This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/uHmUK3SOGti5UIwdePgM5CcxeVU.roa
File:                     uHmUK3SOGti5UIwdePgM5CcxeVU.roa (raw, json)
Hash identifier:          Y3FOevUnq2I+qyWlhpFB7MCTnz6e4c1GxF7DfGClwBA=
Subject key identifier:   B8:79:94:2B:74:8E:1A:D8:B9:50:8C:1D:78:F8:0C:E4:27:31:79:55
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       C3
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/uHmUK3SOGti5UIwdePgM5CcxeVU.roa
Signing time:             Sat 01 Nov 2025 01:32:37 +0000
ROA not before:           Sat 01 Nov 2025 01:32:37 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     2514
IP address blocks:        160.248.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Nov 2025 15:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195 (0xc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Nov  1 01:32:37 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=B879942B748E1AD8B9508C1D78F80CE427317955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1f:91:18:a8:15:fc:97:bd:08:3f:63:7e:72:
                    ca:89:a2:d7:de:e1:eb:d7:4f:cd:14:13:d7:e8:e0:
                    8d:66:0f:3d:19:32:fc:f3:87:6a:93:4b:6b:31:40:
                    19:e2:2b:92:17:47:9b:45:13:9f:2f:da:f2:a4:95:
                    4d:b3:66:9b:51:5d:30:ba:e1:b1:b0:3b:8e:69:4e:
                    ef:43:d6:24:86:f3:4c:2a:19:4d:3c:7c:b5:cb:ce:
                    1d:d7:db:b5:de:01:12:fe:53:10:57:58:84:e3:7a:
                    9b:34:bd:75:82:64:88:42:e9:8e:05:90:aa:1b:90:
                    c8:02:ce:f2:75:ee:3a:af:d8:d3:52:5c:a4:84:4d:
                    b0:b0:93:7c:98:1d:60:9c:f3:c4:c5:dd:32:c7:b7:
                    b9:0c:4b:57:8e:b5:6d:63:32:85:39:20:1d:73:a8:
                    d1:be:ad:47:00:64:fc:2f:74:1a:52:f6:40:fb:1a:
                    0d:97:a9:82:16:37:3d:02:a8:a5:35:a3:4f:7c:ea:
                    68:b2:bb:49:dd:85:6f:d6:a3:0e:9a:dd:ed:7c:a0:
                    45:28:df:5c:3f:34:75:bf:95:b8:77:61:66:ad:7a:
                    9f:2e:de:25:22:b4:b6:48:35:7c:e1:53:79:49:12:
                    97:9b:d1:89:08:4b:3b:4e:e6:78:6a:46:49:b1:3d:
                    3d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:79:94:2B:74:8E:1A:D8:B9:50:8C:1D:78:F8:0C:E4:27:31:79:55
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/uHmUK3SOGti5UIwdePgM5CcxeVU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:65:5a:d9:d0:86:a7:70:84:7b:4d:c3:43:26:15:bc:3d:6b:
         60:a6:b1:8e:60:44:cd:c4:25:37:aa:6e:5c:5a:46:1e:96:aa:
         ed:74:a8:f7:ac:c4:f8:45:50:99:b8:5a:d4:9f:cd:f7:52:20:
         a9:3d:5c:a0:c1:b4:72:57:d8:bd:2b:1e:45:a6:3f:11:ea:22:
         9f:9b:6b:66:1d:c3:fc:3a:35:bc:42:4f:1c:fd:b3:29:3a:6f:
         0b:1b:30:2b:a3:59:c7:84:ac:ed:f2:a1:98:45:de:19:77:65:
         06:ce:65:86:25:64:60:a3:42:41:32:d4:eb:66:5b:5d:1c:59:
         ee:73:e3:5f:85:40:e7:0f:31:d8:dd:d1:58:6e:56:fb:09:c0:
         fd:f5:37:4b:e2:a4:93:5a:a8:10:05:79:ba:54:32:cc:0b:70:
         dc:68:fd:bc:26:d0:27:8d:6e:c4:69:c1:05:26:90:a9:fc:19:
         0f:fa:04:e0:07:43:bf:67:5c:42:8b:47:8e:fa:5b:16:10:a4:
         90:a3:7e:18:dd:2b:b6:cb:96:9c:c8:2f:02:fe:cd:a0:65:67:
         22:2a:4c:3c:fe:50:9f:7c:55:09:f2:1c:7e:f2:00:43:b1:a1:
         bf:f6:00:fe:87:e2:9d:6a:92:80:ee:e1:f0:7f:52:13:d1:85:
         2d:12:2b:7e
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDE0
MDBBQjg5QjZENzJGN0RCNDI0RjRBQUE4Q0NGRjY0MzhEM0Q0QTAeFw0yNTExMDEw
MTMyMzdaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEI4Nzk5NDJCNzQ4RTFB
RDhCOTUwOEMxRDc4RjgwQ0U0MjczMTc5NTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7H5EYqBX8l70IP2N+csqJotfe4evXT80UE9fo4I1mDz0ZMvzz
h2qTS2sxQBniK5IXR5tFE58v2vKklU2zZptRXTC64bGwO45pTu9D1iSG80wqGU08
fLXLzh3X27XeARL+UxBXWITjeps0vXWCZIhC6Y4FkKobkMgCzvJ17jqv2NNSXKSE
TbCwk3yYHWCc88TF3TLHt7kMS1eOtW1jMoU5IB1zqNG+rUcAZPwvdBpS9kD7Gg2X
qYIWNz0CqKU1o0986miyu0ndhW/Wow6a3e18oEUo31w/NHW/lbh3YWatep8u3iUi
tLZINXzhU3lJEpeb0YkISztO5nhqRkmxPT1DAgMBAAGjggIiMIICHjAdBgNVHQ4E
FgQUuHmUK3SOGti5UIwdePgM5CcxeVUwHwYDVR0jBBgwFoAU0UAKuJttcvfbQk9K
qozP9kONPUowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzI5LzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtPTlBVby5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtP
TlBVby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yOS91SG1VSzNTT0d0aTVVSXdkZVBnTTVDY3hlVlUucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAoPgMMA0GCSqGSIb3DQEBCwUAA4IBAQAhZVrZ0IancIR7TcNDJhW8PWtgprGO
YETNxCU3qm5cWkYelqrtdKj3rMT4RVCZuFrUn833UiCpPVygwbRyV9i9Kx5Fpj8R
6iKfm2tmHcP8OjW8Qk8c/bMpOm8LGzAro1nHhKzt8qGYRd4Zd2UGzmWGJWRgo0JB
MtTrZltdHFnuc+NfhUDnDzHY3dFYblb7CcD99TdL4qSTWqgQBXm6VDLMC3DcaP28
JtAnjW7EacEFJpCp/BkP+gTgB0O/Z1xCi0eO+lsWEKSQo34Y3Su2y5acyC8C/s2g
ZWciKkw8/lCffFUJ8hx+8gBDsaG/9gD+h+KdapKA7uHwf1IT0YUtEit+
-----END CERTIFICATE-----
Generated at Sat Nov 22 21:44:15 2025 by rpki-client