
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/395KxTD8MJh6WC8wTNrzrwPeYD0.roa
File: 395KxTD8MJh6WC8wTNrzrwPeYD0.roa (raw, json)
Hash identifier: F0zl9b/eYSo5ePA58c1fZ3HdNV/kCcTuQZK0KGUkqZ8=
Subject key identifier: DF:DE:4A:C5:30:FC:30:98:7A:58:2F:30:4C:DA:F3:AF:03:DE:60:3D
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 121B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/395KxTD8MJh6WC8wTNrzrwPeYD0.roa
Signing time: Sun 01 Mar 2026 02:48:45 +0000
ROA not before: Sun 01 Mar 2026 02:48:45 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.76.148.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4635 (0x121b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:48:45 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=DFDE4AC530FC30987A582F304CDAF3AF03DE603D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a7:43:d2:f7:8a:d1:11:32:38:39:62:2d:7e:
e9:ec:06:8d:97:14:f4:47:6d:0a:df:ec:50:62:d2:
46:3a:62:1f:18:bb:b6:c0:45:7c:8a:61:f9:7a:64:
af:53:de:ad:15:9a:2c:97:a0:fd:8b:05:ee:a2:38:
f1:e1:15:f6:36:a8:53:8e:69:9a:78:f6:a6:e0:65:
d7:7e:8b:2f:51:d0:46:85:cb:89:49:1a:cf:ac:a3:
df:d7:6c:f5:66:43:37:9c:78:14:2a:6a:96:09:78:
b0:84:5b:fe:8d:7c:bb:e8:2e:b3:5d:a3:00:05:bd:
39:92:e8:d7:54:3b:68:8a:60:b2:ed:77:17:8e:ac:
9a:2b:c7:80:d7:8c:b0:cb:51:b7:08:1f:9e:33:b3:
78:a1:9f:ce:84:e6:2f:85:8d:48:23:19:35:04:4c:
a1:6c:6b:dc:5c:e1:88:67:1d:95:5d:53:59:38:c2:
7f:e0:40:6e:56:72:d1:95:89:8c:cb:ec:15:55:1a:
10:c3:be:73:a8:22:28:9c:53:22:44:f1:ce:02:21:
94:fe:da:3b:3f:92:2a:e0:e1:b0:a4:17:55:4b:4b:
3f:31:a5:6f:d1:32:89:59:84:b2:25:7a:fd:3a:61:
26:0f:06:87:24:da:27:3d:60:3b:e8:cf:23:db:4e:
23:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DE:4A:C5:30:FC:30:98:7A:58:2F:30:4C:DA:F3:AF:03:DE:60:3D
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/395KxTD8MJh6WC8wTNrzrwPeYD0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.76.148.0/22
Signature Algorithm: sha256WithRSAEncryption
01:4e:ca:15:af:2a:76:af:23:4b:d6:28:79:4d:72:9b:09:a6:
85:a9:aa:a1:65:99:e9:8c:8a:e2:27:16:cd:8a:ce:23:47:82:
e0:55:7f:7e:cd:f8:33:98:7a:bc:74:56:e0:e4:42:57:2d:13:
af:7f:ea:4f:af:d4:2a:24:36:5e:3c:ba:28:7f:2a:dc:21:62:
92:ec:19:6a:f1:8e:46:8f:9c:64:f8:d2:09:53:c3:2f:6b:d1:
7f:cd:06:26:ec:fb:79:ef:09:12:51:83:35:e7:36:17:2e:57:
1c:e0:0d:06:82:14:0e:e0:9e:f0:8d:ab:60:75:50:bc:33:02:
24:74:5f:97:10:9c:eb:1d:fa:17:17:35:d7:01:d9:16:e4:01:
f0:ce:ec:51:9a:b8:a2:82:cb:59:66:cf:77:f3:24:4e:5f:a2:
f5:3d:0e:11:17:bf:21:3b:04:5a:69:2b:d5:7e:85:c7:84:e9:
be:dd:15:4c:b9:24:56:54:b8:3c:9b:ac:3f:bc:46:4d:cc:5c:
ef:e3:53:18:aa:7b:7a:ba:86:46:4e:8a:48:6c:be:19:0e:0a:
7c:4c:a1:27:8b:04:b9:35:ba:ce:22:05:11:59:8b:fc:91:ee:
57:02:3c:49:02:5f:fe:5a:54:b7:22:d0:fd:c8:f5:2e:0b:69:
28:2c:7a:3f
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEhswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MjQ4NDVaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKERGREU0QUM1MzBGQzMw
OTg3QTU4MkYzMDRDREFGM0FGMDNERTYwM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDmp0PS94rRETI4OWItfunsBo2XFPRHbQrf7FBi0kY6Yh8Yu7bA
RXyKYfl6ZK9T3q0VmiyXoP2LBe6iOPHhFfY2qFOOaZp49qbgZdd+iy9R0EaFy4lJ
Gs+so9/XbPVmQzeceBQqapYJeLCEW/6NfLvoLrNdowAFvTmS6NdUO2iKYLLtdxeO
rJorx4DXjLDLUbcIH54zs3ihn86E5i+FjUgjGTUETKFsa9xc4YhnHZVdU1k4wn/g
QG5WctGViYzL7BVVGhDDvnOoIiicUyJE8c4CIZT+2js/kirg4bCkF1VLSz8xpW/R
MolZhLIlev06YSYPBock2ic9YDvozyPbTiN/AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU395KxTD8MJh6WC8wTNrzrwPeYD0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5LzM5NUt4VEQ4TUpoNldDOHdUTnJ6cndQZVlEMC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIBTJQwDQYJKoZIhvcNAQELBQADggEBAAFOyhWvKnavI0vWKHlNcpsJpoWp
qqFlmemMiuInFs2KziNHguBVf37N+DOYerx0VuDkQlctE69/6k+v1CokNl48uih/
KtwhYpLsGWrxjkaPnGT40glTwy9r0X/NBibs+3nvCRJRgzXnNhcuVxzgDQaCFA7g
nvCNq2B1ULwzAiR0X5cQnOsd+hcXNdcB2RbkAfDO7FGauKKCy1lmz3fzJE5fovU9
DhEXvyE7BFppK9V+hceE6b7dFUy5JFZUuDybrD+8Rk3MXO/jUxiqe3q6hkZOikhs
vhkOCnxMoSeLBLk1us4iBRFZi/yR7lcCPEkCX/5aVLci0P3I9S4LaSgsej8=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:01:36 2026 by rpki-client