
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/MEi2rBLv9Df3Dfu3RVqO5w_uNOY.roa
File: MEi2rBLv9Df3Dfu3RVqO5w_uNOY.roa (raw, json)
Hash identifier: tc38HA6WDlbTIQuvx0HOBzwKmctsXN9RGCoJRhPTjy4=
Subject key identifier: 30:48:B6:AC:12:EF:F4:37:F7:0D:FB:B7:45:5A:8E:E7:0F:EE:34:E6
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 118E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MEi2rBLv9Df3Dfu3RVqO5w_uNOY.roa
Signing time: Sun 01 Mar 2026 02:27:09 +0000
ROA not before: Sun 01 Mar 2026 02:27:09 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.78.0.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4494 (0x118e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:27:09 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=3048B6AC12EFF437F70DFBB7455A8EE70FEE34E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3e:29:9f:8c:cb:02:92:af:dc:7a:6b:45:aa:
6b:e1:66:20:d4:69:4a:59:d7:37:02:08:74:44:c8:
2f:dd:85:5c:b3:57:32:32:67:1e:0b:0a:41:5b:eb:
b1:b5:f0:64:c8:31:24:99:ba:e4:c5:95:e0:fe:63:
c0:60:67:60:67:6c:71:03:0d:4e:2d:4a:cb:5b:dc:
d2:32:d5:49:30:3b:43:9b:26:67:fa:e1:23:31:de:
ff:24:a9:58:ff:87:c9:cb:04:c7:91:50:27:34:38:
e2:97:8c:45:b0:88:d0:de:bd:95:96:37:71:c2:c2:
49:fe:8d:4d:2d:c8:10:0a:74:88:d8:e9:20:71:09:
f0:c8:1f:95:f7:01:c7:15:1f:80:65:41:a4:93:c3:
9b:e7:9b:6d:68:d7:64:b9:b9:ea:71:41:77:de:61:
98:8d:60:e5:e0:fb:bc:d5:42:d9:b1:8c:39:ec:f0:
d4:f6:ea:df:ff:09:47:b3:6a:f4:e9:50:38:11:df:
08:05:4e:cc:2e:b9:c6:c9:ae:77:d5:c9:de:83:35:
87:09:7e:db:e3:e3:92:63:77:97:2b:d9:b2:3d:f0:
e6:96:49:72:de:fa:26:32:98:29:cb:7d:a0:a2:35:
91:05:5a:fe:83:9b:4d:db:ec:6a:c4:e9:d7:69:ba:
92:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:48:B6:AC:12:EF:F4:37:F7:0D:FB:B7:45:5A:8E:E7:0F:EE:34:E6
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MEi2rBLv9Df3Dfu3RVqO5w_uNOY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.78.0.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:b6:5e:47:47:c0:b6:c1:a8:81:92:29:c1:2f:21:ab:8f:ff:
8c:63:ca:64:40:15:36:83:2d:0f:d8:fa:e4:c2:0c:a9:3c:01:
44:74:ee:db:06:d6:16:d5:e4:f5:04:3d:8d:27:5b:9a:74:43:
12:e1:8f:3d:7d:ad:3c:9f:27:19:6c:1a:87:ec:e0:d2:b3:a6:
77:20:59:bd:c5:11:b7:7d:16:b5:c4:09:33:75:32:d8:c8:84:
e5:42:c7:2f:a3:b0:ee:b3:35:37:02:6e:43:e3:d6:9e:d4:6b:
d4:16:e7:af:b9:20:ef:19:27:33:e1:d9:a8:c2:b4:10:fb:4f:
14:08:b4:cb:bd:7e:ad:79:fc:01:5c:1c:29:a9:a6:62:75:17:
a0:90:30:4d:53:6f:bb:4a:32:a3:52:11:71:02:f5:61:c7:f1:
66:0a:4d:41:9d:ee:04:ff:22:9e:3e:f1:c6:a9:eb:ba:1b:a6:
d1:38:6a:07:34:eb:57:0e:ab:17:7d:3b:69:5b:28:d6:ec:f9:
7f:5b:11:c1:da:75:57:f5:32:cb:9d:a2:1d:53:b3:cf:24:8f:
da:c5:dd:de:c4:dd:ca:93:fd:86:89:68:3b:d4:3a:3d:93:af:
fe:17:82:6c:1b:e7:38:91:54:03:74:cd:9e:f7:a5:3a:e4:9c:
13:fa:a3:3f
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEY4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MjI3MDlaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDMwNDhCNkFDMTJFRkY0
MzdGNzBERkJCNzQ1NUE4RUU3MEZFRTM0RTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJPimfjMsCkq/cemtFqmvhZiDUaUpZ1zcCCHREyC/dhVyzVzIy
Zx4LCkFb67G18GTIMSSZuuTFleD+Y8BgZ2BnbHEDDU4tSstb3NIy1UkwO0ObJmf6
4SMx3v8kqVj/h8nLBMeRUCc0OOKXjEWwiNDevZWWN3HCwkn+jU0tyBAKdIjY6SBx
CfDIH5X3AccVH4BlQaSTw5vnm21o12S5uepxQXfeYZiNYOXg+7zVQtmxjDns8NT2
6t//CUezavTpUDgR3wgFTswuucbJrnfVyd6DNYcJftvj45Jjd5cr2bI98OaWSXLe
+iYymCnLfaCiNZEFWv6Dm03b7GrE6ddpupLPAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUMEi2rBLv9Df3Dfu3RVqO5w/uNOYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L01FaTJyQkx2OURmM0RmdTNSVnFPNXdfdU5PWS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEBTgAwDQYJKoZIhvcNAQELBQADggEBAK62XkdHwLbBqIGSKcEvIauP/4xj
ymRAFTaDLQ/Y+uTCDKk8AUR07tsG1hbV5PUEPY0nW5p0QxLhjz19rTyfJxlsGofs
4NKzpncgWb3FEbd9FrXECTN1MtjIhOVCxy+jsO6zNTcCbkPj1p7Ua9QW56+5IO8Z
JzPh2ajCtBD7TxQItMu9fq15/AFcHCmppmJ1F6CQME1Tb7tKMqNSEXEC9WHH8WYK
TUGd7gT/Ip4+8cap67obptE4agc061cOqxd9O2lbKNbs+X9bEcHadVf1Msudoh1T
s88kj9rF3d7E3cqT/YaJaDvUOj2Tr/4Xgmwb5ziRVAN0zZ73pTrknBP6oz8=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:10 2026 by rpki-client