31:30 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=3D258D74EC41948BE1650B070CE3AD8A9849E048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:aa:38:bb:03:c2:7d:de:59:a4:bc:48:71:fb:
                    86:79:b4:84:04:91:d7:d9:7d:72:80:f0:90:0a:91:
                    62:8f:94:fa:9c:76:31:44:db:7e:4b:23:6e:7f:00:
                    51:db:a8:48:13:06:02:2d:c6:a1:f1:83:72:36:85:
                    fb:d8:b3:92:d9:5f:66:3a:cb:f7:93:83:02:40:74:
                    9c:e1:b9:7c:f0:aa:92:03:0d:a6:02:64:bb:c7:49:
                    95:72:b6:ca:59:af:4f:f3:bf:78:40:52:0e:5b:08:
                    36:7e:e5:1d:fe:68:35:35:98:e9:64:3e:0a:61:2b:
                    ef:f2:3f:e9:48:4d:11:91:a6:c9:72:81:5b:58:c3:
                    cb:01:5d:05:a9:eb:6b:6f:ef:cd:e8:32:98:e6:87:
                    6f:74:01:2a:75:bb:82:d0:e9:54:b3:36:9b:49:d9:
                    9a:53:7a:5d:b6:a2:58:75:6b:7c:72:51:17:6e:33:
                    9d:3b:0c:fd:42:71:b4:04:11:09:2f:a6:9e:f8:1a:
                    b0:bf:c7:87:3b:c9:70:17:02:a1:10:2a:47:04:a0:
                    7b:3f:57:0b:6c:ab:15:a0:ce:2e:23:76:7c:64:43:
                    29:21:a2:20:6d:43:b5:93:a5:9d:7e:59:dc:82:6f:
                    26:93:03:7b:c8:b7:03:99:69:31:85:07:59:cb:b3:
                    9c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:25:8D:74:EC:41:94:8B:E1:65:0B:07:0C:E3:AD:8A:98:49:E0:48
            X509v3 Authority Key Identifier:
                keyid:19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/PSWNdOxBlIvhZQsHDOOtiphJ4Eg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:ec:3b:60:08:9a:11:70:64:ac:b1:0e:e0:2a:8f:01:99:2c:
         77:bf:7b:1f:76:58:af:71:37:81:bb:0c:87:12:ff:85:3f:25:
         87:e9:2b:04:69:07:36:4d:43:45:6a:b7:07:44:cd:cb:d7:9f:
         5b:07:44:9d:24:5b:52:c8:2b:ab:da:6b:64:f4:42:94:9e:d6:
         7d:fe:5d:f5:48:e8:be:a5:f7:04:59:81:a4:02:32:c9:2a:d8:
         03:2d:01:1f:df:f7:d1:68:8d:5a:c7:eb:98:1e:29:be:ce:50:
         d2:be:73:15:98:72:8d:2f:5f:4f:c6:03:81:06:e9:93:e3:9b:
         63:3d:3d:dd:51:f0:87:4c:6b:32:a4:07:b8:a0:81:35:cd:8b:
         26:62:61:5d:bb:05:0b:95:68:63:03:31:95:f0:e0:3c:7a:a4:
         aa:3d:1a:56:48:b9:d9:ca:15:0b:3b:9b:1f:fd:fa:94:39:f5:
         52:27:1f:eb:8b:ca:d5:de:48:45:aa:0a:d8:64:61:70:c5:94:
         e8:18:17:91:ad:6d:20:9c:78:a9:89:22:ed:79:29:06:9b:3f:
         df:9e:cb:0d:53:6b:af:1d:3b:bf:89:67:45:c0:7d:03:03:00:
         af:5c:3a:b7:50:6b:84:60:d5:60:82:af:f7:96:94:9e:bc:8d:
         e9:bd:a6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:45:13 2025 by rpki-client