
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/P5n8uL92GFEwdYRgSyzeQYcUzFE.roa
File: P5n8uL92GFEwdYRgSyzeQYcUzFE.roa (raw, json)
Hash identifier: yBIVsX6vCGa1SGAURD2HUXs36cDXKNo+I6gc+0pnJbU=
Subject key identifier: 3F:99:FC:B8:BF:76:18:51:30:75:84:60:4B:2C:DE:41:87:14:CC:51
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 12F4
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/P5n8uL92GFEwdYRgSyzeQYcUzFE.roa
Signing time: Sun 01 Mar 2026 03:27:54 +0000
ROA not before: Sun 01 Mar 2026 03:27:54 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.111.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4852 (0x12f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 03:27:54 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=3F99FCB8BF761851307584604B2CDE418714CC51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0b:ba:e1:61:8e:43:64:2a:45:36:15:ed:a2:
a4:94:dd:19:31:44:80:81:71:13:76:15:9b:78:58:
6c:e0:f3:17:fe:50:f8:3d:bc:1a:47:be:38:b4:d2:
f5:d1:15:cb:d7:fe:b0:f7:7c:e0:70:b1:61:58:3d:
29:2d:8a:4d:11:a0:3f:39:22:d9:ac:a6:32:46:33:
03:72:d2:5b:9e:9b:72:bd:ff:6e:ea:42:39:d2:26:
f2:3f:6b:16:4c:ab:90:0d:ef:10:e2:73:cb:d2:af:
20:68:77:83:aa:a5:c9:ac:ae:94:6b:55:8b:7a:9c:
4f:77:e6:98:31:49:37:ab:33:b9:9c:b9:fa:2c:d6:
28:5e:dc:62:3c:ff:f6:15:e4:7d:60:33:cd:bf:64:
1f:31:46:94:b2:90:93:d9:c7:de:41:9f:d2:35:c5:
1f:31:eb:25:62:37:41:5f:fd:57:b6:a6:2d:3c:0e:
68:90:cc:d9:8a:cb:bb:50:c8:66:67:59:11:4a:2a:
b3:3e:87:63:51:ef:92:18:c0:e3:ac:10:05:ce:cd:
89:2b:f8:b0:da:ac:75:2e:42:c0:be:4a:08:9e:2a:
2e:31:1e:d4:49:a5:53:12:3d:b1:bd:ac:ae:27:f2:
fa:5f:38:90:fb:90:95:a8:57:6b:39:07:17:c0:42:
a4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:99:FC:B8:BF:76:18:51:30:75:84:60:4B:2C:DE:41:87:14:CC:51
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/P5n8uL92GFEwdYRgSyzeQYcUzFE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.111.0.0/16
Signature Algorithm: sha256WithRSAEncryption
30:e7:85:47:8d:55:cc:81:af:63:6d:15:70:cf:62:eb:91:67:
d4:71:de:34:c3:1b:02:45:c8:b2:75:36:cb:84:43:2a:48:e1:
f3:c6:18:74:e1:de:86:fa:66:b3:53:00:3f:34:91:38:d9:df:
84:18:14:9e:c0:68:04:98:92:f0:ba:7f:0e:6b:04:70:0c:c7:
29:87:c3:be:4d:3d:14:95:ff:be:d4:39:b2:42:2a:76:d2:04:
f4:ac:07:8b:39:38:f0:62:0c:bc:bd:f9:e5:c2:18:e5:73:43:
61:7c:88:9b:15:64:95:98:18:9c:e9:8c:f1:f2:83:e4:e8:87:
22:20:f5:16:61:6c:65:a2:f1:45:4c:15:c8:0d:0c:e6:32:56:
8c:a7:9f:5a:fa:ef:4c:5c:83:49:59:a4:7c:38:6f:bb:d8:74:
5c:27:04:7c:95:5f:94:ba:28:51:42:ec:7d:ed:69:f0:d8:71:
a9:d6:2b:7b:66:f7:fa:de:8a:30:e7:3a:56:48:07:41:53:18:
40:9f:1d:c6:f8:b1:52:74:93:5e:bc:2a:fb:09:a8:d3:f1:5a:
5f:1a:0f:03:45:26:fa:91:a3:db:2a:f5:09:be:47:a2:36:f9:
09:e0:d0:94:8c:16:80:67:4e:50:fb:a4:99:60:b6:e4:eb:66:
27:fa:81:ce
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICEvQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MzI3NTRaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNGOTlGQ0I4QkY3NjE4
NTEzMDc1ODQ2MDRCMkNERTQxODcxNENDNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/C7rhYY5DZCpFNhXtoqSU3RkxRICBcRN2FZt4WGzg8xf+UPg9
vBpHvji00vXRFcvX/rD3fOBwsWFYPSktik0RoD85ItmspjJGMwNy0luem3K9/27q
QjnSJvI/axZMq5AN7xDic8vSryBod4OqpcmsrpRrVYt6nE935pgxSTerM7mcufos
1ihe3GI8//YV5H1gM82/ZB8xRpSykJPZx95Bn9I1xR8x6yViN0Ff/Ve2pi08DmiQ
zNmKy7tQyGZnWRFKKrM+h2NR75IYwOOsEAXOzYkr+LDarHUuQsC+SgieKi4xHtRJ
pVMSPbG9rK4n8vpfOJD7kJWoV2s5BxfAQqSJAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUP5n8uL92GFEwdYRgSyzeQYcUzFEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L1A1bjh1TDkyR0ZFd2RZUmdTeXplUVljVXpGRS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAxbzANBgkqhkiG9w0BAQsFAAOCAQEAMOeFR41VzIGvY20VcM9i65Fn1HHe
NMMbAkXIsnU2y4RDKkjh88YYdOHehvpms1MAPzSRONnfhBgUnsBoBJiS8Lp/DmsE
cAzHKYfDvk09FJX/vtQ5skIqdtIE9KwHizk48GIMvL355cIY5XNDYXyImxVklZgY
nOmM8fKD5OiHIiD1FmFsZaLxRUwVyA0M5jJWjKefWvrvTFyDSVmkfDhvu9h0XCcE
fJVflLooUULsfe1p8NhxqdYre2b3+t6KMOc6VkgHQVMYQJ8dxvixUnSTXrwq+wmo
0/FaXxoPA0Um+pGj2yr1Cb5Hojb5CeDQlIwWgGdOUPukmWC25OtmJ/qBzg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:42 2026 by rpki-client