This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30159/emIksTL4aNpePn11_iQtZCuyA5g.roa
File:                     emIksTL4aNpePn11_iQtZCuyA5g.roa (raw, json)
Hash identifier:          HGxtc+d3m/gHk22sQ6ayLlhSXpVxRjLXOjrw7H69lVE=
Subject key identifier:   7A:62:24:B1:32:F8:68:DA:5E:3E:7D:75:FE:24:2D:64:2B:B2:03:98
Certificate issuer:       /CN=B0EF0194A50D1CFB1C7B994BEFE4BE7DA6AC1968
Certificate serial:       18
Authority key identifier: B0:EF:01:94:A5:0D:1C:FB:1C:7B:99:4B:EF:E4:BE:7D:A6:AC:19:68
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/emIksTL4aNpePn11_iQtZCuyA5g.roa
Signing time:             Fri 05 Dec 2025 13:02:16 +0000
ROA not before:           Fri 05 Dec 2025 13:02:16 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     14618
IP address blocks:        2404:7a00:e000::/36 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 00:51:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0EF0194A50D1CFB1C7B994BEFE4BE7DA6AC1968
        Validity
            Not Before: Dec  5 13:02:16 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=7A6224B132F868DA5E3E7D75FE242D642BB20398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2a:d6:9b:f4:7b:80:5e:f3:ce:1b:ce:a4:bb:
                    d8:63:99:16:cf:3f:aa:f7:05:ae:bb:e6:20:04:ad:
                    3f:99:3d:cd:88:d6:5c:1f:92:e5:88:9b:60:bd:46:
                    96:94:80:ef:c5:57:13:50:b7:94:50:5f:aa:39:17:
                    88:31:cf:0e:a4:7c:55:d6:24:b7:34:12:e4:59:70:
                    95:e0:85:a2:be:3a:b5:12:37:11:1d:05:d1:33:4f:
                    27:2d:52:e4:5f:16:73:2a:c4:77:77:ad:0f:7b:fa:
                    58:13:d4:6e:da:10:2e:0d:b8:b5:39:b2:e0:64:09:
                    04:94:27:fd:86:46:12:71:2d:b9:0b:76:da:ca:c8:
                    36:5c:d8:9f:59:67:2d:c6:47:64:10:a8:48:81:3a:
                    6d:4c:57:30:05:3d:17:b9:d2:7b:3f:a1:5e:03:4b:
                    a1:7b:8f:82:e0:d5:d8:6a:de:42:77:f2:10:04:5b:
                    0c:98:ef:50:ea:4c:2d:50:7d:73:b0:4f:9d:be:55:
                    aa:05:cd:33:da:01:10:15:68:65:dc:41:79:50:d1:
                    4d:6a:06:7b:73:69:2e:aa:2e:85:8c:04:29:0f:8d:
                    35:2e:8d:e9:07:9c:15:e0:68:e4:8e:50:25:84:43:
                    5a:f2:d2:77:2f:3f:94:47:ae:9d:14:ad:b8:8a:1a:
                    61:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:62:24:B1:32:F8:68:DA:5E:3E:7D:75:FE:24:2D:64:2B:B2:03:98
            X509v3 Authority Key Identifier:
                keyid:B0:EF:01:94:A5:0D:1C:FB:1C:7B:99:4B:EF:E4:BE:7D:A6:AC:19:68

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/emIksTL4aNpePn11_iQtZCuyA5g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:7a00:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         39:5a:bc:e3:63:53:ba:90:d4:d4:12:eb:a9:f4:bd:b7:13:8f:
         34:fa:6a:dd:35:d5:52:7e:07:0e:b1:8f:dc:92:89:52:f2:e5:
         be:ac:75:b4:07:3c:47:20:ec:0e:f0:24:a7:f3:ec:98:b5:55:
         e8:1d:1c:0d:b9:04:45:2e:f6:b9:47:14:01:0f:da:3f:1c:6f:
         92:ba:58:cc:3b:19:52:92:10:09:47:cb:d2:75:8f:db:f4:47:
         17:00:78:af:fb:db:04:da:86:5c:b6:96:a3:7b:39:35:51:f4:
         cf:6a:30:65:05:36:e5:6c:1c:0e:58:56:b2:0c:9a:a2:da:5c:
         6a:be:c6:65:7d:cb:34:e2:7a:b8:ca:6a:7f:ee:f8:17:c3:68:
         0d:7c:a3:70:08:c8:26:cb:da:3d:6d:1f:09:6e:2b:2c:d7:aa:
         b1:ac:05:8d:b6:99:e3:59:c7:fe:97:7c:5e:84:67:c4:f6:2e:
         52:89:62:6a:9a:73:9c:9c:d9:48:e8:bb:d0:d6:15:8f:74:09:
         9a:07:44:81:03:21:0a:c5:68:a2:07:0c:94:79:a4:26:06:86:
         94:12:55:28:89:79:35:89:c4:ca:cc:94:62:73:1c:7a:e7:ff:
         76:2e:91:6a:fa:b0:d9:06:09:f9:ea:74:2c:f0:e3:56:c1:ef:
         40:82:45:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 02:37:53 2025 by rpki-client