This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30159/pPXkWCr7wgtB22yfzyIv9AmNq7Y.roa
File:                     pPXkWCr7wgtB22yfzyIv9AmNq7Y.roa (raw, json)
Hash identifier:          yh/ZosJRmv4U85hsMLwQQmWp4oL2t+7vJqJ9vGF1vI0=
Subject key identifier:   A4:F5:E4:58:2A:FB:C2:0B:41:DB:6C:9F:CF:22:2F:F4:09:8D:AB:B6
Certificate issuer:       /CN=B0EF0194A50D1CFB1C7B994BEFE4BE7DA6AC1968
Certificate serial:       17
Authority key identifier: B0:EF:01:94:A5:0D:1C:FB:1C:7B:99:4B:EF:E4:BE:7D:A6:AC:19:68
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/pPXkWCr7wgtB22yfzyIv9AmNq7Y.roa
Signing time:             Fri 05 Dec 2025 13:02:14 +0000
ROA not before:           Fri 05 Dec 2025 13:02:14 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     17953
IP address blocks:        2404:7a00::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 07:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0EF0194A50D1CFB1C7B994BEFE4BE7DA6AC1968
        Validity
            Not Before: Dec  5 13:02:14 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=A4F5E4582AFBC20B41DB6C9FCF222FF4098DABB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8d:6f:60:e6:bf:3a:62:80:8a:e0:38:da:40:
                    5d:e0:bd:b2:a7:28:b5:29:dc:27:bc:a3:a8:c2:ce:
                    45:72:6d:e3:b8:18:b5:84:50:5d:a2:59:dc:5c:4f:
                    82:97:76:c3:a3:0f:7b:3d:5d:43:03:68:8d:58:8a:
                    9e:f9:ca:f0:d2:98:f8:fa:da:cc:f9:57:4d:58:b5:
                    03:68:a4:b4:93:8f:a7:f3:65:84:ed:23:1a:9a:24:
                    5c:9c:b6:bd:e1:1c:95:f8:89:95:28:0c:71:c3:98:
                    86:9f:86:80:ee:db:a1:d8:38:9e:87:15:12:91:27:
                    fc:86:80:ca:13:c0:e0:52:bc:16:81:8d:25:93:c6:
                    17:27:9c:c4:00:2b:c7:3a:b2:7b:53:cc:6d:75:59:
                    d4:44:f7:d4:83:e2:6f:37:3f:74:eb:8f:a3:05:ab:
                    19:ed:06:87:74:0c:5f:10:44:0d:d3:69:86:57:20:
                    0d:81:cf:d2:ec:01:fa:31:70:47:d5:bd:dc:d3:74:
                    d7:82:e0:d6:58:6f:8f:5f:92:c2:5b:54:ac:ce:04:
                    80:dd:c6:b6:f4:cb:55:63:18:c2:75:02:ea:07:6a:
                    33:a6:7d:8a:6f:e0:fe:2d:10:ac:5c:de:2a:04:69:
                    8b:05:ff:3a:68:d1:de:18:fe:ad:a3:07:20:8b:18:
                    c8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F5:E4:58:2A:FB:C2:0B:41:DB:6C:9F:CF:22:2F:F4:09:8D:AB:B6
            X509v3 Authority Key Identifier:
                keyid:B0:EF:01:94:A5:0D:1C:FB:1C:7B:99:4B:EF:E4:BE:7D:A6:AC:19:68

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/pPXkWCr7wgtB22yfzyIv9AmNq7Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:7a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:76:37:7c:65:90:ae:f2:9c:4c:d7:20:f5:e2:37:78:10:44:
         d2:58:7f:dc:4e:b7:16:48:89:34:49:6a:8a:6e:0c:76:c0:2a:
         93:0a:79:80:fb:bb:35:36:6a:5d:2c:8d:85:c4:3a:f0:be:1d:
         35:c8:6f:06:17:cf:fb:5c:91:44:81:71:14:d9:85:9a:21:91:
         dc:a9:0d:db:1b:3f:92:e1:ad:de:de:9f:6c:cd:94:17:c9:91:
         54:b4:11:24:eb:a6:98:82:ab:04:b4:96:0b:37:48:2a:32:56:
         2e:c5:23:a8:e2:be:9f:1a:d9:cf:bf:90:ac:73:df:d6:fa:6a:
         f7:97:fa:2b:85:ee:ca:d9:4f:d7:b0:36:05:b9:d4:a5:d9:28:
         b4:36:3e:c7:4a:9e:00:de:e9:f0:65:02:79:d2:5c:44:32:82:
         1c:3c:d6:6a:de:51:df:d3:c1:ec:81:ff:47:0d:13:49:3b:37:
         ca:62:66:b7:5d:91:f1:ca:54:83:40:63:02:57:a7:d0:9f:9c:
         ba:74:18:b4:2f:f7:ee:40:44:b9:04:a4:d8:76:7d:45:b8:eb:
         c3:0f:ae:e8:5c:fc:ce:c5:ec:c3:10:b6:22:2b:1a:38:8d:df:
         5f:c9:71:c8:de:8b:2d:98:41:6a:f3:01:58:a1:49:dc:ac:e7:
         a1:2b:be:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:19:13 2025 by rpki-client