
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/QSQMb9q-AMFDnew3Z1S1fJpj7iM.roa
File: QSQMb9q-AMFDnew3Z1S1fJpj7iM.roa (raw, json)
Hash identifier: NDlbk3T7hF1amS26kufchT5sJk8cWRICdvqxSUlpSd8=
Subject key identifier: 41:24:0C:6F:DA:BE:00:C1:43:9D:EC:37:67:54:B5:7C:9A:63:EE:23
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 120E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QSQMb9q-AMFDnew3Z1S1fJpj7iM.roa
Signing time: Sun 01 Mar 2026 02:48:38 +0000
ROA not before: Sun 01 Mar 2026 02:48:38 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 183.72.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4622 (0x120e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:48:38 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=41240C6FDABE00C1439DEC376754B57C9A63EE23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:15:68:e0:d5:91:6e:ec:c3:e6:3e:15:50:41:
2e:cd:c7:f2:0b:6f:0a:2d:8f:88:90:6a:6d:51:ec:
19:9e:3c:f4:99:c2:1e:32:b4:89:26:70:ca:3e:9b:
81:8f:1a:78:28:fd:2c:c0:c0:cb:af:a9:3d:72:a0:
0a:06:0d:7b:f0:48:e0:1e:08:b7:ce:58:26:db:44:
0d:50:8c:8f:3f:ee:e3:0d:39:5c:f9:55:9c:70:a7:
af:7f:29:19:15:1b:c9:2e:0b:d0:ff:d5:9a:ab:cf:
dc:aa:65:d1:bf:b9:87:0a:fd:94:76:58:13:d3:9f:
d7:d3:19:57:61:ce:6f:e4:2e:a3:5b:14:f9:d0:be:
b7:c0:5b:2e:30:81:23:45:a2:d7:02:82:17:49:c2:
d7:ee:56:9b:00:6c:f9:fc:19:56:46:c0:d0:70:52:
dd:d0:86:58:4e:d5:57:ea:10:2d:55:ea:bc:62:d3:
40:0b:9a:4e:d6:46:7b:10:38:ed:c6:43:04:7b:a7:
a9:50:53:4d:e7:46:7e:69:84:3a:eb:5d:b1:76:5e:
cb:64:51:9f:01:a0:01:b0:28:3c:d4:a8:78:fa:51:
78:f2:83:af:b8:e6:45:8a:e3:dc:0a:6e:c0:99:b1:
a6:81:96:1e:22:d0:2c:f4:01:54:d8:c6:f8:44:fd:
e7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:24:0C:6F:DA:BE:00:C1:43:9D:EC:37:67:54:B5:7C:9A:63:EE:23
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QSQMb9q-AMFDnew3Z1S1fJpj7iM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
183.72.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a7:f5:35:1b:f3:63:d8:a4:95:a1:df:50:c1:a1:62:d1:38:5f:
43:b9:56:44:20:55:fa:41:fc:b6:af:6a:b9:e4:30:56:96:5c:
08:96:6f:1e:c3:cf:84:cd:19:57:45:9d:8e:2b:2a:fa:10:02:
cc:76:5f:3a:2e:ec:24:e6:37:20:7d:14:e5:c6:d3:5a:ed:fa:
cb:7b:f2:de:63:11:ab:81:6c:fe:7e:80:24:e5:57:61:24:3f:
ff:c9:58:9a:1f:77:75:d2:af:ce:b6:15:51:aa:4d:cb:d7:46:
1a:fa:47:8f:7f:49:95:d0:f2:2e:78:4c:19:b2:13:10:76:b3:
da:33:bd:8f:e3:34:73:4c:5f:f2:20:b9:2d:60:a8:87:5c:d5:
f6:21:63:fd:b4:72:4b:b7:9c:41:8e:0f:e3:2c:17:8e:20:4a:
c3:c8:7e:de:86:6c:f7:4b:28:9d:29:72:1f:82:26:3f:43:24:
d7:3d:07:23:6e:70:17:d9:cc:7c:51:10:76:69:f8:8b:1f:43:
ce:3a:aa:33:7e:30:83:76:cd:b7:2b:68:20:22:0d:19:95:ad:
71:4b:58:30:7c:4d:99:0e:7c:f8:7b:c6:e3:f2:91:00:7f:20:
8d:20:cc:f1:38:0e:c5:a2:59:18:b1:c3:4c:fa:11:e8:71:a7:
a0:02:2c:43
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICEg4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MjQ4MzhaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQxMjQwQzZGREFCRTAw
QzE0MzlERUMzNzY3NTRCNTdDOUE2M0VFMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvFWjg1ZFu7MPmPhVQQS7Nx/ILbwotj4iQam1R7BmePPSZwh4y
tIkmcMo+m4GPGngo/SzAwMuvqT1yoAoGDXvwSOAeCLfOWCbbRA1QjI8/7uMNOVz5
VZxwp69/KRkVG8kuC9D/1Zqrz9yqZdG/uYcK/ZR2WBPTn9fTGVdhzm/kLqNbFPnQ
vrfAWy4wgSNFotcCghdJwtfuVpsAbPn8GVZGwNBwUt3QhlhO1VfqEC1V6rxi00AL
mk7WRnsQOO3GQwR7p6lQU03nRn5phDrrXbF2XstkUZ8BoAGwKDzUqHj6UXjyg6+4
5kWK49wKbsCZsaaBlh4i0Cz0AVTYxvhE/ec/AgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUQSQMb9q+AMFDnew3Z1S1fJpj7iMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L1FTUU1iOXEtQU1GRG5ldzNaMVMxZkpwajdpTS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwC3SDANBgkqhkiG9w0BAQsFAAOCAQEAp/U1G/Nj2KSVod9QwaFi0ThfQ7lW
RCBV+kH8tq9queQwVpZcCJZvHsPPhM0ZV0Wdjisq+hACzHZfOi7sJOY3IH0U5cbT
Wu36y3vy3mMRq4Fs/n6AJOVXYSQ//8lYmh93ddKvzrYVUapNy9dGGvpHj39JldDy
LnhMGbITEHaz2jO9j+M0c0xf8iC5LWCoh1zV9iFj/bRyS7ecQY4P4ywXjiBKw8h+
3oZs90sonSlyH4ImP0Mk1z0HI25wF9nMfFEQdmn4ix9DzjqqM34wg3bNtytoICIN
GZWtcUtYMHxNmQ58+HvG4/KRAH8gjSDM8TgOxaJZGLHDTPoR6HGnoAIsQw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:22:54 2026 by rpki-client