This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/675/kijoSMQjDDd3eqpzbhEL0KZ8vtI.roa
File:                     kijoSMQjDDd3eqpzbhEL0KZ8vtI.roa (raw, json)
Hash identifier:          VJQk9OYMPJYoEGjJeMA4aion1LiFQ7+4kRZ4tNZio+4=
Subject key identifier:   92:28:E8:48:C4:23:0C:37:77:7A:AA:73:6E:11:0B:D0:A6:7C:BE:D2
Certificate issuer:       /CN=041FC867F39C53644D0C5C50994B55111BD76CA3
Certificate serial:       1B
Authority key identifier: 04:1F:C8:67:F3:9C:53:64:4D:0C:5C:50:99:4B:55:11:1B:D7:6C:A3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BB_IZ_OcU2RNDFxQmUtVERvXbKM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/675/kijoSMQjDDd3eqpzbhEL0KZ8vtI.roa
Signing time:             Fri 05 Dec 2025 12:44:18 +0000
ROA not before:           Fri 05 Dec 2025 12:44:18 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     16509
IP address blocks:        218.223.15.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/675/BB_IZ_OcU2RNDFxQmUtVERvXbKM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/675/BB_IZ_OcU2RNDFxQmUtVERvXbKM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BB_IZ_OcU2RNDFxQmUtVERvXbKM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 21:49:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=041FC867F39C53644D0C5C50994B55111BD76CA3
        Validity
            Not Before: Dec  5 12:44:18 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=9228E848C4230C37777AAA736E110BD0A67CBED2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:34:78:d9:a5:4b:f9:61:5a:1e:a0:d3:ee:9d:
                    7c:d9:61:09:a7:2a:58:63:4e:6f:c8:72:88:6c:c7:
                    c6:45:1f:94:a4:09:6f:e8:4d:0c:cd:e8:3c:11:0d:
                    b7:2b:60:54:49:4d:ad:72:19:dc:d1:51:d8:56:23:
                    1d:92:4d:38:84:7f:ba:96:15:a1:7a:33:f6:39:df:
                    1f:42:a6:a8:5b:9e:18:a2:21:3f:7a:66:19:23:d8:
                    0e:3e:75:89:43:25:3a:a4:71:5a:22:e7:e7:a8:42:
                    38:7b:a7:1b:66:f3:f7:33:4d:e2:c2:3a:ad:7b:ab:
                    4c:f5:d2:96:c5:fe:e6:5c:37:92:30:9c:be:20:4a:
                    ed:77:c3:1c:cb:73:bb:1a:54:44:32:8b:06:f5:11:
                    d5:4f:58:5f:8b:d0:7c:7c:af:1f:17:56:83:4f:eb:
                    bb:7f:e5:04:2e:80:9c:14:a5:2b:16:73:1e:14:04:
                    10:a4:ff:7f:98:95:84:39:ce:d1:6c:11:4e:bc:1e:
                    83:62:8c:e6:58:22:43:6b:56:dd:83:19:8d:89:50:
                    ba:11:11:1d:fa:ea:f3:43:be:8a:c4:49:e0:d6:06:
                    3e:05:c1:5d:dd:ee:f1:80:0a:f3:ce:8e:bd:d2:28:
                    40:48:60:81:c6:29:0b:1e:8f:9f:c6:7d:e8:69:7a:
                    86:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:28:E8:48:C4:23:0C:37:77:7A:AA:73:6E:11:0B:D0:A6:7C:BE:D2
            X509v3 Authority Key Identifier:
                keyid:04:1F:C8:67:F3:9C:53:64:4D:0C:5C:50:99:4B:55:11:1B:D7:6C:A3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/675/BB_IZ_OcU2RNDFxQmUtVERvXbKM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BB_IZ_OcU2RNDFxQmUtVERvXbKM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/675/kijoSMQjDDd3eqpzbhEL0KZ8vtI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.223.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:c0:8c:e0:50:d4:f5:de:d4:3d:ba:a8:4d:75:e3:59:bf:c2:
         b4:6c:0a:96:34:be:63:3e:e0:fa:18:ef:07:9a:81:e8:d0:7f:
         a0:dd:25:67:78:4b:61:04:f5:5a:75:78:91:57:68:c8:e2:39:
         fc:7c:bf:f1:f4:81:24:70:d0:bc:d0:0d:38:6a:44:02:91:80:
         db:5a:78:60:6f:55:45:3b:8a:75:fb:9d:4d:de:dc:c7:cf:55:
         b4:94:68:ed:30:33:b9:bc:d0:f6:15:23:ad:4b:d5:ce:12:c7:
         19:92:6b:b4:6c:eb:a2:6b:f7:09:be:b4:a2:11:28:c7:31:b3:
         d0:22:bb:7f:65:31:85:a9:a1:b5:1c:6d:8a:ff:14:ed:be:23:
         16:78:87:eb:9e:91:74:36:55:b1:6d:95:27:1d:7f:17:6f:49:
         f9:0a:e5:f2:02:99:0f:24:c9:62:f1:e1:04:de:84:21:08:59:
         a8:ab:9b:ba:f0:af:f8:f8:f1:c6:bf:eb:2c:23:d7:f0:12:57:
         43:3a:c7:2a:e8:5a:dc:79:d4:67:f4:2d:1e:69:06:c9:73:ac:
         e0:d5:a8:54:98:b9:cd:dd:8f:61:aa:c4:9f:bc:63:f1:af:a1:
         44:3c:30:09:25:77:7e:07:82:c5:ca:d5:e0:be:e6:14:0e:55:
         1a:89:60:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:22:33 2025 by rpki-client