
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/299/3m1WWwCX9QUSXan91ca9U6GlR80.roa
File: 3m1WWwCX9QUSXan91ca9U6GlR80.roa (raw, json)
Hash identifier: u5lplk0u2qm4CVJvpuKUp+9i6DfF6cpM6RFOaoBfhA8=
Subject key identifier: DE:6D:56:5B:00:97:F5:05:12:5D:A9:FD:D5:C6:BD:53:A1:A5:47:CD
Certificate issuer: /CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
Certificate serial: 72
Authority key identifier: D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/3m1WWwCX9QUSXan91ca9U6GlR80.roa
Signing time: Sun 01 Mar 2026 01:29:08 +0000
ROA not before: Sun 01 Mar 2026 01:29:08 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 63789
IP address blocks: 202.9.208.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114 (0x72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
Validity
Not Before: Mar 1 01:29:08 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=DE6D565B0097F505125DA9FDD5C6BD53A1A547CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a2:f0:86:39:b6:eb:ca:99:ce:a9:2b:d3:bd:
bf:a4:4d:ee:67:b6:de:a1:ba:19:58:13:a9:43:2a:
38:10:f5:a9:ca:a3:8c:ac:cb:0a:9a:a4:28:f1:3d:
34:61:d0:f7:23:67:f4:36:47:ce:62:50:12:24:20:
7c:73:7c:90:ed:1b:93:a7:39:1f:07:38:0e:bc:84:
c4:d3:6b:30:bd:3f:c9:6c:3d:bf:59:74:4f:cf:c8:
82:8b:15:21:3f:18:9b:e5:8f:d4:0d:92:2c:0d:f6:
19:8b:d5:3d:33:b9:c8:80:ab:f0:65:73:a6:4c:8d:
81:d2:06:ad:4b:0e:48:c5:f5:ff:82:01:33:45:66:
cf:ac:7f:e8:70:5c:7a:20:45:aa:83:f9:3f:00:be:
17:8a:5d:dd:07:c1:fa:90:83:c4:cb:e9:7d:7f:b3:
cc:2d:09:40:a2:5b:a5:80:b0:45:0a:0a:78:a7:b5:
04:c4:6c:0b:dd:ed:0d:8d:a3:89:d1:39:71:3b:9b:
63:05:02:12:94:72:df:67:da:b5:b1:68:f8:42:25:
63:20:6f:a0:62:60:18:8d:7a:e2:de:5b:9c:63:19:
14:98:a1:fe:66:ec:19:2f:9c:71:96:7d:3d:f2:47:
0b:80:02:42:73:f7:74:61:fc:48:65:52:6f:fe:73:
ac:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6D:56:5B:00:97:F5:05:12:5D:A9:FD:D5:C6:BD:53:A1:A5:47:CD
X509v3 Authority Key Identifier:
keyid:D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/3m1WWwCX9QUSXan91ca9U6GlR80.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.9.208.0/22
Signature Algorithm: sha256WithRSAEncryption
81:fa:db:db:3f:4c:fe:4e:2b:4a:3f:ce:c4:5c:ab:2c:63:fb:
46:e1:c0:04:71:3d:01:c7:ba:e1:1a:72:c2:83:55:82:a7:05:
8d:62:b8:c8:86:fd:44:a3:fb:64:66:9e:ad:1c:23:36:71:ee:
34:3c:2b:2e:45:ee:37:d5:e0:41:68:0d:e5:6e:24:da:18:2d:
aa:24:52:a0:e1:9d:53:c8:82:c2:82:3d:b4:c5:5e:62:c1:e2:
af:a8:69:57:6f:5e:89:64:95:8f:00:5b:0b:1d:eb:c6:74:6d:
b3:90:ec:63:03:bd:f8:bc:8a:7f:43:b4:e3:1a:36:8d:a0:2f:
36:b9:9a:cc:cd:67:26:93:fc:63:83:a1:83:7e:b2:36:4f:d4:
fd:15:69:29:72:94:6b:76:26:0f:3a:ac:c2:c1:27:73:22:87:
9b:96:3d:6b:78:08:55:4d:4f:04:1b:ad:3d:5a:6f:8a:30:af:
16:20:e4:fe:a7:83:48:16:df:1c:82:ef:40:31:1f:e4:54:06:
30:51:f4:5a:9b:8a:a1:33:b4:90:08:aa:11:03:4b:3b:dd:09:
15:9a:5d:bc:89:42:ab:0e:bd:e8:ff:9e:4a:e9:72:87:3a:96:
f0:b6:7e:a0:59:05:82:71:48:a8:29:0e:b6:68:39:58:61:6a:
88:d7:80:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:20:22 2026 by rpki-client