This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30451/_NYcxEaihJ6OXx47_NMy7gk0Hkw.roa
File:                     _NYcxEaihJ6OXx47_NMy7gk0Hkw.roa (raw, json)
Hash identifier:          A+JZ/ULo7Snw59leYkJ5QyqY2Na3iLOHYWIqp9w31bs=
Subject key identifier:   FC:D6:1C:C4:46:A2:84:9E:8E:5F:1E:3B:FC:D3:32:EE:09:34:1E:4C
Certificate issuer:       /CN=EF094D5462DC00471C8CE20D6EE4AB1DC277B1BF
Certificate serial:       02
Authority key identifier: EF:09:4D:54:62:DC:00:47:1C:8C:E2:0D:6E:E4:AB:1D:C2:77:B1:BF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7wlNVGLcAEccjOINbuSrHcJ3sb8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30451/_NYcxEaihJ6OXx47_NMy7gk0Hkw.roa
Signing time:             Fri 14 Nov 2025 08:05:53 +0000
ROA not before:           Fri 14 Nov 2025 08:05:53 +0000
ROA not after:            Sat 14 Nov 2026 03:13:35 +0000
asID:                     152875
IP address blocks:        2402:3260::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30451/7wlNVGLcAEccjOINbuSrHcJ3sb8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30451/7wlNVGLcAEccjOINbuSrHcJ3sb8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7wlNVGLcAEccjOINbuSrHcJ3sb8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Nov 2025 17:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF094D5462DC00471C8CE20D6EE4AB1DC277B1BF
        Validity
            Not Before: Nov 14 08:05:53 2025 GMT
            Not After : Nov 14 03:13:35 2026 GMT
        Subject: CN=FCD61CC446A2849E8E5F1E3BFCD332EE09341E4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bd:6a:65:ef:39:bd:1d:8c:09:c1:d9:a2:85:
                    96:f8:c7:e1:d0:cf:ba:da:5c:67:e7:6c:f8:38:c2:
                    bb:f4:39:bb:3c:5e:60:74:11:38:4a:a8:a6:1f:82:
                    94:a7:63:a4:03:a9:ea:67:74:22:be:e3:71:df:f6:
                    54:5a:19:ff:df:a5:60:32:0d:0e:9f:e1:d7:51:c9:
                    90:1c:ee:46:6c:ae:18:23:11:60:02:71:d9:96:7f:
                    4c:dd:a0:7b:de:76:a7:0c:1d:35:91:94:a1:7b:65:
                    35:95:c1:31:ae:07:70:1c:34:9f:88:4a:8e:66:ec:
                    db:85:e1:88:95:53:18:9e:ca:58:a4:d0:8a:a4:6f:
                    2a:52:04:fd:c7:c0:fa:19:d9:04:6d:c9:98:74:42:
                    60:c3:e2:97:b4:26:76:0e:83:ee:ce:85:0c:5b:8c:
                    7e:9c:73:5a:80:d0:a9:4b:a9:3e:1b:25:9d:17:fb:
                    ec:ae:bd:99:25:33:7c:a3:94:fd:60:ad:89:45:1f:
                    30:a8:4f:9f:99:a7:de:7d:67:12:14:26:3d:ad:de:
                    1a:f0:77:5e:1a:6f:6c:a2:0e:8e:cc:47:db:de:73:
                    bc:30:c8:d8:02:96:83:21:50:dd:c2:90:07:39:f8:
                    1e:b8:58:37:37:9f:5e:44:3a:71:7a:42:15:bc:34:
                    b4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D6:1C:C4:46:A2:84:9E:8E:5F:1E:3B:FC:D3:32:EE:09:34:1E:4C
            X509v3 Authority Key Identifier:
                keyid:EF:09:4D:54:62:DC:00:47:1C:8C:E2:0D:6E:E4:AB:1D:C2:77:B1:BF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30451/7wlNVGLcAEccjOINbuSrHcJ3sb8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7wlNVGLcAEccjOINbuSrHcJ3sb8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30451/_NYcxEaihJ6OXx47_NMy7gk0Hkw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:3260::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:02:74:b4:eb:b6:82:f6:f3:f7:cb:89:8b:c2:3b:b1:4c:fb:
         4a:1f:97:73:7f:a3:5a:cf:dd:78:d1:01:4f:45:ad:0a:15:a7:
         b3:53:31:fb:5b:1d:d4:60:45:cc:f2:a4:19:b1:44:fa:74:7d:
         98:65:f2:2a:e9:dc:88:e1:80:d9:62:f9:5a:b0:31:20:73:4d:
         3e:f1:13:e7:2a:22:cf:42:ab:b0:fc:9c:5f:cb:83:de:1b:9f:
         e9:88:b0:3e:cb:ea:92:7d:25:d2:7b:ec:b0:27:35:06:c2:c3:
         08:6e:60:58:ac:35:fe:e3:84:d8:60:07:22:3e:91:65:d0:9f:
         f8:fc:df:e3:64:ea:87:a7:e1:c2:67:be:d5:23:40:fa:40:a6:
         2f:63:a7:dd:c4:d8:b4:ff:72:bc:65:2f:04:f4:de:19:2b:ba:
         27:ac:b6:d2:2f:61:9d:8d:12:6a:57:4b:8d:c1:91:72:8c:1c:
         3b:24:39:d2:a1:ce:4c:60:a2:39:a4:d5:d1:44:f2:3b:38:bc:
         8e:46:2f:b5:d3:d0:1a:e2:d6:15:32:f2:9b:70:84:c8:9d:f3:
         83:71:44:5e:e2:8a:28:03:95:5d:cb:3d:25:ca:04:fe:89:67:
         f4:6c:49:b6:6d:81:b6:86:55:17:89:8f:2e:98:d3:85:64:eb:
         b3:a6:0f:f2
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFRjA5
NEQ1NDYyREMwMDQ3MUM4Q0UyMEQ2RUU0QUIxREMyNzdCMUJGMB4XDTI1MTExNDA4
MDU1M1oXDTI2MTExNDAzMTMzNVowMzExMC8GA1UEAxMoRkNENjFDQzQ0NkEyODQ5
RThFNUYxRTNCRkNEMzMyRUUwOTM0MUU0QzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANW9amXvOb0djAnB2aKFlvjH4dDPutpcZ+ds+DjCu/Q5uzxeYHQR
OEqoph+ClKdjpAOp6md0Ir7jcd/2VFoZ/9+lYDINDp/h11HJkBzuRmyuGCMRYAJx
2ZZ/TN2ge952pwwdNZGUoXtlNZXBMa4HcBw0n4hKjmbs24XhiJVTGJ7KWKTQiqRv
KlIE/cfA+hnZBG3JmHRCYMPil7Qmdg6D7s6FDFuMfpxzWoDQqUupPhslnRf77K69
mSUzfKOU/WCtiUUfMKhPn5mn3n1nEhQmPa3eGvB3XhpvbKIOjsxH295zvDDI2AKW
gyFQ3cKQBzn4HrhYNzefXkQ6cXpCFbw0tEsCAwEAAaOCAikwggIlMB0GA1UdDgQW
BBT81hzERqKEno5fHjv80zLuCTQeTDAfBgNVHSMEGDAWgBTvCU1UYtwARxyM4g1u
5KsdwnexvzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA0NTEvN3dsTlZHTGNBRWNjak9JTmJ1U3JIY0ozc2I4LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvN3dsTlZHTGNBRWNjak9JTmJ1U3JI
Y0ozc2I4LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwNDUxL19OWWN4RWFpaEo2T1h4NDdfTk15N2drMEhrdy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkAjJgMA0GCSqGSIb3DQEBCwUAA4IBAQBIAnS067aC9vP3y4mLwjux
TPtKH5dzf6Naz9140QFPRa0KFaezUzH7Wx3UYEXM8qQZsUT6dH2YZfIq6dyI4YDZ
YvlasDEgc00+8RPnKiLPQquw/Jxfy4PeG5/piLA+y+qSfSXSe+ywJzUGwsMIbmBY
rDX+44TYYAciPpFl0J/4/N/jZOqHp+HCZ77VI0D6QKYvY6fdxNi0/3K8ZS8E9N4Z
K7onrLbSL2GdjRJqV0uNwZFyjBw7JDnSoc5MYKI5pNXRRPI7OLyORi+109Aa4tYV
MvKbcITInfODcURe4oooA5Vdyz0lygT+iWf0bEm2bYG2hlUXiY8umNOFZOuzpg/y
-----END CERTIFICATE-----
Generated at Sat Nov 22 21:20:25 2025 by rpki-client