
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ORXBDTdpM61CiMm12GLAJ4DWVRs.roa
File: ORXBDTdpM61CiMm12GLAJ4DWVRs.roa (raw, json)
Hash identifier: uhvdcM5y7H632ldAACoTDUPMTqWZIV39kftocSeu3ao=
Subject key identifier: 39:15:C1:0D:37:69:33:AD:42:88:C9:B5:D8:62:C0:27:80:D6:55:1B
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 11B8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ORXBDTdpM61CiMm12GLAJ4DWVRs.roa
Signing time: Sun 01 Mar 2026 02:36:24 +0000
ROA not before: Sun 01 Mar 2026 02:36:24 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.78.0.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4536 (0x11b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:36:24 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=3915C10D376933AD4288C9B5D862C02780D6551B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e8:76:60:33:94:9d:4b:51:db:2d:22:48:e1:
c5:06:69:6f:54:41:3b:42:62:a3:ac:60:5f:6a:f9:
38:6b:9e:6b:9a:75:fa:23:df:34:52:c1:12:d1:57:
13:9e:35:8d:4d:9e:28:06:f6:b3:da:09:08:b5:72:
b7:12:6a:a1:f4:d8:05:27:9c:25:2e:55:fd:cc:c3:
be:07:e2:99:e7:bd:5c:ee:d8:2a:88:27:1c:e3:e2:
c5:67:47:bf:2b:7d:87:b2:64:32:20:44:2e:bb:fd:
b5:c8:0b:b6:89:84:b2:37:06:fe:98:56:ea:71:5c:
cc:e7:ac:96:8a:8e:a8:6c:66:d6:e5:d8:a1:19:65:
c1:b8:b9:29:3e:5b:74:9c:29:8a:03:a2:04:f6:53:
56:f3:45:e0:b4:9d:9b:7d:b8:bd:36:66:cd:c7:b1:
09:a3:15:12:18:5f:6c:65:da:c5:5d:aa:eb:ce:e1:
9f:ad:6e:88:13:30:8f:75:ef:c0:1f:37:8e:7f:d9:
e5:b3:59:58:c4:7c:2f:92:af:41:bb:e6:f5:e6:41:
ef:76:f9:75:44:c7:7f:f3:a8:4e:22:64:e4:1e:b7:
dd:78:79:01:cc:79:3d:c6:53:53:f1:02:d1:f2:88:
04:e0:b8:b2:de:67:85:67:71:69:46:ee:b4:b8:18:
42:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:15:C1:0D:37:69:33:AD:42:88:C9:B5:D8:62:C0:27:80:D6:55:1B
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ORXBDTdpM61CiMm12GLAJ4DWVRs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.78.0.0/22
Signature Algorithm: sha256WithRSAEncryption
64:c0:7c:4a:d8:8b:76:c0:a8:9a:c5:49:84:65:1c:e5:c4:d8:
7d:e3:4e:92:51:79:ac:59:dc:3b:e1:56:d3:e0:06:8d:27:92:
82:0b:d8:5b:a9:bf:fd:f8:5e:69:74:e6:e8:f0:70:c2:45:c0:
a0:a4:52:0b:59:f9:54:14:5b:d5:a9:d8:56:db:74:27:51:a2:
49:21:78:d4:a7:f0:38:42:96:fc:30:25:ca:f8:db:23:46:07:
34:40:df:ee:2e:f9:a3:7b:52:64:f6:bd:59:40:dd:23:72:69:
80:67:0c:20:bb:8e:88:cf:99:94:7e:60:be:35:03:33:ac:8c:
73:3e:66:bf:94:79:b5:4c:82:50:f7:91:82:44:21:1e:ba:20:
0a:9c:b9:d4:88:44:7f:b6:e3:98:78:75:5c:10:61:a5:11:5c:
75:c4:8c:c7:9a:d0:b6:26:20:a9:99:53:e9:2a:85:83:36:be:
65:cc:54:0a:92:14:8e:e8:71:7e:69:09:5c:c1:c3:52:84:6e:
a0:c7:1b:4f:75:71:fa:b5:fc:d8:71:7e:76:9e:16:c5:d9:e8:
e4:27:d5:7b:d0:ef:b5:e6:3b:1b:30:9b:04:ef:be:df:fe:9c:
40:82:98:76:2a:9c:f2:d2:39:d2:97:97:a6:e2:af:5e:b8:2d:
c9:6c:f0:80
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEbgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MjM2MjRaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM5MTVDMTBEMzc2OTMz
QUQ0Mjg4QzlCNUQ4NjJDMDI3ODBENjU1MUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC96HZgM5SdS1HbLSJI4cUGaW9UQTtCYqOsYF9q+Thrnmuadfoj
3zRSwRLRVxOeNY1NnigG9rPaCQi1crcSaqH02AUnnCUuVf3Mw74H4pnnvVzu2CqI
Jxzj4sVnR78rfYeyZDIgRC67/bXIC7aJhLI3Bv6YVupxXMznrJaKjqhsZtbl2KEZ
ZcG4uSk+W3ScKYoDogT2U1bzReC0nZt9uL02Zs3HsQmjFRIYX2xl2sVdquvO4Z+t
bogTMI9178AfN45/2eWzWVjEfC+Sr0G75vXmQe92+XVEx3/zqE4iZOQet914eQHM
eT3GU1PxAtHyiATguLLeZ4VncWlG7rS4GEL9AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUORXBDTdpM61CiMm12GLAJ4DWVRswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L09SWEJEVGRwTTYxQ2lNbTEyR0xBSjREV1ZScy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIBTgAwDQYJKoZIhvcNAQELBQADggEBAGTAfErYi3bAqJrFSYRlHOXE2H3j
TpJReaxZ3DvhVtPgBo0nkoIL2Fupv/34Xml05ujwcMJFwKCkUgtZ+VQUW9Wp2Fbb
dCdRokkheNSn8DhClvwwJcr42yNGBzRA3+4u+aN7UmT2vVlA3SNyaYBnDCC7jojP
mZR+YL41AzOsjHM+Zr+UebVMglD3kYJEIR66IAqcudSIRH+245h4dVwQYaURXHXE
jMea0LYmIKmZU+kqhYM2vmXMVAqSFI7ocX5pCVzBw1KEbqDHG091cfq1/Nhxfnae
FsXZ6OQn1XvQ77XmOxswmwTvvt/+nECCmHYqnPLSOdKXl6bir164Lcls8IA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:50:03 2026 by rpki-client