This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/877/tbUCnI2XVYm45Cmf7wPwpSm2Xns.roa
File:                     tbUCnI2XVYm45Cmf7wPwpSm2Xns.roa (raw, json)
Hash identifier:          /PlKVbJ/TWWOl/2V0lkCFLm9tgDFyYIDkLig/P8sjVs=
Subject key identifier:   B5:B5:02:9C:8D:97:55:89:B8:E4:29:9F:EF:03:F0:A5:29:B6:5E:7B
Certificate issuer:       /CN=1933DE3EF96450CA120C77A5EA826434DD149549
Certificate serial:       57
Authority key identifier: 19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/tbUCnI2XVYm45Cmf7wPwpSm2Xns.roa
Signing time:             Mon 01 Dec 2025 01:31:32 +0000
ROA not before:           Mon 01 Dec 2025 01:31:32 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     17683
IP address blocks:        202.227.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1933DE3EF96450CA120C77A5EA826434DD149549
        Validity
            Not Before: Dec  1 01:31:32 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=B5B5029C8D975589B8E4299FEF03F0A529B65E7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d3:c8:aa:61:1d:76:5b:05:32:93:36:b2:e1:
                    7c:92:cb:f5:44:89:17:fe:aa:36:0a:35:b9:92:92:
                    9d:45:25:48:1d:ec:81:1a:4b:6a:ab:3f:c1:3e:91:
                    d5:d1:ca:46:c4:5d:24:ee:d4:b8:56:db:fb:df:70:
                    21:37:74:0f:ff:cd:8f:62:c4:e6:21:cb:81:78:54:
                    7c:f7:a1:7e:35:68:83:15:ed:9d:b8:12:80:be:fd:
                    56:e3:89:00:fb:fe:16:a2:ad:80:a4:10:bb:e5:6e:
                    b2:c6:49:42:17:37:5f:73:d6:c0:59:bd:e2:db:d9:
                    86:7f:ad:45:a5:ee:3e:5b:b2:5f:23:c3:ec:93:93:
                    24:92:61:39:ea:71:1b:90:eb:9f:18:ee:55:0f:1a:
                    15:e2:55:c8:79:b1:9b:66:78:8d:6a:3d:51:d3:14:
                    db:f2:f3:0e:34:97:d6:e9:6f:37:59:0d:20:94:84:
                    32:3a:a7:61:1e:cb:4d:45:e3:80:cb:10:1c:a3:38:
                    97:f0:e3:0d:9a:9d:f4:7c:d9:e4:c4:35:fb:98:c8:
                    46:17:e9:6a:64:63:a7:6c:61:42:44:07:43:76:18:
                    13:a2:fb:fc:ae:28:fe:5f:c2:6a:a6:32:07:45:70:
                    95:1f:9e:c2:c7:ef:d9:42:44:52:0d:8c:e6:62:3b:
                    b5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B5:02:9C:8D:97:55:89:B8:E4:29:9F:EF:03:F0:A5:29:B6:5E:7B
            X509v3 Authority Key Identifier:
                keyid:19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/tbUCnI2XVYm45Cmf7wPwpSm2Xns.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.227.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bd:f7:8d:ae:e0:f0:68:ca:d5:cc:e5:56:7d:0e:51:a6:e5:82:
         e8:ec:ff:57:5a:71:2b:7a:a0:d5:47:11:12:98:12:c4:83:2e:
         63:4a:a5:e4:71:5c:4a:f3:19:65:13:c5:0b:ca:80:27:d3:fe:
         13:06:fa:76:ac:c1:db:d4:9a:cd:61:02:ca:05:10:8b:4f:18:
         cb:1d:ba:50:35:ba:52:2b:e5:d5:18:0c:e7:22:10:4d:09:c4:
         37:71:16:af:aa:5d:93:82:f5:22:d5:34:b3:a1:21:75:ee:f9:
         a6:ab:88:f6:11:58:93:25:48:42:43:04:f2:46:32:2d:fb:78:
         92:4c:36:da:f9:ba:03:e7:4a:3b:5c:d9:8d:77:2d:2a:4d:cc:
         ad:26:fb:47:87:6c:be:77:17:94:ff:a8:09:55:a0:8d:b6:d8:
         e1:0e:55:90:60:23:5d:d5:31:72:06:ec:68:89:46:c7:85:2a:
         cf:a4:a7:f8:1e:8b:bd:6b:c8:b9:58:55:17:3c:c8:38:7d:8f:
         65:12:c1:4e:d9:6b:b0:22:1c:7a:d0:fb:43:11:42:6b:8e:3e:
         a1:ca:f4:b6:2e:e5:68:d1:43:7e:3f:24:6a:f3:a8:51:12:60:
         c1:65:1e:93:38:bc:56:f4:2a:0d:6f:26:cd:ef:a4:dd:8a:a4:
         1c:6d:49:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:20:34 2025 by rpki-client