This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12207/mXzII3oOUttKbVZDlW8wqKiJtE4.roa
File:                     mXzII3oOUttKbVZDlW8wqKiJtE4.roa (raw, json)
Hash identifier:          +J8bYpFVueGlE80XHvoQ2fPKenZcmTxcvDkswv2KJDs=
Subject key identifier:   99:7C:C8:23:7A:0E:52:DB:4A:6D:56:43:95:6F:30:A8:A8:89:B4:4E
Certificate issuer:       /CN=19B4FDAE962F4960588B1D2BE6A1ED42F137098E
Certificate serial:       63
Authority key identifier: 19:B4:FD:AE:96:2F:49:60:58:8B:1D:2B:E6:A1:ED:42:F1:37:09:8E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GbT9rpYvSWBYix0r5qHtQvE3CY4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/mXzII3oOUttKbVZDlW8wqKiJtE4.roa
Signing time:             Sat 01 Nov 2025 01:34:16 +0000
ROA not before:           Sat 01 Nov 2025 01:34:16 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     55392
IP address blocks:        130.62.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GbT9rpYvSWBYix0r5qHtQvE3CY4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Nov 2025 15:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19B4FDAE962F4960588B1D2BE6A1ED42F137098E
        Validity
            Not Before: Nov  1 01:34:16 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=997CC8237A0E52DB4A6D5643956F30A8A889B44E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ee:63:31:97:a8:b6:ab:cc:73:31:0e:0d:47:
                    5f:a3:30:05:d9:a8:fb:14:38:b6:e5:ac:c0:9e:33:
                    a8:27:63:72:5a:37:9f:08:51:b9:9f:2f:66:61:95:
                    db:86:92:ce:af:c4:40:ce:36:52:01:ba:7e:dc:ab:
                    2a:49:56:08:3e:3c:7c:cb:67:29:ce:9f:c8:48:8f:
                    ab:dc:dd:f2:d9:5d:ae:2c:c1:fe:a2:98:76:66:42:
                    86:ed:ad:6a:a9:6f:82:4b:87:eb:23:04:57:82:57:
                    5d:5b:94:75:72:ee:6b:56:ae:55:d2:06:d5:12:21:
                    8d:b6:b9:24:9c:e0:43:57:bc:45:f4:ab:d5:e8:3b:
                    7e:89:70:34:4b:36:c4:ba:2b:b0:a5:5a:f1:d7:c3:
                    ae:49:80:e4:51:f6:46:04:35:51:5f:61:b8:50:e5:
                    c8:6c:d2:aa:f7:d8:c0:fc:42:26:31:5f:44:10:7c:
                    b7:da:53:2f:9d:d4:08:e8:b7:03:82:86:4c:38:f5:
                    c9:cb:7c:90:65:eb:b0:a8:73:8e:61:3f:b1:3a:76:
                    e3:7e:cc:40:3f:9d:59:8b:38:8e:d9:4b:b0:9c:c1:
                    34:fa:d0:89:41:9a:bf:6f:b4:5b:32:0a:9d:bb:a9:
                    63:35:7c:89:c7:48:08:0e:f3:18:25:d7:97:1e:cc:
                    80:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:7C:C8:23:7A:0E:52:DB:4A:6D:56:43:95:6F:30:A8:A8:89:B4:4E
            X509v3 Authority Key Identifier:
                keyid:19:B4:FD:AE:96:2F:49:60:58:8B:1D:2B:E6:A1:ED:42:F1:37:09:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GbT9rpYvSWBYix0r5qHtQvE3CY4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/mXzII3oOUttKbVZDlW8wqKiJtE4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.62.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         66:e1:dd:70:df:39:db:77:0e:b9:3d:7b:84:f7:cc:97:76:ee:
         0d:b1:fb:e3:93:07:3f:61:ab:a9:f2:95:8d:06:c2:9a:40:7e:
         1d:5b:96:05:f5:aa:1c:5f:4c:44:31:8b:55:32:39:26:02:21:
         8e:4f:44:cd:da:bd:e9:bd:47:bc:30:eb:d0:51:7d:2c:13:39:
         9c:a3:26:1d:b8:f7:9f:93:95:40:82:b8:06:d7:2f:ae:56:03:
         a2:09:cc:0b:3d:dd:c1:cf:0c:83:24:bf:ab:fd:c9:4b:f1:45:
         9c:5a:a8:83:84:3e:80:66:d6:2c:cf:fe:f9:dc:c8:77:97:3f:
         e3:3f:3a:e9:58:7f:1f:fb:cd:fc:56:65:14:18:c7:00:d4:6f:
         bf:14:15:33:cf:b8:24:5e:95:a6:93:a4:b0:23:ae:13:a4:9c:
         a9:88:9b:52:1e:18:f3:8b:a1:7e:bc:a9:91:78:5a:31:18:15:
         7f:8f:4c:58:df:e9:8f:3b:bd:8e:b1:91:d6:a2:e2:95:9e:25:
         05:f9:55:cf:9c:b5:f6:d4:ee:92:7e:6f:9e:02:6c:2c:ec:cd:
         fc:4f:df:f3:34:5c:57:8e:06:96:ea:dd:56:9a:ce:4f:bd:53:
         89:08:ae:e9:8e:17:ea:5e:3e:f3:42:be:ed:94:b2:6e:4a:d2:
         37:18:19:ba
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBYzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxOUI0
RkRBRTk2MkY0OTYwNTg4QjFEMkJFNkExRUQ0MkYxMzcwOThFMB4XDTI1MTEwMTAx
MzQxNloXDTI2MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoOTk3Q0M4MjM3QTBFNTJE
QjRBNkQ1NjQzOTU2RjMwQThBODg5QjQ0RTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM3uYzGXqLarzHMxDg1HX6MwBdmo+xQ4tuWswJ4zqCdjclo3nwhR
uZ8vZmGV24aSzq/EQM42UgG6ftyrKklWCD48fMtnKc6fyEiPq9zd8tldrizB/qKY
dmZChu2taqlvgkuH6yMEV4JXXVuUdXLua1auVdIG1RIhjba5JJzgQ1e8RfSr1eg7
folwNEs2xLorsKVa8dfDrkmA5FH2RgQ1UV9huFDlyGzSqvfYwPxCJjFfRBB8t9pT
L53UCOi3A4KGTDj1yct8kGXrsKhzjmE/sTp2437MQD+dWYs4jtlLsJzBNPrQiUGa
v2+0WzIKnbupYzV8icdICA7zGCXXlx7MgIsCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBSZfMgjeg5S20ptVkOVbzCoqIm0TjAfBgNVHSMEGDAWgBQZtP2uli9JYFiLHSvm
oe1C8TcJjjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTIyMDcvR2JUOXJwWXZTV0JZaXgwcjVxSHRRdkUzQ1k0LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvR2JUOXJwWXZTV0JZaXgwcjVxSHRR
dkUzQ1k0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzEyMjA3L21YeklJM29PVXR0S2JWWkRsVzh3cUtpSnRFNC5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAeCPoAwDQYJKoZIhvcNAQELBQADggEBAGbh3XDfOdt3Drk9e4T3zJd2
7g2x++OTBz9hq6nylY0GwppAfh1blgX1qhxfTEQxi1UyOSYCIY5PRM3avem9R7ww
69BRfSwTOZyjJh2495+TlUCCuAbXL65WA6IJzAs93cHPDIMkv6v9yUvxRZxaqIOE
PoBm1izP/vncyHeXP+M/OulYfx/7zfxWZRQYxwDUb78UFTPPuCRelaaTpLAjrhOk
nKmIm1IeGPOLoX68qZF4WjEYFX+PTFjf6Y87vY6xkdai4pWeJQX5Vc+ctfbU7pJ+
b54CbCzszfxP3/M0XFeOBpbq3Vaazk+9U4kIrumOF+pePvNCvu2Usm5K0jcYGbo=
-----END CERTIFICATE-----
Generated at Sat Nov 22 21:48:04 2025 by rpki-client