This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/675/-jhg0pCRy4X946rQ8e35h3m9dnw.roa
File:                     -jhg0pCRy4X946rQ8e35h3m9dnw.roa (raw, json)
Hash identifier:          utWQKrYzV0V9g/d9cIQruPDpyldtXkzHS6k1joDv65g=
Subject key identifier:   FA:38:60:D2:90:91:CB:85:FD:E3:AA:D0:F1:ED:F9:87:79:BD:76:7C
Certificate issuer:       /CN=041FC867F39C53644D0C5C50994B55111BD76CA3
Certificate serial:       18
Authority key identifier: 04:1F:C8:67:F3:9C:53:64:4D:0C:5C:50:99:4B:55:11:1B:D7:6C:A3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BB_IZ_OcU2RNDFxQmUtVERvXbKM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/675/-jhg0pCRy4X946rQ8e35h3m9dnw.roa
Signing time:             Fri 05 Dec 2025 12:44:16 +0000
ROA not before:           Fri 05 Dec 2025 12:44:16 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     14618
IP address blocks:        218.223.14.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/675/BB_IZ_OcU2RNDFxQmUtVERvXbKM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/675/BB_IZ_OcU2RNDFxQmUtVERvXbKM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BB_IZ_OcU2RNDFxQmUtVERvXbKM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 00:51:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=041FC867F39C53644D0C5C50994B55111BD76CA3
        Validity
            Not Before: Dec  5 12:44:16 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=FA3860D29091CB85FDE3AAD0F1EDF98779BD767C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a8:a1:67:e3:e4:c2:86:95:c6:3c:07:2e:b7:
                    13:09:48:94:81:26:22:67:06:ff:1a:65:8e:71:13:
                    7c:41:14:1f:59:42:16:90:cf:6d:1b:2d:5d:b9:ad:
                    22:95:52:43:ba:9e:cf:8e:9e:3b:87:15:33:08:90:
                    5e:96:30:d7:35:b7:aa:4b:be:c9:a1:c1:17:d5:ee:
                    32:9a:9e:f1:34:98:9e:60:24:2b:ae:aa:b8:f8:af:
                    5f:d2:f0:be:e0:5d:ce:15:e6:55:f8:d1:18:e0:23:
                    19:87:7b:40:ad:23:58:07:3f:36:a4:21:56:a8:b0:
                    a2:1c:17:bd:86:22:f0:e5:e0:66:dc:10:90:34:56:
                    7b:0e:a8:1b:7a:3d:d0:f4:f6:ea:c2:6a:9e:29:32:
                    5c:23:e2:33:24:bc:50:75:b7:eb:12:ed:16:d2:9b:
                    8d:37:5e:1b:05:bc:93:52:94:46:cc:b6:94:28:9a:
                    4b:56:83:f8:8d:74:bd:7e:ff:a6:30:a5:46:cc:56:
                    73:50:0f:9f:67:4e:b6:68:f1:20:1d:86:68:9c:b5:
                    84:75:a4:73:f7:8f:67:c1:a6:7b:45:2f:a0:ec:5e:
                    7b:d6:98:cc:78:7d:42:31:19:45:78:a6:fc:90:4d:
                    01:3b:db:1f:ef:d8:21:5f:ff:86:ba:d8:09:62:58:
                    8e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:38:60:D2:90:91:CB:85:FD:E3:AA:D0:F1:ED:F9:87:79:BD:76:7C
            X509v3 Authority Key Identifier:
                keyid:04:1F:C8:67:F3:9C:53:64:4D:0C:5C:50:99:4B:55:11:1B:D7:6C:A3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/675/BB_IZ_OcU2RNDFxQmUtVERvXbKM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BB_IZ_OcU2RNDFxQmUtVERvXbKM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/675/-jhg0pCRy4X946rQ8e35h3m9dnw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.223.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:fc:ba:a6:d2:3a:b3:28:e8:6c:26:2d:04:c3:49:4f:ec:54:
         50:8b:1c:71:1b:d3:75:f6:89:27:6c:06:1a:50:70:df:81:d3:
         f4:36:6c:f4:aa:a4:d4:6e:6f:a5:ba:39:90:62:19:d0:2e:70:
         bc:ff:22:5f:09:69:e4:2c:75:85:75:eb:fe:ac:f6:eb:a0:9d:
         98:8d:88:ba:39:59:6e:76:36:a4:da:04:de:0a:1a:6b:f7:c2:
         59:cf:5a:a9:79:3f:31:6d:aa:c9:f9:8b:f6:a8:a6:8d:68:a4:
         6f:79:9b:8a:fa:03:44:21:20:0c:6e:79:45:be:d6:b3:9a:51:
         01:82:e8:3b:9c:3e:61:b1:6b:22:fc:3c:2d:08:d6:fb:1b:89:
         dc:01:1a:95:f1:55:2e:2a:9f:00:fd:69:53:71:a7:2d:e8:89:
         78:3f:45:d3:5f:7c:11:92:86:13:24:60:f6:bc:73:16:16:8d:
         4b:d2:c4:6f:59:20:2f:6d:b0:38:92:fa:80:3f:a2:f5:a8:68:
         3d:eb:a4:df:1d:08:65:13:79:5d:4c:60:1f:ec:a0:ab:07:37:
         84:7e:01:0e:3f:30:9d:24:0c:35:9b:5d:e3:46:fd:3b:06:3d:
         60:7e:ec:21:9a:93:a5:91:61:19:5c:58:16:46:74:7e:37:12:
         11:9f:d7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 02:37:46 2025 by rpki-client