
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/M5cGbuofh2o0kLeqhgi0dDXhXyw.roa
File: M5cGbuofh2o0kLeqhgi0dDXhXyw.roa (raw, json)
Hash identifier: +mFt/aHUHenysZViPpKKK/DJejAfJoxCTiKyeFjYZXo=
Subject key identifier: 33:97:06:6E:EA:1F:87:6A:34:90:B7:AA:86:08:B4:74:35:E1:5F:2C
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1271
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/M5cGbuofh2o0kLeqhgi0dDXhXyw.roa
Signing time: Sun 01 Mar 2026 03:04:33 +0000
ROA not before: Sun 01 Mar 2026 03:04:33 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.78.8.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4721 (0x1271)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 03:04:33 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=3397066EEA1F876A3490B7AA8608B47435E15F2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b2:a2:eb:a4:d9:d2:ec:b1:c2:7f:c1:04:37:
bb:0f:e5:a0:bc:1b:1e:ef:ec:25:a6:e2:9e:ef:1e:
e4:4c:37:04:7c:40:23:11:f0:af:66:b0:35:2e:c2:
b7:c0:39:a9:60:34:28:62:7b:f3:d4:a7:8f:9d:6a:
3c:f3:2f:ef:3a:9b:15:53:8a:de:5d:f3:52:87:42:
e9:81:84:e6:f1:ae:b9:eb:48:7b:d1:ae:86:43:01:
4e:de:39:29:12:f5:98:39:24:13:38:2c:d4:9b:58:
2c:75:2c:27:73:af:a2:d7:50:6c:c0:e5:9f:98:20:
9c:60:c1:23:d9:97:20:bf:97:cc:67:43:be:7e:12:
31:2b:6c:48:50:3d:d9:dc:d7:4f:1e:71:aa:ed:c4:
06:37:4f:9c:99:3c:af:18:1d:d7:24:4a:be:4b:ff:
0d:42:30:30:1f:8e:54:38:0f:a8:ba:01:45:c9:0e:
e3:38:a6:eb:6e:82:35:5c:e5:5f:51:f1:31:f0:89:
03:59:55:74:93:5d:b8:cf:5a:a0:19:1a:3a:cb:83:
dc:5e:a1:e1:13:60:f9:f9:ce:8b:a9:59:ef:66:8b:
3a:d9:1b:c7:c5:ee:0a:40:ad:3a:fa:77:b2:4e:f0:
7d:db:c6:33:a3:0e:72:af:0f:eb:1f:37:0d:d8:f5:
04:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:97:06:6E:EA:1F:87:6A:34:90:B7:AA:86:08:B4:74:35:E1:5F:2C
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/M5cGbuofh2o0kLeqhgi0dDXhXyw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.78.8.0/22
Signature Algorithm: sha256WithRSAEncryption
c7:47:4c:64:bc:97:5c:07:73:aa:7e:a6:d6:b1:4f:5a:e0:bd:
50:7c:3f:08:1b:23:04:77:94:67:8b:fa:ce:86:c3:8f:cf:49:
c2:e0:bd:f2:e2:05:86:7d:74:a8:1b:1c:fb:e7:65:0d:62:67:
3c:87:cf:88:ca:9b:a1:f5:d4:30:2e:d1:8e:ba:f1:b6:b4:66:
88:13:aa:bd:11:48:43:92:d0:6c:7b:7b:99:6c:0f:fa:26:06:
c1:a3:95:0d:b3:e5:b5:80:c7:d5:aa:fa:ae:9b:ea:e4:6a:c3:
f1:d5:35:19:2f:2b:86:d4:aa:76:3f:be:b9:ad:67:53:22:f6:
ba:10:c3:8f:3c:b6:5d:f9:8c:ca:2f:9b:b0:38:3b:11:48:58:
a7:c8:97:b7:f0:c2:de:14:dc:6b:90:8d:0b:07:28:5e:5c:51:
a3:8c:c6:8a:1d:3e:00:78:1a:71:e9:0d:5a:6f:47:4a:6b:12:
b1:1f:e7:c7:f6:5d:d6:75:e6:66:a8:22:3c:a3:d8:cf:e6:e0:
3e:0d:73:31:43:ca:07:9d:fe:cc:85:be:3f:c7:5d:25:47:76:
d1:c4:73:6b:4c:ca:aa:18:cc:f4:6e:42:63:e6:44:70:c8:13:
63:67:34:03:d6:78:1a:da:84:80:2c:64:8d:fc:a8:87:ab:84:
fe:28:ea:1e
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEnEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MzA0MzNaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDMzOTcwNjZFRUExRjg3
NkEzNDkwQjdBQTg2MDhCNDc0MzVFMTVGMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCksqLrpNnS7LHCf8EEN7sP5aC8Gx7v7CWm4p7vHuRMNwR8QCMR
8K9msDUuwrfAOalgNChie/PUp4+dajzzL+86mxVTit5d81KHQumBhObxrrnrSHvR
roZDAU7eOSkS9Zg5JBM4LNSbWCx1LCdzr6LXUGzA5Z+YIJxgwSPZlyC/l8xnQ75+
EjErbEhQPdnc108ecartxAY3T5yZPK8YHdckSr5L/w1CMDAfjlQ4D6i6AUXJDuM4
putugjVc5V9R8THwiQNZVXSTXbjPWqAZGjrLg9xeoeETYPn5zoupWe9mizrZG8fF
7gpArTr6d7JO8H3bxjOjDnKvD+sfNw3Y9QTLAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUM5cGbuofh2o0kLeqhgi0dDXhXywwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L001Y0didW9maDJvMGtMZXFoZ2kwZERYaFh5dy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIBTggwDQYJKoZIhvcNAQELBQADggEBAMdHTGS8l1wHc6p+ptaxT1rgvVB8
PwgbIwR3lGeL+s6Gw4/PScLgvfLiBYZ9dKgbHPvnZQ1iZzyHz4jKm6H11DAu0Y66
8ba0ZogTqr0RSEOS0Gx7e5lsD/omBsGjlQ2z5bWAx9Wq+q6b6uRqw/HVNRkvK4bU
qnY/vrmtZ1Mi9roQw488tl35jMovm7A4OxFIWKfIl7fwwt4U3GuQjQsHKF5cUaOM
xoodPgB4GnHpDVpvR0prErEf58f2XdZ15maoIjyj2M/m4D4NczFDyged/syFvj/H
XSVHdtHEc2tMyqoYzPRuQmPmRHDIE2NnNAPWeBrahIAsZI38qIerhP4o6h4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:17:10 2026 by rpki-client