
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/5dl7WXiMInYcGmhCDwoYdOB7cp8.roa
File: 5dl7WXiMInYcGmhCDwoYdOB7cp8.roa (raw, json)
Hash identifier: vz6/elGjAWxnsgSEygkw8AFhExURtNRG7wOWPCUT25M=
Subject key identifier: E5:D9:7B:59:78:8C:22:76:1C:1A:68:42:0F:0A:18:74:E0:7B:72:9F
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1143
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5dl7WXiMInYcGmhCDwoYdOB7cp8.roa
Signing time: Sun 01 Mar 2026 02:12:49 +0000
ROA not before: Sun 01 Mar 2026 02:12:49 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 219.114.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4419 (0x1143)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:12:49 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=E5D97B59788C22761C1A68420F0A1874E07B729F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fb:58:08:cb:10:2f:1d:93:5a:1f:7e:cb:78:
2c:18:46:dd:5a:92:22:86:4a:81:75:4c:fc:36:01:
79:f4:82:67:fe:c4:b4:01:f8:d9:e7:ef:ef:67:c5:
a8:25:78:d6:83:a1:32:f6:8b:e5:bc:35:36:13:dc:
44:1c:70:d9:28:fd:10:71:e3:b9:80:ee:5f:fa:c3:
09:d6:14:d9:a1:b4:12:46:6c:a3:06:00:81:97:f7:
35:23:90:41:88:83:11:6c:bd:58:e7:23:11:80:fd:
c9:6d:5b:b9:ef:43:7a:8c:35:8c:aa:c7:aa:ae:9e:
a6:10:05:9c:e3:b9:5f:39:2d:d5:a7:c8:56:93:41:
58:1f:ec:8a:c9:d4:68:4d:e2:98:3e:a4:e0:ea:4b:
44:a4:8c:bc:0a:30:86:7e:ef:2d:22:f1:04:2a:e9:
15:59:9d:99:d8:26:b0:e2:b3:51:44:82:b3:c4:92:
1b:a4:6e:ba:25:f4:8d:ca:42:6b:c8:be:79:c9:ec:
36:7f:86:4f:16:c0:37:13:4f:85:12:e0:f2:51:14:
9c:15:1d:aa:0b:1d:e7:3b:0b:9d:79:82:74:b1:4e:
8e:23:f7:67:d8:22:0e:b1:3f:8f:84:eb:b7:d8:f4:
86:df:bb:5d:9e:df:53:88:99:7c:50:2d:3e:c8:6b:
d2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D9:7B:59:78:8C:22:76:1C:1A:68:42:0F:0A:18:74:E0:7B:72:9F
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5dl7WXiMInYcGmhCDwoYdOB7cp8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
219.114.184.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:1d:58:1c:11:09:66:2f:93:cb:dd:eb:62:52:21:73:63:6e:
40:c6:99:88:87:97:b6:bc:3c:93:08:ce:17:ac:92:25:07:9c:
37:2d:4c:98:51:33:cb:64:5a:cc:76:7c:b0:fc:e4:9c:c6:3f:
98:be:a6:44:a9:1b:b2:ac:4a:11:3c:a6:30:95:5a:36:23:c3:
93:a0:fd:04:bc:65:e5:b3:b4:35:2b:95:9e:4b:2b:1e:be:7c:
7e:7e:9d:20:33:38:c7:65:73:1b:26:d9:35:74:e0:bc:86:74:
77:63:41:f5:1a:f5:81:b2:ee:d4:8c:98:29:99:cd:de:d3:79:
f3:15:a9:62:be:38:37:b1:0d:cf:3e:72:98:d6:5e:94:9c:82:
fd:0f:45:91:f8:f3:0a:f3:78:7d:80:df:31:64:1b:d7:23:07:
e3:49:1d:c1:ed:3f:59:37:06:37:fc:4e:b6:07:80:32:7c:69:
75:64:4e:59:d0:3a:a0:47:47:c6:f7:f6:bf:a3:ed:29:cd:9c:
3e:00:76:c3:8b:98:e5:b3:83:b7:8f:9e:f0:48:fc:80:aa:83:
0f:93:42:50:94:22:69:4e:ec:e5:a0:c3:3d:28:ed:aa:62:66:
ab:12:bc:f9:3d:27:ea:aa:d3:69:96:b9:2d:56:16:9e:a3:85:
c2:8a:cb:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:49:46 2026 by rpki-client