
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/CmPX43mGF5ysOV47XQhyC7jA9yg.roa
File: CmPX43mGF5ysOV47XQhyC7jA9yg.roa (raw, json)
Hash identifier: YKPuyYm/yhSLNUJarEPWmu7M5NiUlTnh0ojcpiJObXA=
Subject key identifier: 0A:63:D7:E3:79:86:17:9C:AC:39:5E:3B:5D:08:72:0B:B8:C0:F7:28
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1130
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CmPX43mGF5ysOV47XQhyC7jA9yg.roa
Signing time: Sun 01 Mar 2026 02:12:38 +0000
ROA not before: Sun 01 Mar 2026 02:12:38 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.78.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:24:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4400 (0x1130)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:12:38 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=0A63D7E37986179CAC395E3B5D08720BB8C0F728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7a:04:63:52:b8:3a:65:75:71:8b:d1:6c:56:
e9:8e:3e:2e:82:f3:d2:1a:3d:c7:d6:cf:03:e8:b2:
a6:1f:29:a6:d7:09:30:d2:b5:0a:c6:31:79:39:2d:
31:c4:83:8d:19:b8:e1:2d:06:a3:88:aa:29:84:9b:
62:ac:bc:44:eb:09:81:82:f1:ad:1f:0c:34:88:d0:
e6:af:d0:b8:cc:ff:46:e4:68:3f:e2:9d:a0:73:f3:
1c:e6:8d:4a:05:ae:a3:94:1a:0d:06:6c:36:26:ab:
e6:28:b9:b0:0d:a9:46:06:ee:1f:05:6a:f0:35:f2:
81:eb:1c:ed:5d:49:9f:ae:0b:01:d0:15:b6:eb:69:
e5:27:bf:9e:a0:6a:19:e4:d7:88:88:5b:ba:46:6e:
52:db:b3:54:e7:9d:7e:63:61:1a:16:13:58:a4:e8:
a1:aa:b7:6d:5c:12:6e:9a:be:34:ee:97:34:83:1c:
d9:3c:49:57:dd:24:93:ae:f3:08:44:42:9a:ff:1e:
89:bd:bf:f2:70:be:92:5e:26:bf:21:ae:37:41:ea:
5d:bc:9a:7f:ae:0a:10:32:7a:6d:42:e0:30:f0:6b:
be:98:5b:ca:f0:8b:f2:e5:55:aa:25:b5:ef:7d:b4:
7c:bd:74:5d:bf:2f:2e:a0:6d:45:37:f5:2c:d6:e4:
2c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:63:D7:E3:79:86:17:9C:AC:39:5E:3B:5D:08:72:0B:B8:C0:F7:28
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CmPX43mGF5ysOV47XQhyC7jA9yg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.78.128.0/17
Signature Algorithm: sha256WithRSAEncryption
5b:97:bf:2c:70:c3:fc:06:28:4b:1d:89:07:f0:86:43:14:bd:
1c:f5:65:68:eb:63:77:9c:1e:c9:2c:83:88:03:8d:ec:0a:4a:
79:18:1d:64:52:82:4e:a4:1e:62:7f:6a:d5:c2:11:3d:f5:38:
ed:15:4d:38:e9:45:07:a4:e9:b6:85:d5:a9:fe:61:c7:db:be:
32:e4:88:90:df:87:4e:8c:a7:01:39:f4:61:e0:3a:c7:ce:4a:
a4:48:c5:64:c8:b2:63:6e:0f:60:65:2f:f8:c6:32:30:39:4d:
8d:7f:40:a3:bd:28:6d:97:86:55:c5:33:5c:36:2d:60:94:89:
6d:ca:c4:ea:c1:f5:d2:76:87:fa:50:09:e8:11:cc:90:cd:6e:
a7:a5:aa:72:de:40:99:97:f2:13:51:93:10:c8:05:87:ff:b3:
65:37:1f:1d:8e:b9:bf:77:43:6d:4d:42:7c:3e:a3:9c:9e:f3:
8c:e6:13:02:15:0c:46:ac:60:f5:69:3e:38:b3:ff:1e:23:85:
a2:ab:ed:bd:5b:6c:eb:06:ac:9a:55:9e:bd:50:30:ba:53:bb:
44:5f:0d:ed:7f:cb:22:4a:e9:5c:69:f5:8c:2e:b8:03:4a:31:
83:7f:7a:14:6e:0b:51:86:03:14:75:26:79:ee:2d:7f:47:01:
48:48:87:70
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICETAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MjEyMzhaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDBBNjNEN0UzNzk4NjE3
OUNBQzM5NUUzQjVEMDg3MjBCQjhDMEY3MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPegRjUrg6ZXVxi9FsVumOPi6C89IaPcfWzwPosqYfKabXCTDS
tQrGMXk5LTHEg40ZuOEtBqOIqimEm2KsvETrCYGC8a0fDDSI0Oav0LjM/0bkaD/i
naBz8xzmjUoFrqOUGg0GbDYmq+YoubANqUYG7h8FavA18oHrHO1dSZ+uCwHQFbbr
aeUnv56gahnk14iIW7pGblLbs1TnnX5jYRoWE1ik6KGqt21cEm6avjTulzSDHNk8
SVfdJJOu8whEQpr/Hom9v/JwvpJeJr8hrjdB6l28mn+uChAyem1C4DDwa76YW8rw
i/LlVaolte99tHy9dF2/Ly6gbUU39SzW5CwVAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUCmPX43mGF5ysOV47XQhyC7jA9ygwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0NtUFg0M21HRjV5c09WNDdYUWh5QzdqQTl5Zy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAcBToAwDQYJKoZIhvcNAQELBQADggEBAFuXvyxww/wGKEsdiQfwhkMUvRz1
ZWjrY3ecHsksg4gDjewKSnkYHWRSgk6kHmJ/atXCET31OO0VTTjpRQek6baF1an+
YcfbvjLkiJDfh06MpwE59GHgOsfOSqRIxWTIsmNuD2BlL/jGMjA5TY1/QKO9KG2X
hlXFM1w2LWCUiW3KxOrB9dJ2h/pQCegRzJDNbqelqnLeQJmX8hNRkxDIBYf/s2U3
Hx2Oub93Q21NQnw+o5ye84zmEwIVDEasYPVpPjiz/x4jhaKr7b1bbOsGrJpVnr1Q
MLpTu0RfDe1/yyJK6Vxp9YwuuANKMYN/ehRuC1GGAxR1JnnuLX9HAUhIh3A=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:54:52 2026 by rpki-client