This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30159/UE4_BqCLyCrfioSCC6tO0SYmIss.roa
File:                     UE4_BqCLyCrfioSCC6tO0SYmIss.roa (raw, json)
Hash identifier:          ExH9dDMEI3ATfd7Gc+fdFVWeo6LWdHJg73DSE4/OM6U=
Subject key identifier:   50:4E:3F:06:A0:8B:C8:2A:DF:8A:84:82:0B:AB:4E:D1:26:26:22:CB
Certificate issuer:       /CN=B0EF0194A50D1CFB1C7B994BEFE4BE7DA6AC1968
Certificate serial:       1A
Authority key identifier: B0:EF:01:94:A5:0D:1C:FB:1C:7B:99:4B:EF:E4:BE:7D:A6:AC:19:68
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/UE4_BqCLyCrfioSCC6tO0SYmIss.roa
Signing time:             Fri 05 Dec 2025 13:02:17 +0000
ROA not before:           Fri 05 Dec 2025 13:02:17 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     14618
IP address blocks:        2404:7a00:f000::/36 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 00:51:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0EF0194A50D1CFB1C7B994BEFE4BE7DA6AC1968
        Validity
            Not Before: Dec  5 13:02:17 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=504E3F06A08BC82ADF8A84820BAB4ED1262622CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:90:eb:7e:a2:21:c1:e2:bf:f9:fa:32:b0:0e:
                    48:fa:5b:d0:3b:66:31:7b:d1:12:67:c3:e4:36:77:
                    37:86:e2:4b:8b:30:51:20:f5:2d:83:e3:5e:3f:85:
                    43:60:b4:95:2e:7c:c1:71:91:2a:8c:da:07:82:f4:
                    01:11:2a:ea:ff:f4:32:25:02:63:eb:1e:04:cf:da:
                    bd:bb:18:7e:b0:11:18:29:03:d7:26:0f:cc:68:c7:
                    c5:08:e7:59:d8:34:c7:23:6e:c0:b7:e9:33:00:45:
                    52:a8:7b:8e:2d:a8:bc:d1:f1:f3:7c:31:0a:9c:49:
                    d2:a9:ba:87:ce:9c:27:4e:e2:04:aa:99:58:79:4e:
                    ff:37:79:7a:a9:6b:00:ef:e7:71:88:64:81:34:8e:
                    56:b0:6c:31:bd:98:3e:f1:61:7e:bc:6e:08:22:44:
                    d3:48:95:01:62:db:db:0a:bf:56:ed:4d:ee:12:60:
                    65:4b:f3:a7:22:80:ef:32:42:c7:c2:4b:3d:63:68:
                    e8:5d:23:8b:6b:82:cd:bd:23:95:ff:8f:18:30:cb:
                    56:7f:52:c3:18:4c:92:c2:47:f5:46:95:ef:b2:2a:
                    4b:07:44:f5:b2:15:83:69:16:88:f5:0c:02:a7:0f:
                    57:71:4d:11:63:37:7a:4c:d8:b6:18:90:20:35:31:
                    0d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:4E:3F:06:A0:8B:C8:2A:DF:8A:84:82:0B:AB:4E:D1:26:26:22:CB
            X509v3 Authority Key Identifier:
                keyid:B0:EF:01:94:A5:0D:1C:FB:1C:7B:99:4B:EF:E4:BE:7D:A6:AC:19:68

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/UE4_BqCLyCrfioSCC6tO0SYmIss.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:7a00:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9f:d8:c4:29:a4:79:49:70:83:5d:b7:01:fe:2c:06:70:bd:b1:
         b4:f1:13:da:26:b3:d5:e3:a2:a3:44:b7:18:77:b2:59:f8:5a:
         96:90:2f:38:15:2e:3e:21:9b:dc:1d:19:62:61:a4:f8:ae:a9:
         79:86:20:8b:1b:92:a7:f8:eb:95:65:fa:75:cb:cc:be:fe:75:
         e5:67:9b:26:51:3e:69:9e:a2:42:1b:42:f8:52:a0:ab:37:97:
         42:87:52:ec:a3:7b:18:5a:c0:ae:89:dc:55:36:8c:56:86:80:
         b9:47:3d:55:c4:8f:fa:32:94:af:31:7c:20:9f:90:4c:ce:46:
         58:cd:16:56:68:c1:29:24:44:08:d5:34:22:b7:08:80:95:31:
         69:ac:ec:be:6e:a9:d8:8b:df:cd:c1:95:2b:79:c0:34:52:95:
         23:05:4e:99:17:5d:91:10:a3:e7:13:e2:63:d6:ba:14:09:ad:
         49:99:50:fd:91:0e:e2:dc:1e:aa:49:08:78:70:bc:80:7e:c0:
         6f:29:79:e6:66:76:bb:d9:4a:f3:7d:52:55:0f:4e:a4:59:e0:
         dd:c9:2c:4d:ec:58:37:6d:4a:a4:47:10:0e:e5:2f:7d:38:16:
         a9:45:08:61:c1:c2:73:00:47:d0:11:67:24:4d:ab:04:79:34:
         42:2f:a9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 02:37:29 2025 by rpki-client