This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/556/QZZEdk3qlWcrEjrBCVBXaxEM3u4.roa
File:                     QZZEdk3qlWcrEjrBCVBXaxEM3u4.roa (raw, json)
Hash identifier:          HboOAJAR/b4WXgg3sA8mJRtxKeM8S/3r4GpAb1ID2NA=
Subject key identifier:   41:96:44:76:4D:EA:95:67:2B:12:3A:C1:09:50:57:6B:11:0C:DE:EE
Certificate issuer:       /CN=5B940BB63134F9E9F2FE124FCD86E307EBF8B253
Certificate serial:       17
Authority key identifier: 5B:94:0B:B6:31:34:F9:E9:F2:FE:12:4F:CD:86:E3:07:EB:F8:B2:53
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/W5QLtjE0-eny_hJPzYbjB-v4slM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/556/QZZEdk3qlWcrEjrBCVBXaxEM3u4.roa
Signing time:             Wed 03 Dec 2025 04:32:31 +0000
ROA not before:           Wed 03 Dec 2025 04:32:31 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     58648
IP address blocks:        103.30.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/556/W5QLtjE0-eny_hJPzYbjB-v4slM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/556/W5QLtjE0-eny_hJPzYbjB-v4slM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/W5QLtjE0-eny_hJPzYbjB-v4slM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 12:49:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B940BB63134F9E9F2FE124FCD86E307EBF8B253
        Validity
            Not Before: Dec  3 04:32:31 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=419644764DEA95672B123AC10950576B110CDEEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ff:d3:57:e3:a9:05:0e:72:f8:0e:88:42:24:
                    83:71:25:ae:d9:f0:f9:45:32:9a:8f:66:ae:c7:5e:
                    b5:b3:89:76:86:87:62:7c:29:6e:67:94:df:df:a2:
                    a4:7d:83:b5:be:7a:82:41:ce:d7:62:c9:0c:39:40:
                    72:b2:d2:9c:c6:b1:4d:44:03:8a:bb:c1:b1:8f:a1:
                    34:cc:ce:32:54:ea:26:cd:74:18:a0:f4:f8:dc:cf:
                    bd:c4:fc:bd:f0:d4:59:af:4c:2e:c3:df:eb:8e:e8:
                    12:97:2b:de:a2:c4:61:76:77:dc:b6:72:a3:26:de:
                    3b:41:5b:84:16:5a:83:e5:f7:4c:f6:35:11:99:b3:
                    ba:46:94:37:ba:1c:31:8b:c0:2e:e9:08:ad:44:0f:
                    86:e8:47:1a:2d:f9:ad:a5:6a:03:af:76:86:ab:8f:
                    14:91:d2:4c:ff:89:0c:95:be:64:7b:c3:b1:ca:fb:
                    58:68:45:67:14:5c:65:4a:3d:7f:3f:36:9e:dc:4a:
                    cc:1a:85:5b:18:c6:62:a8:b6:44:29:8e:6d:ec:f4:
                    5b:85:cc:46:c6:69:52:c5:15:80:40:51:87:1e:86:
                    30:5b:e6:ca:57:29:36:54:6b:67:f0:ac:f3:05:0d:
                    36:28:56:11:2f:ca:3c:75:3d:a0:4f:ab:23:2a:61:
                    e1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:96:44:76:4D:EA:95:67:2B:12:3A:C1:09:50:57:6B:11:0C:DE:EE
            X509v3 Authority Key Identifier:
                keyid:5B:94:0B:B6:31:34:F9:E9:F2:FE:12:4F:CD:86:E3:07:EB:F8:B2:53

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/556/W5QLtjE0-eny_hJPzYbjB-v4slM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/W5QLtjE0-eny_hJPzYbjB-v4slM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/556/QZZEdk3qlWcrEjrBCVBXaxEM3u4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:fa:cd:d4:56:d4:80:36:99:74:b0:45:ce:7b:83:5e:99:a3:
         50:2a:f2:34:19:a6:9b:35:39:eb:21:66:6a:4e:82:f2:af:ea:
         cd:c5:ea:d9:8a:cf:a7:9c:9d:78:bf:5f:7d:39:15:82:9b:55:
         18:ac:2d:54:bb:48:84:ab:ad:8d:d1:ed:b2:99:64:9a:3b:85:
         5e:7b:c6:15:05:44:cd:62:0d:e7:b8:e7:fd:ba:01:bb:3e:75:
         7a:d3:9f:60:05:f3:f8:75:63:03:20:d3:51:27:ce:3b:8e:9f:
         14:61:88:8e:53:7c:f3:1a:20:f9:f9:06:21:63:9f:62:26:63:
         2c:3b:e0:e0:1f:93:8f:60:59:06:1b:a4:98:1e:d2:de:03:f8:
         8d:f4:a1:5d:7f:da:15:57:ad:de:bd:27:fd:94:fe:8d:18:69:
         ca:31:55:95:80:8f:eb:86:79:25:2c:27:82:10:b6:ed:1f:f3:
         19:c9:3c:c0:49:0b:3b:39:e4:8e:36:40:32:f6:5e:61:a8:bf:
         79:08:ee:2c:de:d5:4a:fa:76:29:18:f5:fe:94:10:0f:20:eb:
         ca:53:e5:34:95:bc:71:c8:f9:26:5a:df:5f:04:63:c2:30:86:
         b0:68:fd:54:b9:54:16:44:64:a3:91:dc:28:7b:06:28:15:38:
         65:3a:8a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 14:28:13 2025 by rpki-client