This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/696/gfDxSWs2oC6tlsPi1OEsIPDvtrM.roa
File:                     gfDxSWs2oC6tlsPi1OEsIPDvtrM.roa (raw, json)
Hash identifier:          VEYxpiNijGi/MdFGKVeJvQ6OZseih8fflAPlmux5V4w=
Subject key identifier:   81:F0:F1:49:6B:36:A0:2E:AD:96:C3:E2:D4:E1:2C:20:F0:EF:B6:B3
Certificate issuer:       /CN=32DB70FFB8A72289F56450768644658C54AA64E9
Certificate serial:       49
Authority key identifier: 32:DB:70:FF:B8:A7:22:89:F5:64:50:76:86:44:65:8C:54:AA:64:E9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Mttw_7inIon1ZFB2hkRljFSqZOk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/gfDxSWs2oC6tlsPi1OEsIPDvtrM.roa
Signing time:             Thu 11 Dec 2025 06:46:38 +0000
ROA not before:           Thu 11 Dec 2025 06:46:38 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     18135
IP address blocks:        203.211.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/Mttw_7inIon1ZFB2hkRljFSqZOk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/Mttw_7inIon1ZFB2hkRljFSqZOk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Mttw_7inIon1ZFB2hkRljFSqZOk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 12:49:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32DB70FFB8A72289F56450768644658C54AA64E9
        Validity
            Not Before: Dec 11 06:46:38 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=81F0F1496B36A02EAD96C3E2D4E12C20F0EFB6B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3a:ef:9f:92:24:d6:c0:54:be:2e:58:0e:ec:
                    ef:c8:73:7e:25:59:81:0e:e5:d3:7d:26:70:a2:51:
                    89:4d:d0:4d:c3:1b:24:9d:88:65:93:b9:62:4d:ce:
                    57:15:5c:fc:ca:ea:d9:8c:a0:8a:0b:ad:73:8f:21:
                    41:f6:a1:f0:bc:d8:c3:9c:bb:d5:63:c9:ab:3b:62:
                    27:bc:5e:44:35:25:91:7a:36:5d:58:5c:e6:86:35:
                    67:ef:21:94:0c:63:1e:5f:00:ba:1e:e4:0e:0b:cb:
                    63:b5:b3:0b:4e:d1:fe:b7:7b:83:b3:21:2c:66:76:
                    50:98:59:b8:a6:8b:3c:13:bd:5e:f9:ee:db:e5:8a:
                    43:78:b4:b1:7f:9a:df:b7:21:f4:ee:a8:6b:39:5f:
                    ef:32:82:25:57:07:6b:3d:19:17:db:11:68:fa:b6:
                    0d:0c:4b:4e:71:fa:3f:b8:34:59:96:56:57:b9:aa:
                    90:b2:21:31:1a:af:59:7a:63:a6:5e:55:14:f4:3a:
                    2b:a3:73:56:49:12:cc:28:1c:43:7c:bd:45:fd:ce:
                    f5:52:f8:45:c9:97:d3:fe:e5:c1:ce:a7:cc:66:f6:
                    ad:27:11:2a:29:57:7b:b7:f7:b7:f5:12:27:58:5d:
                    06:6a:3a:92:e3:8d:c7:b3:9b:64:ad:37:f6:6f:29:
                    d4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F0:F1:49:6B:36:A0:2E:AD:96:C3:E2:D4:E1:2C:20:F0:EF:B6:B3
            X509v3 Authority Key Identifier:
                keyid:32:DB:70:FF:B8:A7:22:89:F5:64:50:76:86:44:65:8C:54:AA:64:E9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/Mttw_7inIon1ZFB2hkRljFSqZOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Mttw_7inIon1ZFB2hkRljFSqZOk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/gfDxSWs2oC6tlsPi1OEsIPDvtrM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.211.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2b:fe:bb:d5:2f:30:10:c5:2a:de:a4:6f:01:83:49:01:d6:78:
         da:9d:40:71:31:c1:06:22:72:52:11:f6:89:9b:d9:ee:4f:2c:
         ac:57:97:82:1c:88:51:bf:6d:a6:bc:09:0d:56:5f:d9:0d:cf:
         d9:46:e1:85:34:7f:c1:7d:a5:c9:f6:20:3f:77:78:ce:8c:8f:
         dd:0c:d9:2a:f2:89:65:29:62:4d:68:53:78:9d:ba:29:f6:b6:
         f7:dd:2a:2f:9c:6e:e6:87:51:2f:de:bc:6d:38:c8:82:95:7d:
         b5:e0:f2:58:10:70:37:3a:67:cc:bd:fa:7c:39:42:a1:31:d3:
         1d:7b:05:e0:37:91:0d:29:6c:2f:e9:54:ae:1d:2a:d1:18:33:
         b0:83:85:10:25:81:4b:94:17:d4:e9:a9:48:66:d6:32:f8:99:
         00:13:8c:ba:86:2e:ac:2a:08:0c:a0:0a:30:e5:2b:2a:10:93:
         34:1a:1e:5f:f4:ed:68:78:b6:24:d3:1c:ac:17:b5:f0:b3:43:
         53:c7:b3:31:5c:5b:f0:fd:20:95:50:31:56:ec:08:16:c4:72:
         ea:a1:d3:bc:b1:b9:f8:c3:f2:71:b5:55:1a:3f:bd:44:d8:19:
         45:ad:80:1e:d8:6a:dc:74:8c:e5:68:12:34:f6:5c:59:79:f3:
         5f:1b:ee:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 14:28:40 2025 by rpki-client