
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/BqWlFcQLfFKtAcUydKCEnqr0-98.roa
File: BqWlFcQLfFKtAcUydKCEnqr0-98.roa (raw, json)
Hash identifier: 8Sfn/VvPW+s+7ybNaVN0/1jY2ozywou5dEQoiq4U4f0=
Subject key identifier: 06:A5:A5:15:C4:0B:7C:52:AD:01:C5:32:74:A0:84:9E:AA:F4:FB:DF
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 10C4
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BqWlFcQLfFKtAcUydKCEnqr0-98.roa
Signing time: Sun 01 Mar 2026 01:54:38 +0000
ROA not before: Sun 01 Mar 2026 01:54:38 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.78.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4292 (0x10c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 01:54:38 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=06A5A515C40B7C52AD01C53274A0849EAAF4FBDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a1:1b:36:dc:c0:f8:83:05:85:85:5d:71:13:
07:83:eb:63:b7:a8:9c:10:b3:d9:48:e5:98:21:e5:
64:cf:ef:5b:eb:e7:5a:ff:33:0f:94:f0:49:4f:7f:
1e:9f:6f:a1:8a:f4:23:57:0e:c1:e9:a3:49:92:67:
b5:a1:54:5d:6d:a6:bd:fa:8e:2b:ff:1b:b1:f0:30:
ea:c0:d5:9a:1b:b2:24:41:c1:f5:a5:4f:5a:cb:19:
f6:52:2b:ae:4e:20:9c:42:6e:ea:2f:38:bd:53:aa:
94:29:e3:f1:b4:b8:51:d5:44:90:bc:90:2d:e9:31:
22:95:57:1f:76:4e:1b:6b:73:88:13:d5:80:22:e4:
8d:20:c3:bd:cd:2f:70:80:56:b5:92:b9:b6:0d:5f:
1c:44:89:b2:1b:f7:1a:0b:7b:d1:8d:9b:5e:9c:a8:
e0:32:a4:73:8c:7d:bc:53:d0:e6:79:f1:18:ed:fa:
a7:55:c5:41:4c:c4:d3:bc:02:bc:2a:51:63:d3:c9:
9d:c0:89:47:d1:e6:33:32:e0:64:7d:0d:f8:a7:d1:
d4:fe:92:e6:dc:c0:17:f2:2e:25:66:36:d3:d3:76:
2e:bb:01:d2:aa:09:15:c1:90:c7:8c:a8:f7:d0:3b:
14:ad:ca:0c:69:4e:14:a0:67:7d:78:8d:e6:74:18:
44:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A5:A5:15:C4:0B:7C:52:AD:01:C5:32:74:A0:84:9E:AA:F4:FB:DF
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BqWlFcQLfFKtAcUydKCEnqr0-98.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.78.64.0/19
Signature Algorithm: sha256WithRSAEncryption
74:9b:12:63:43:d0:f6:85:5e:c6:34:c2:6d:63:8c:5d:e2:f9:
25:be:3b:fa:a8:98:2c:1e:ae:e0:c9:e5:9e:27:27:3b:2b:c9:
23:9c:74:69:3e:d9:30:cc:ca:40:69:f3:cb:b3:43:91:56:a9:
f7:02:7f:ce:ba:aa:c6:51:90:7b:90:c3:30:1a:2c:47:4d:17:
ad:73:08:45:41:e5:90:7c:0a:15:7f:6e:4f:21:9e:c6:94:b8:
a9:a6:ec:7d:8b:01:fc:f2:17:6e:0d:54:34:43:e6:3d:e9:ef:
ec:33:16:99:de:a1:e6:e5:d6:78:9c:da:af:67:8c:86:ab:11:
97:e7:dd:83:6d:28:93:cd:15:dd:d6:ce:f9:04:00:b6:8f:e4:
5a:6d:50:fd:39:db:a3:bc:b3:8d:7a:3c:8a:5f:6e:22:db:09:
3b:06:69:94:5f:2d:b2:f7:6c:e8:d9:c1:fc:e2:fd:7a:53:1b:
0d:93:1d:d0:f6:a2:dc:3a:59:a1:49:8b:2b:44:a2:bc:d9:c1:
db:e9:4d:40:b1:89:99:eb:2f:f1:04:9d:0a:81:7f:7f:6a:e7:
59:51:1d:bd:e4:70:b4:d0:74:c1:94:cf:dc:f2:94:fd:d8:36:
62:a1:c6:fc:6a:9c:77:aa:f6:b7:c8:d7:0b:23:8f:cb:4f:23:
15:d6:7d:bb
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEMQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MTU0MzhaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA2QTVBNTE1QzQwQjdD
NTJBRDAxQzUzMjc0QTA4NDlFQUFGNEZCREYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGoRs23MD4gwWFhV1xEweD62O3qJwQs9lI5Zgh5WTP71vr51r/
Mw+U8ElPfx6fb6GK9CNXDsHpo0mSZ7WhVF1tpr36jiv/G7HwMOrA1ZobsiRBwfWl
T1rLGfZSK65OIJxCbuovOL1TqpQp4/G0uFHVRJC8kC3pMSKVVx92Thtrc4gT1YAi
5I0gw73NL3CAVrWSubYNXxxEibIb9xoLe9GNm16cqOAypHOMfbxT0OZ58Rjt+qdV
xUFMxNO8ArwqUWPTyZ3AiUfR5jMy4GR9Dfin0dT+kubcwBfyLiVmNtPTdi67AdKq
CRXBkMeMqPfQOxStygxpThSgZ314jeZ0GERzAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUBqWlFcQLfFKtAcUydKCEnqr0+98wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0JxV2xGY1FMZkZLdEFjVXlkS0NFbnFyMC05OC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAUBTkAwDQYJKoZIhvcNAQELBQADggEBAHSbEmND0PaFXsY0wm1jjF3i+SW+
O/qomCweruDJ5Z4nJzsrySOcdGk+2TDMykBp88uzQ5FWqfcCf866qsZRkHuQwzAa
LEdNF61zCEVB5ZB8ChV/bk8hnsaUuKmm7H2LAfzyF24NVDRD5j3p7+wzFpneoebl
1nic2q9njIarEZfn3YNtKJPNFd3WzvkEALaP5FptUP0526O8s416PIpfbiLbCTsG
aZRfLbL3bOjZwfzi/XpTGw2THdD2otw6WaFJiytEorzZwdvpTUCxiZnrL/EEnQqB
f39q51lRHb3kcLTQdMGUz9zylP3YNmKhxvxqnHeq9rfI1wsjj8tPIxXWfbs=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:04:26 2026 by rpki-client