
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/EssII4w8vL5i93pWazaqqmACKgs.roa
File: EssII4w8vL5i93pWazaqqmACKgs.roa (raw, json)
Hash identifier: TS7qPqXseZ0Tmq6tUmZeOU0bdJZX6def66OkuIQzHL4=
Subject key identifier: 12:CB:08:23:8C:3C:BC:BE:62:F7:7A:56:6B:36:AA:AA:60:02:2A:0B
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 11D9
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EssII4w8vL5i93pWazaqqmACKgs.roa
Signing time: Sun 01 Mar 2026 02:40:42 +0000
ROA not before: Sun 01 Mar 2026 02:40:42 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 110.158.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4569 (0x11d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:40:42 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=12CB08238C3CBCBE62F77A566B36AAAA60022A0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4b:14:2e:2e:66:da:05:e1:ce:7f:ed:e5:12:
e0:5c:05:56:18:b4:0b:e6:c7:fc:d8:7c:45:53:91:
ad:bd:02:5b:3c:c9:90:51:6e:a8:42:2a:ea:e0:b6:
cd:74:bf:f2:e3:43:66:29:98:82:40:25:1f:ad:bd:
58:44:83:90:91:e7:2b:24:ab:99:e0:50:b3:71:ba:
8b:84:55:5e:d4:0c:ae:9a:bf:bf:3b:8f:94:75:b8:
79:54:9f:4d:97:08:4d:11:78:f4:97:b2:74:40:37:
e6:8d:94:58:ed:11:f8:95:8f:2d:97:8c:3a:4a:4b:
86:c3:bd:97:d0:21:fe:ef:47:e8:bc:f3:66:1d:4a:
f7:d4:50:73:4b:2e:93:ef:b3:37:a1:ed:77:8b:61:
58:b7:7a:3c:22:36:10:c9:f5:10:62:15:f0:8e:18:
59:5a:a5:49:43:9b:8d:4e:4f:e5:43:35:f5:57:6b:
86:10:f3:b4:53:91:e2:2a:db:4c:62:22:80:85:56:
2a:86:96:d1:30:d0:e7:12:5a:86:8f:65:f0:b8:1c:
f0:38:4d:0b:67:ae:2e:3b:7a:98:d5:59:2e:d5:51:
6a:31:b4:a1:bb:83:91:8e:99:0a:30:00:ac:96:4e:
5d:d6:e1:0b:65:55:60:1c:f3:fc:9b:44:31:ee:58:
4a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:CB:08:23:8C:3C:BC:BE:62:F7:7A:56:6B:36:AA:AA:60:02:2A:0B
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EssII4w8vL5i93pWazaqqmACKgs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.158.188.0/22
Signature Algorithm: sha256WithRSAEncryption
d2:79:c4:d4:b7:5f:91:b4:98:1b:c5:9a:e2:28:05:a9:a9:87:
ca:f2:b3:28:cd:36:21:3c:9f:fd:a0:77:96:e2:b0:43:71:ec:
26:c5:c3:d6:3e:c3:6a:99:63:a6:cf:2a:b1:54:32:5a:7e:e1:
5e:da:91:7f:a4:fd:0c:09:c5:57:d1:bc:3c:8b:ef:2c:c9:ab:
92:44:c0:17:58:03:00:39:bd:5c:10:fa:b8:ba:7e:38:e4:a4:
d2:05:d8:b0:97:9f:b4:0c:b8:df:19:06:70:3d:70:d1:61:6c:
3a:84:35:38:9d:77:7c:3c:da:62:3a:ec:f2:16:34:2b:29:e1:
49:fd:8d:e6:cc:c8:61:2c:ef:d7:e5:38:2f:90:47:7a:04:78:
37:a7:aa:4c:2c:fe:e0:c7:4c:5f:f5:39:f6:fb:3e:b8:d5:d1:
b1:b7:56:38:2e:bc:09:b2:61:bf:91:e1:9c:04:aa:9b:64:1b:
1d:ae:2d:c6:76:5b:0b:e1:b5:58:02:d0:68:50:91:cb:f4:86:
92:cd:de:92:d5:18:a8:ad:cd:43:26:df:8a:d6:4c:72:03:db:
66:32:46:88:82:06:fb:5f:99:d9:55:c6:cc:93:59:aa:dc:09:
08:65:69:1a:b9:ab:1b:f4:5d:91:40:ca:7f:da:54:a5:91:92:
03:76:81:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:28 2026 by rpki-client