This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/pbO8HvdIAouYIYG5i46GoitxQGw.roa
File:                     pbO8HvdIAouYIYG5i46GoitxQGw.roa (raw, json)
Hash identifier:          xOgmXq9vYOZo+LwcDK9jMbVfrizX58xesou0oepurxI=
Subject key identifier:   A5:B3:BC:1E:F7:48:02:8B:98:21:81:B9:8B:8E:86:A2:2B:71:40:6C
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       C9
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/pbO8HvdIAouYIYG5i46GoitxQGw.roa
Signing time:             Sat 01 Nov 2025 01:29:08 +0000
ROA not before:           Sat 01 Nov 2025 01:29:08 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     9351
IP address blocks:        61.206.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Nov 2025 17:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Nov  1 01:29:08 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=A5B3BC1EF748028B982181B98B8E86A22B71406C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4f:5e:f7:ac:41:01:65:7e:b5:99:13:d7:60:
                    05:48:d5:d3:0e:99:3e:00:65:0b:72:c3:63:7e:d8:
                    c4:30:cd:16:b0:bc:8b:ff:b7:95:d5:6a:2c:4d:76:
                    de:0b:25:1b:77:ee:51:18:47:01:4f:1b:e1:fc:9c:
                    78:a5:c8:90:01:66:f2:df:98:25:54:a0:63:1f:8a:
                    eb:de:b3:fb:e7:ee:cb:4a:47:17:22:d8:d6:ea:1b:
                    e6:b8:ce:2e:55:fd:a5:bf:f2:50:c0:b0:e8:fe:ce:
                    45:33:7b:ef:eb:d6:16:97:eb:ca:0b:bb:c1:b9:0c:
                    be:2f:3b:9a:cc:aa:4b:a9:fd:e1:83:5d:3e:ff:a0:
                    b0:7d:1e:c2:a5:02:26:50:68:be:1c:d4:c9:9f:9e:
                    25:62:92:d0:75:48:d1:58:d4:7e:6e:ae:61:51:1f:
                    80:f0:0e:a0:e4:ba:40:88:fe:de:a0:85:c7:16:34:
                    56:55:5a:9a:db:a6:21:0f:cf:db:a0:68:b4:c8:17:
                    6d:d6:b9:3b:41:1b:24:76:2e:57:35:61:3b:d0:aa:
                    8f:19:d8:6f:47:4d:24:49:4c:61:7e:06:e5:04:d3:
                    4e:8b:05:06:7d:7f:b8:05:be:e8:e7:d3:25:44:9c:
                    ef:2b:af:87:eb:b8:55:86:1e:2e:77:54:04:57:69:
                    d9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:B3:BC:1E:F7:48:02:8B:98:21:81:B9:8B:8E:86:A2:2B:71:40:6C
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/pbO8HvdIAouYIYG5i46GoitxQGw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.206.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         35:b4:a8:e7:a4:7d:81:53:dc:29:20:b8:f6:82:15:07:6b:3e:
         f4:15:a9:a0:7b:df:47:7b:dc:9e:29:c9:28:17:77:25:f4:6b:
         f0:3c:f2:f3:42:33:73:6f:76:69:65:cf:f0:1f:c5:1c:b1:8e:
         6e:51:f3:ad:82:70:85:45:62:41:c9:b4:f1:b3:85:c6:f9:24:
         7a:2d:a2:2a:c2:40:54:9a:1a:80:79:44:ab:fc:6b:54:5c:c6:
         38:12:f7:58:8d:bd:56:a3:ce:f0:1b:60:97:4a:f6:05:63:6f:
         67:c9:08:43:cb:9d:d3:6b:44:c9:ed:bc:2c:58:b2:72:30:51:
         7c:dc:b5:a3:82:81:c5:37:45:53:e4:65:19:31:38:17:19:1c:
         da:f2:50:f2:95:f0:e4:ce:35:fb:77:66:6d:44:b6:68:75:6e:
         56:af:41:a7:28:59:b8:d0:0a:92:c9:ee:d0:32:29:e7:8a:77:
         70:fa:1f:b7:03:10:a1:da:55:5e:e9:28:dd:67:62:4c:32:ed:
         72:24:22:3c:25:c4:3f:5d:36:99:01:8b:4c:30:99:52:da:b1:
         7c:fd:2f:75:6f:00:db:f9:a3:30:63:33:92:d1:73:b1:0f:4a:
         d8:d2:43:eb:b3:c5:b9:9a:c6:93:5e:3e:f2:66:a4:71:87:b9:
         1b:5f:29:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:24:09 2025 by rpki-client