
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/XqZhNFqlJtptTiVneXnUOIP4FjE.roa
File: XqZhNFqlJtptTiVneXnUOIP4FjE.roa (raw, json)
Hash identifier: V98/yow29XirKADE0qJyMU74YuLnVHit2ZFC/SUhRJw=
Subject key identifier: 5E:A6:61:34:5A:A5:26:DA:6D:4E:25:67:79:79:D4:38:83:F8:16:31
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1169
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XqZhNFqlJtptTiVneXnUOIP4FjE.roa
Signing time: Sun 01 Mar 2026 02:21:55 +0000
ROA not before: Sun 01 Mar 2026 02:21:55 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.72.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4457 (0x1169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:21:55 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=5EA661345AA526DA6D4E25677979D43883F81631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:eb:11:2a:a2:31:41:56:a1:b6:bc:f0:fb:47:
2d:97:94:91:79:7c:ef:de:72:4a:da:cb:0b:7d:b8:
97:d8:1f:e6:92:5f:d3:32:54:ed:35:e3:af:73:ec:
be:bf:50:23:33:ed:a6:31:bf:a9:22:23:70:a8:09:
6a:4a:b0:f1:88:ae:f0:ca:88:33:ca:d1:5c:42:0d:
f9:2f:e6:e0:16:32:0c:92:7c:3c:57:eb:7f:8d:c3:
b4:d0:59:c1:8e:e9:56:68:3d:9f:7b:be:cc:b6:d3:
b4:4d:9d:d7:28:8a:aa:d7:5a:bd:98:bf:64:eb:05:
18:0b:6c:d2:94:1e:c5:51:8f:31:94:cd:c2:fa:f9:
29:2f:eb:09:62:42:0c:15:3a:06:eb:ad:f1:75:46:
10:a2:fb:1e:ff:7e:62:64:5f:c7:93:f3:cf:5a:25:
2b:df:8e:5b:94:0e:30:e2:7a:8a:b9:98:0f:d0:31:
93:74:6f:ee:a7:ac:c0:f7:a3:7d:c4:de:af:69:a7:
16:10:3a:0d:00:02:b8:9f:23:46:5b:f8:52:da:59:
f1:c6:35:3e:eb:3d:fa:46:44:fc:3e:d6:46:eb:97:
0c:5d:9a:81:2a:bf:d4:87:1b:f8:f0:51:7b:1e:02:
23:cd:9b:be:d6:df:a5:41:ae:91:f8:96:0f:27:c6:
8c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A6:61:34:5A:A5:26:DA:6D:4E:25:67:79:79:D4:38:83:F8:16:31
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XqZhNFqlJtptTiVneXnUOIP4FjE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.72.192.0/18
Signature Algorithm: sha256WithRSAEncryption
9d:58:29:c8:0a:f3:c1:ad:68:66:4b:f2:63:f0:f0:87:9b:39:
3b:d2:e6:fc:9c:36:6d:29:3f:e4:b8:dc:3e:4a:48:f4:43:ad:
82:95:ad:18:70:25:29:ca:d2:d7:0f:d2:21:7d:c2:ec:ad:ce:
df:87:6a:da:b8:e8:df:80:34:ff:d3:a6:f0:aa:f7:6e:3a:73:
ba:70:b0:75:57:49:41:50:6f:31:c8:84:be:b5:c0:71:f0:ad:
19:63:3d:6f:54:d9:53:5d:4b:0d:50:85:9e:d9:56:32:4f:a4:
96:d7:14:d4:11:0c:f2:dd:d1:d2:38:f4:2b:02:df:eb:c3:a3:
34:bf:26:61:ba:22:92:0a:28:e2:eb:dd:77:52:52:b8:a8:19:
2e:8f:37:12:32:89:39:35:df:24:d0:a3:1a:90:7d:db:4f:ed:
58:51:d1:2d:fd:13:fb:c5:0b:88:37:15:b8:60:4b:7a:e7:aa:
45:c7:5e:4e:55:fa:00:7d:99:26:e2:b4:ee:a1:4c:dc:1b:5c:
49:d4:f3:c3:a9:e1:8a:79:72:1f:9e:d3:ad:82:6e:32:af:0a:
b1:ed:b2:04:ed:81:16:6f:7e:51:24:e3:c4:67:aa:01:68:a8:
bf:74:42:21:21:4a:19:8f:e1:54:6b:b8:4f:ea:b4:10:7d:da:
e2:59:ce:41
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEWkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MjIxNTVaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDVFQTY2MTM0NUFBNTI2
REE2RDRFMjU2Nzc5NzlENDM4ODNGODE2MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC86xEqojFBVqG2vPD7Ry2XlJF5fO/eckraywt9uJfYH+aSX9My
VO01469z7L6/UCMz7aYxv6kiI3CoCWpKsPGIrvDKiDPK0VxCDfkv5uAWMgySfDxX
63+Nw7TQWcGO6VZoPZ97vsy207RNndcoiqrXWr2Yv2TrBRgLbNKUHsVRjzGUzcL6
+Skv6wliQgwVOgbrrfF1RhCi+x7/fmJkX8eT889aJSvfjluUDjDieoq5mA/QMZN0
b+6nrMD3o33E3q9ppxYQOg0AArifI0Zb+FLaWfHGNT7rPfpGRPw+1kbrlwxdmoEq
v9SHG/jwUXseAiPNm77W36VBrpH4lg8nxox/AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUXqZhNFqlJtptTiVneXnUOIP4FjEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L1hxWmhORnFsSnRwdFRpVm5lWG5VT0lQNEZqRS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAYBSMAwDQYJKoZIhvcNAQELBQADggEBAJ1YKcgK88GtaGZL8mPw8IebOTvS
5vycNm0pP+S43D5KSPRDrYKVrRhwJSnK0tcP0iF9wuytzt+Hatq46N+ANP/TpvCq
9246c7pwsHVXSUFQbzHIhL61wHHwrRljPW9U2VNdSw1QhZ7ZVjJPpJbXFNQRDPLd
0dI49CsC3+vDozS/JmG6IpIKKOLr3XdSUrioGS6PNxIyiTk13yTQoxqQfdtP7VhR
0S39E/vFC4g3FbhgS3rnqkXHXk5V+gB9mSbitO6hTNwbXEnU88Op4Yp5ch+e062C
bjKvCrHtsgTtgRZvflEk48RnqgFoqL90QiEhShmP4VRruE/qtBB92uJZzkE=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:42 2026 by rpki-client