
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/TnclhBYnGNHJxIzU_9afERiXxQY.roa
File: TnclhBYnGNHJxIzU_9afERiXxQY.roa (raw, json)
Hash identifier: zuuuFm6iGF6c3NJUX7akjTa5L11FGl4SCB2vE8MdnAo=
Subject key identifier: 4E:77:25:84:16:27:18:D1:C9:C4:8C:D4:FF:D6:9F:11:18:97:C5:06
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 12E0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TnclhBYnGNHJxIzU_9afERiXxQY.roa
Signing time: Sun 01 Mar 2026 03:20:38 +0000
ROA not before: Sun 01 Mar 2026 03:20:38 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.78.36.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:24:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4832 (0x12e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 03:20:38 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=4E772584162718D1C9C48CD4FFD69F111897C506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ad:42:e2:2e:ef:ae:28:72:ed:a9:96:11:45:
f7:55:37:1a:8a:6a:1f:a5:01:f2:62:39:1e:18:69:
b7:98:ef:7a:10:70:32:c5:7d:2d:f2:17:cc:11:be:
2c:64:2b:76:f9:98:1f:5f:f1:d4:fa:e4:f0:cf:94:
a2:89:92:1d:17:22:e0:cf:86:f7:91:26:8f:a5:f6:
84:38:6a:6f:6d:b8:d1:39:ab:c8:b1:b9:e3:62:e2:
a4:61:e4:cf:98:e6:9e:a2:28:04:0a:3b:69:b0:7a:
ae:c4:aa:59:02:34:f3:bf:ca:b6:83:ea:3a:bf:dc:
01:9b:b6:09:64:bf:e8:ec:32:3b:97:c1:a3:0b:82:
f7:d7:28:9a:ed:9c:53:5a:21:0c:f7:47:38:d3:e7:
73:21:14:93:b7:07:d1:bf:13:05:a1:26:0e:f8:7c:
0f:7c:1d:2f:0c:b9:85:97:42:fc:c6:16:8e:dc:24:
c2:a7:08:45:a7:cf:cc:58:5b:47:4a:4f:e2:b1:9b:
b4:a5:45:ed:f4:eb:f4:cd:f6:4f:da:83:af:e8:75:
75:f9:ac:3c:06:8a:2e:30:e9:36:9d:f3:7c:1c:ba:
2c:36:5b:82:1a:f4:53:3d:8c:f9:86:37:42:4f:0f:
f2:df:d8:92:c5:08:ee:72:e3:90:8a:f8:6c:74:87:
17:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:77:25:84:16:27:18:D1:C9:C4:8C:D4:FF:D6:9F:11:18:97:C5:06
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TnclhBYnGNHJxIzU_9afERiXxQY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.78.36.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:fd:43:8a:ed:8a:df:cd:65:9b:f2:3e:2a:62:a2:26:47:bb:
cd:53:30:a7:c7:a8:5f:5e:51:c2:f2:cc:02:aa:ef:ad:0e:89:
79:4f:b9:04:fb:a8:48:83:a3:5e:6a:b0:f5:92:00:a2:45:e4:
de:ae:4a:c9:49:3e:15:19:fe:87:6f:69:5a:44:33:20:68:d2:
09:35:9f:7c:a3:e2:5a:fa:41:62:e6:d4:29:01:be:c8:f0:ac:
4b:de:3d:38:93:2e:f3:2c:39:d6:57:5c:6f:13:d5:dc:a2:7e:
4e:1d:be:70:a9:18:ac:b7:08:7a:d4:f5:38:3f:36:9b:a6:ef:
1d:ce:f5:8f:ca:f9:7e:2f:79:c3:3b:dd:d3:96:f4:6d:e6:cc:
42:f4:75:99:ba:79:03:8d:b1:ca:c9:bc:25:73:2b:b9:99:5f:
dd:92:50:e7:92:d8:3f:25:ae:ad:b7:ae:67:8b:20:6a:1c:cb:
80:12:36:af:ee:bc:72:c4:91:20:7d:fb:98:15:45:07:a9:d1:
88:77:0f:2d:5d:84:bd:b7:09:d4:17:ba:cc:16:b9:16:bb:a3:
e0:bc:53:ba:9b:cd:e5:7b:49:50:2d:d2:53:5f:59:ca:c8:be:
cd:85:80:d3:d6:0e:39:bf:5b:8a:48:71:94:f7:6a:54:40:73:
63:54:8c:f5
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEuAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MzIwMzhaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDRFNzcyNTg0MTYyNzE4
RDFDOUM0OENENEZGRDY5RjExMTg5N0M1MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBrULiLu+uKHLtqZYRRfdVNxqKah+lAfJiOR4YabeY73oQcDLF
fS3yF8wRvixkK3b5mB9f8dT65PDPlKKJkh0XIuDPhveRJo+l9oQ4am9tuNE5q8ix
ueNi4qRh5M+Y5p6iKAQKO2mweq7EqlkCNPO/yraD6jq/3AGbtglkv+jsMjuXwaML
gvfXKJrtnFNaIQz3RzjT53MhFJO3B9G/EwWhJg74fA98HS8MuYWXQvzGFo7cJMKn
CEWnz8xYW0dKT+Kxm7SlRe306/TN9k/ag6/odXX5rDwGii4w6Tad83wcuiw2W4Ia
9FM9jPmGN0JPD/Lf2JLFCO5y45CK+Gx0hxcfAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUTnclhBYnGNHJxIzU/9afERiXxQYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L1RuY2xoQlluR05ISnhJelVfOWFmRVJpWHhRWS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIBTiQwDQYJKoZIhvcNAQELBQADggEBAFv9Q4rtit/NZZvyPipioiZHu81T
MKfHqF9eUcLyzAKq760OiXlPuQT7qEiDo15qsPWSAKJF5N6uSslJPhUZ/odvaVpE
MyBo0gk1n3yj4lr6QWLm1CkBvsjwrEvePTiTLvMsOdZXXG8T1dyifk4dvnCpGKy3
CHrU9Tg/Npum7x3O9Y/K+X4vecM73dOW9G3mzEL0dZm6eQONscrJvCVzK7mZX92S
UOeS2D8lrq23rmeLIGocy4ASNq/uvHLEkSB9+5gVRQep0Yh3Dy1dhL23CdQXuswW
uRa7o+C8U7qbzeV7SVAt0lNfWcrIvs2FgNPWDjm/W4pIcZT3alRAc2NUjPU=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:14:53 2026 by rpki-client