This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/650/FcHsozrgw3349RlHffNvi0nLxkE.roa
File:                     FcHsozrgw3349RlHffNvi0nLxkE.roa (raw, json)
Hash identifier:          FhCkj8JGbN1mGVOfxNhvmkm1KUt2gXWNX8gBlxvU3U4=
Subject key identifier:   15:C1:EC:A3:3A:E0:C3:7D:F8:F5:19:47:7D:F3:6F:8B:49:CB:C6:41
Certificate issuer:       /CN=0E4E32227E13122FE80340BF3AED3D793D26B457
Certificate serial:       1B
Authority key identifier: 0E:4E:32:22:7E:13:12:2F:E8:03:40:BF:3A:ED:3D:79:3D:26:B4:57
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/FcHsozrgw3349RlHffNvi0nLxkE.roa
Signing time:             Thu 06 Nov 2025 01:40:21 +0000
ROA not before:           Thu 06 Nov 2025 01:40:21 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     17936
IP address blocks:        218.40.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Nov 2025 17:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E4E32227E13122FE80340BF3AED3D793D26B457
        Validity
            Not Before: Nov  6 01:40:21 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=15C1ECA33AE0C37DF8F519477DF36F8B49CBC641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b1:3e:5f:aa:d7:97:58:51:dd:6c:21:9b:88:
                    a3:9d:b1:5e:93:65:45:b6:5b:c6:3b:29:60:dc:5b:
                    9b:13:49:a5:1e:52:10:b8:34:58:9e:0f:e9:47:3c:
                    a5:79:67:56:77:16:be:10:5b:26:f3:27:49:ba:d9:
                    65:2b:7c:6d:f8:fd:10:d1:bf:80:3b:3a:7a:dd:78:
                    e8:e2:8f:ba:85:24:3e:f6:d3:1f:f7:e8:55:cd:6a:
                    30:dd:d0:3a:04:fe:43:bd:00:dd:5c:42:d4:be:9c:
                    9c:22:8c:41:00:b3:db:40:d8:00:85:a1:b4:72:09:
                    db:25:01:ba:64:f8:42:58:b8:03:d6:d8:95:b3:63:
                    a6:24:bd:06:18:f5:cd:42:13:a3:84:89:cb:2e:c9:
                    67:85:1e:73:29:8d:52:d4:40:3c:2a:8f:e3:0e:4a:
                    73:42:af:18:69:41:88:20:0e:11:bb:f4:e9:ee:64:
                    e1:b8:2b:7f:c7:61:97:a4:3b:69:eb:f5:b9:8c:95:
                    1b:6c:a7:8a:3f:d3:cb:69:e9:dc:47:df:02:8f:fa:
                    b5:93:44:0b:dc:03:8d:52:da:7d:ef:13:a1:0a:9b:
                    3f:54:bd:08:95:41:59:dd:e6:e7:4e:fd:c3:ff:83:
                    a6:f9:8f:68:27:d6:f8:47:f4:44:31:fa:94:b5:14:
                    52:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C1:EC:A3:3A:E0:C3:7D:F8:F5:19:47:7D:F3:6F:8B:49:CB:C6:41
            X509v3 Authority Key Identifier:
                keyid:0E:4E:32:22:7E:13:12:2F:E8:03:40:BF:3A:ED:3D:79:3D:26:B4:57

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/FcHsozrgw3349RlHffNvi0nLxkE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.40.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         66:8f:59:0b:be:12:75:ab:37:c3:45:ee:3e:cc:93:c7:f7:51:
         9f:b8:2c:0b:73:73:3e:29:2a:8f:e5:d4:8f:f4:07:47:23:55:
         fa:0a:fd:51:ff:4c:52:87:dc:27:62:f2:48:35:7c:89:04:9b:
         11:73:02:59:be:7a:8e:07:01:55:a5:55:1e:f7:61:1e:c9:96:
         0a:d4:e0:0d:05:25:e1:dc:25:66:97:4c:88:37:f6:72:f3:5b:
         e4:7d:d0:c3:73:92:4f:5f:66:5a:77:f3:a4:4b:12:74:bd:69:
         f5:84:8f:7e:bd:85:f7:b3:c4:d0:cc:1a:a3:29:7a:3f:54:ae:
         15:74:cd:ed:cf:43:14:69:b6:67:41:d1:21:c4:30:4c:e9:d4:
         dd:c8:5e:f6:8a:d9:f7:74:f8:19:96:d7:60:92:58:15:2c:bb:
         97:f3:35:17:62:0a:98:72:e8:06:f2:b6:97:20:1d:2e:15:e5:
         fd:59:25:47:e1:a4:86:5c:47:0a:45:77:bf:c9:1b:9a:ed:00:
         8e:90:30:52:b8:6c:3f:f0:80:ac:f4:ad:f4:36:95:64:b2:2c:
         34:cb:37:1f:d7:10:dd:57:4b:06:23:3e:d2:c8:51:f4:f2:de:
         a7:2c:92:90:a0:ca:e0:1d:7e:de:9d:fb:0b:08:0e:d1:1c:fb:
         e4:d5:2d:d3
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBGzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwRTRF
MzIyMjdFMTMxMjJGRTgwMzQwQkYzQUVEM0Q3OTNEMjZCNDU3MB4XDTI1MTEwNjAx
NDAyMVoXDTI2MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoMTVDMUVDQTMzQUUwQzM3
REY4RjUxOTQ3N0RGMzZGOEI0OUNCQzY0MTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALuxPl+q15dYUd1sIZuIo52xXpNlRbZbxjspYNxbmxNJpR5SELg0
WJ4P6Uc8pXlnVncWvhBbJvMnSbrZZSt8bfj9ENG/gDs6et146OKPuoUkPvbTH/fo
Vc1qMN3QOgT+Q70A3VxC1L6cnCKMQQCz20DYAIWhtHIJ2yUBumT4Qli4A9bYlbNj
piS9Bhj1zUITo4SJyy7JZ4UecymNUtRAPCqP4w5Kc0KvGGlBiCAOEbv06e5k4bgr
f8dhl6Q7aev1uYyVG2ynij/Ty2np3EffAo/6tZNEC9wDjVLafe8ToQqbP1S9CJVB
Wd3m5079w/+DpvmPaCfW+Ef0RDH6lLUUUvcCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQVweyjOuDDffj1GUd982+LScvGQTAfBgNVHSMEGDAWgBQOTjIifhMSL+gDQL86
7T15PSa0VzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjUwL0RrNHlJbjRURWlfb0EwQ19PdTA5ZVQwbXRGYy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0RrNHlJbjRURWlfb0EwQ19PdTA5ZVQw
bXRGYy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82NTAvRmNIc296cmd3MzM0OVJsSGZmTnZpMG5MeGtFLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBNoo8DANBgkqhkiG9w0BAQsFAAOCAQEAZo9ZC74Sdas3w0XuPsyTx/dRn7gs
C3NzPikqj+XUj/QHRyNV+gr9Uf9MUofcJ2LySDV8iQSbEXMCWb56jgcBVaVVHvdh
HsmWCtTgDQUl4dwlZpdMiDf2cvNb5H3Qw3OST19mWnfzpEsSdL1p9YSPfr2F97PE
0Mwaoyl6P1SuFXTN7c9DFGm2Z0HRIcQwTOnU3che9orZ93T4GZbXYJJYFSy7l/M1
F2IKmHLoBvK2lyAdLhXl/VklR+GkhlxHCkV3v8kbmu0AjpAwUrhsP/CArPSt9DaV
ZLIsNMs3H9cQ3VdLBiM+0shR9PLepyySkKDK4B1+3p37CwgO0Rz75NUt0w==
-----END CERTIFICATE-----
Generated at Sat Nov 22 21:24:01 2025 by rpki-client