This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/696/hpcfrjnSk7FL--9rz5OoxGezgDQ.roa
File:                     hpcfrjnSk7FL--9rz5OoxGezgDQ.roa (raw, json)
Hash identifier:          XP0efKJUE1/l5NQJeIaroWIpkXExnZHkBX1Vh44UoME=
Subject key identifier:   86:97:1F:AE:39:D2:93:B1:4B:FB:EF:6B:CF:93:A8:C4:67:B3:80:34
Certificate issuer:       /CN=32DB70FFB8A72289F56450768644658C54AA64E9
Certificate serial:       4A
Authority key identifier: 32:DB:70:FF:B8:A7:22:89:F5:64:50:76:86:44:65:8C:54:AA:64:E9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Mttw_7inIon1ZFB2hkRljFSqZOk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/hpcfrjnSk7FL--9rz5OoxGezgDQ.roa
Signing time:             Thu 11 Dec 2025 06:46:41 +0000
ROA not before:           Thu 11 Dec 2025 06:46:41 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     18135
IP address blocks:        203.211.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/Mttw_7inIon1ZFB2hkRljFSqZOk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/Mttw_7inIon1ZFB2hkRljFSqZOk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Mttw_7inIon1ZFB2hkRljFSqZOk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 12:49:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32DB70FFB8A72289F56450768644658C54AA64E9
        Validity
            Not Before: Dec 11 06:46:41 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=86971FAE39D293B14BFBEF6BCF93A8C467B38034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:12:10:34:9a:11:43:f1:21:c2:9b:3d:2c:d0:
                    38:a7:9f:b7:0a:05:a0:1a:2c:24:52:2d:8b:a7:bb:
                    61:c4:db:c3:34:9a:ea:b1:f7:14:79:5f:d1:65:4e:
                    8e:ed:e4:87:38:df:86:ae:5a:39:a1:53:af:09:fc:
                    ae:13:7f:f5:40:a4:76:c6:cb:a9:c5:0e:db:3a:e4:
                    87:bb:2c:e2:24:ee:7d:ff:f5:66:87:32:bc:4d:f4:
                    ea:a0:7a:6d:92:2c:68:3b:be:71:86:7d:87:8a:1a:
                    3a:32:bf:4f:a8:9a:58:52:cb:96:0d:0a:2b:28:5f:
                    51:3b:a8:0e:b2:7c:39:1f:9c:48:ad:5d:b4:fb:2b:
                    e8:d9:5e:1f:d0:50:15:84:15:6e:d2:6d:84:c7:56:
                    76:78:b8:2e:ce:a4:72:07:a3:04:46:02:b6:77:6f:
                    1f:6c:d7:4a:f3:fa:ae:2a:30:df:77:9c:f3:e0:7e:
                    76:77:3d:3c:17:b8:f2:24:75:f3:4c:9a:97:e2:85:
                    8c:49:e4:34:5f:13:5c:d7:38:f9:e7:2a:57:38:44:
                    9d:87:3c:27:61:7e:05:86:79:fc:d2:f1:09:6c:fc:
                    77:60:57:09:f1:e8:cc:1c:57:25:2a:d2:24:94:28:
                    76:64:78:27:26:ee:5f:f6:3c:61:98:62:e9:17:57:
                    96:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:97:1F:AE:39:D2:93:B1:4B:FB:EF:6B:CF:93:A8:C4:67:B3:80:34
            X509v3 Authority Key Identifier:
                keyid:32:DB:70:FF:B8:A7:22:89:F5:64:50:76:86:44:65:8C:54:AA:64:E9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/Mttw_7inIon1ZFB2hkRljFSqZOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Mttw_7inIon1ZFB2hkRljFSqZOk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/hpcfrjnSk7FL--9rz5OoxGezgDQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.211.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         03:37:cf:57:1d:0e:ed:16:c1:f4:76:76:e5:dd:cd:6c:a2:24:
         c3:54:9f:41:d2:da:0d:62:66:c2:f3:88:6f:bf:e2:b6:be:06:
         34:93:33:58:a3:da:a9:6e:54:15:99:f0:a0:d5:dc:62:02:f3:
         90:e3:f8:73:a2:63:5e:f8:ca:77:21:44:1b:24:fb:98:84:3a:
         68:5b:50:1e:e5:cf:24:60:ab:8b:37:91:88:28:e0:10:ac:81:
         81:72:ef:10:71:84:d5:8b:86:1c:46:37:2a:10:04:ba:c1:80:
         b2:2d:b3:4a:47:f9:03:32:f5:dc:75:8c:df:90:2e:c4:05:40:
         42:86:ba:5b:8a:7c:cf:1f:e8:bf:8f:4e:b6:ac:53:24:4e:5d:
         7f:e4:b6:bd:1b:eb:da:b8:bb:dd:f7:d8:c1:f9:ad:cf:e4:c7:
         0c:30:7a:67:04:51:08:9b:e1:83:d3:36:10:c1:fb:b3:72:43:
         63:c4:8b:09:0e:99:6f:fe:46:7d:84:3b:93:d6:d0:0b:2a:04:
         95:d0:a6:68:e9:47:a4:53:85:fd:db:b6:bd:b9:b2:1b:ef:31:
         cf:29:b7:8a:cb:eb:fd:9e:12:3d:9d:76:21:11:66:80:70:b0:
         ba:02:53:31:a5:23:4c:02:19:42:25:f1:59:da:cb:7e:cc:76:
         88:b2:ac:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 14:28:11 2025 by rpki-client