This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5542/Y5mVK-0x1FquRmIdaNauk9T3O88.roa
File:                     Y5mVK-0x1FquRmIdaNauk9T3O88.roa (raw, json)
Hash identifier:          Nj/yo9I2r4946au3agN0PQvm2DKEY2p6fjQl6jIAUX4=
Subject key identifier:   63:99:95:2B:ED:31:D4:5A:AE:46:62:1D:68:D6:AE:93:D4:F7:3B:CF
Certificate issuer:       /CN=238DED168C39331F14510F8ED998933C60932333
Certificate serial:       13
Authority key identifier: 23:8D:ED:16:8C:39:33:1F:14:51:0F:8E:D9:98:93:3C:60:93:23:33
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I43tFow5Mx8UUQ-O2ZiTPGCTIzM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5542/Y5mVK-0x1FquRmIdaNauk9T3O88.roa
Signing time:             Wed 03 Dec 2025 05:32:35 +0000
ROA not before:           Wed 03 Dec 2025 05:32:35 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     131156
IP address blocks:        103.189.185.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5542/I43tFow5Mx8UUQ-O2ZiTPGCTIzM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5542/I43tFow5Mx8UUQ-O2ZiTPGCTIzM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I43tFow5Mx8UUQ-O2ZiTPGCTIzM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 12:49:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=238DED168C39331F14510F8ED998933C60932333
        Validity
            Not Before: Dec  3 05:32:35 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=6399952BED31D45AAE46621D68D6AE93D4F73BCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ac:14:46:af:e2:b4:5c:4b:b5:52:12:3a:c8:
                    83:7e:d1:f9:da:79:c1:33:3e:6e:1f:b2:d4:80:ce:
                    5a:fd:0d:8f:79:bd:89:2d:65:fb:c8:4f:e9:5f:24:
                    9f:b0:98:10:de:e3:bd:24:f8:01:ac:70:09:a2:13:
                    21:be:54:95:ea:60:e2:0b:99:85:73:08:6d:7f:bc:
                    a4:c7:71:0e:2c:5d:31:63:06:f1:c9:63:82:79:50:
                    8e:c3:9b:cb:89:68:1a:ff:d8:8a:56:0e:fd:21:f5:
                    4f:08:d4:1a:29:bc:cd:2c:7e:3e:bc:f7:25:1c:fe:
                    52:07:27:48:fa:33:52:6e:86:1d:56:06:55:4a:a7:
                    f1:e6:eb:bd:7f:95:a9:50:34:ec:1e:36:a4:54:d1:
                    86:33:de:bf:9b:07:7e:f5:14:7a:2e:4c:cf:07:c9:
                    07:db:2e:43:b6:b0:db:9b:94:da:f0:0b:56:c5:22:
                    c4:cd:13:e5:37:a0:df:1e:25:48:8a:70:e6:83:1e:
                    1e:5c:30:ae:b6:74:69:ee:71:8d:dc:96:27:95:29:
                    e6:2c:4c:c7:ee:f1:ea:97:29:77:af:5a:e0:81:ce:
                    e9:fe:2c:55:26:1a:fb:81:03:28:c7:1d:59:29:a8:
                    1a:e6:13:0d:e8:68:42:f5:0a:9b:7f:39:ed:a0:83:
                    8e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:99:95:2B:ED:31:D4:5A:AE:46:62:1D:68:D6:AE:93:D4:F7:3B:CF
            X509v3 Authority Key Identifier:
                keyid:23:8D:ED:16:8C:39:33:1F:14:51:0F:8E:D9:98:93:3C:60:93:23:33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5542/I43tFow5Mx8UUQ-O2ZiTPGCTIzM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I43tFow5Mx8UUQ-O2ZiTPGCTIzM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5542/Y5mVK-0x1FquRmIdaNauk9T3O88.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:98:e2:0b:9c:e3:d1:cd:38:e7:9e:ae:2a:f9:01:a8:74:63:
         fd:4f:f5:b8:be:28:18:68:9f:b8:4e:02:ee:b5:cb:39:df:4c:
         78:3b:d7:1d:76:e3:81:76:c9:bb:f1:e7:fc:9a:6f:aa:72:05:
         63:54:e2:ad:8b:6f:85:2b:eb:7f:9b:8f:48:3b:7c:af:87:d5:
         8c:87:c7:7b:4c:c5:91:06:bc:e7:3c:aa:2c:83:d8:ac:3e:ca:
         61:7f:37:bc:16:9e:ef:53:70:f4:d5:2a:f3:0a:44:4d:7f:46:
         38:f5:77:66:fe:98:ef:a3:46:7c:3b:b7:2a:5a:35:b1:cd:17:
         8b:f5:25:43:42:c8:43:bc:1f:bd:a2:85:43:32:e0:14:a3:01:
         7e:0e:30:48:d9:38:d4:c7:67:0b:7f:64:d2:b2:28:e6:c7:65:
         76:e8:72:a9:1a:a2:e8:7f:8a:54:61:99:07:7f:17:db:85:0d:
         ac:c0:68:30:39:b6:d7:d9:f3:11:8c:6c:38:b1:ed:b0:e0:a7:
         49:d5:4e:83:c1:67:f1:0b:a9:7f:09:8b:c2:79:81:37:4d:aa:
         c6:cf:13:61:2f:be:f9:0b:49:53:02:59:32:f9:83:10:8d:d0:
         74:c7:67:40:59:b6:2f:20:de:50:84:40:26:df:d8:67:e4:d0:
         eb:8b:77:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 14:28:11 2025 by rpki-client