
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZaAMOzOp1suKKF68vejnpYQBF2s.roa
File: ZaAMOzOp1suKKF68vejnpYQBF2s.roa (raw, json)
Hash identifier: YXf7HCKdPghy1rEs1XBmYDjfocak98xMl2VkHzpomIA=
Subject key identifier: 65:A0:0C:3B:33:A9:D6:CB:8A:28:5E:BC:BD:E8:E7:A5:84:01:17:6B
Certificate issuer: /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial: 92
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZaAMOzOp1suKKF68vejnpYQBF2s.roa
Signing time: Sun 01 Mar 2026 03:32:31 +0000
ROA not before: Sun 01 Mar 2026 03:32:31 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 160.249.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146 (0x92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Validity
Not Before: Mar 1 03:32:31 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=65A00C3B33A9D6CB8A285EBCBDE8E7A58401176B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ca:f3:88:ca:67:ca:04:c6:9a:83:2a:d8:8a:
37:85:c1:92:55:c4:41:d3:28:e7:58:5f:ca:ab:14:
dd:10:ac:8e:d3:1d:44:aa:40:a8:e8:a4:83:49:fb:
b9:be:14:04:1e:6e:3c:2c:40:ba:71:1c:90:3d:ae:
1b:f0:bb:ff:52:98:fa:68:28:52:20:60:4c:05:9c:
6c:57:2e:fd:01:4a:a3:f9:f9:57:26:2c:f3:c4:ea:
f7:a6:be:cf:f4:f9:ad:a5:c5:32:4b:07:85:28:17:
8f:fb:bc:98:0e:05:a2:04:2a:5b:dc:43:d3:56:dd:
3b:5d:85:cc:7f:da:b9:b0:db:18:a7:2e:de:38:70:
a3:a3:a6:3d:c0:b5:6c:70:38:c9:ed:2f:9a:53:a6:
d7:ff:05:35:c1:d2:14:d6:32:a2:54:97:95:fd:8f:
4a:d1:a0:1f:ca:6a:a4:e6:c7:83:82:b1:a0:a1:e2:
3b:2e:51:fe:30:f6:80:0e:b1:7d:af:07:a6:c2:ba:
a9:03:b1:b1:bd:9a:be:46:17:ee:db:1a:2a:58:11:
0a:71:26:5c:b6:8f:35:a6:c0:e3:aa:17:3a:22:5d:
fe:1c:ec:01:97:f3:42:24:76:55:0c:c9:49:e7:43:
cd:e0:68:f5:83:dd:f1:d5:78:4b:18:79:67:0b:41:
8a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A0:0C:3B:33:A9:D6:CB:8A:28:5E:BC:BD:E8:E7:A5:84:01:17:6B
X509v3 Authority Key Identifier:
keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZaAMOzOp1suKKF68vejnpYQBF2s.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.249.128.0/17
Signature Algorithm: sha256WithRSAEncryption
6f:f7:01:0d:14:1a:2f:26:41:ab:24:8a:6c:d2:a7:95:af:4f:
ac:f0:32:66:47:ee:ac:ce:3a:2c:af:c2:00:eb:05:84:54:cf:
28:f7:dd:c6:8c:49:de:0d:3a:c7:51:5e:3d:f1:64:89:70:c8:
86:63:14:ec:97:89:cb:46:28:ee:c2:a0:04:e2:0f:38:1a:9d:
7a:2e:28:df:66:8d:88:3b:06:e5:f0:98:7f:45:28:a9:b3:e2:
60:b1:89:f8:4c:9a:22:bc:2a:83:10:07:41:4e:a8:a1:1f:62:
3e:9a:49:ab:8a:6f:44:c3:37:7d:ab:a0:a9:be:04:ac:cd:b1:
be:56:9b:bb:ed:cd:96:8c:d0:c2:a9:a7:bb:88:02:ae:31:16:
05:c6:d2:7c:04:aa:e0:72:16:36:e6:ff:c3:de:5b:80:4d:a2:
b8:e7:38:e5:d7:0c:04:f4:89:ab:41:71:a1:5a:73:26:e1:87:
4b:94:6f:06:1d:76:54:4a:1e:07:ba:26:46:db:dc:93:91:64:
07:49:59:64:31:aa:e7:4d:e0:9e:08:e5:15:00:1b:25:25:b6:
ce:24:73:f1:1a:3a:e3:e5:1d:b6:3d:be:1b:8c:06:92:37:dc:
01:d4:56:68:7e:e9:5d:0f:9f:74:6d:1e:c9:e5:ea:24:7d:21:
ce:4a:13:d8
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjg5
RTBGMTVDMUUyMEUxOTFBQUYxNzI4OEY2RTMwRkYwMTg2OUE2RTAeFw0yNjAzMDEw
MzMyMzFaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDY1QTAwQzNCMzNBOUQ2
Q0I4QTI4NUVCQ0JERThFN0E1ODQwMTE3NkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZyvOIymfKBMaagyrYijeFwZJVxEHTKOdYX8qrFN0QrI7THUSq
QKjopINJ+7m+FAQebjwsQLpxHJA9rhvwu/9SmPpoKFIgYEwFnGxXLv0BSqP5+Vcm
LPPE6vemvs/0+a2lxTJLB4UoF4/7vJgOBaIEKlvcQ9NW3Ttdhcx/2rmw2xinLt44
cKOjpj3AtWxwOMntL5pTptf/BTXB0hTWMqJUl5X9j0rRoB/KaqTmx4OCsaCh4jsu
Uf4w9oAOsX2vB6bCuqkDsbG9mr5GF+7bGipYEQpxJly2jzWmwOOqFzoiXf4c7AGX
80IkdlUMyUnnQ83gaPWD3fHVeEsYeWcLQYrnAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUZaAMOzOp1suKKF68vejnpYQBF2swHwYDVR0jBBgwFoAU+J4PFcHiDhkarxco
j24w/wGGmm4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS8tSjRQRmNIaURoa2FyeGNvajI0d193R0dtbTQuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8tSjRQRmNIaURoa2FyeGNvajI0d193
R0dtbTQuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L1phQU1Pek9wMXN1S0tGNjh2ZWpucFlRQkYycy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAeg+YAwDQYJKoZIhvcNAQELBQADggEBAG/3AQ0UGi8mQaskimzSp5WvT6zw
MmZH7qzOOiyvwgDrBYRUzyj33caMSd4NOsdRXj3xZIlwyIZjFOyXictGKO7CoATi
DzganXouKN9mjYg7BuXwmH9FKKmz4mCxifhMmiK8KoMQB0FOqKEfYj6aSauKb0TD
N32roKm+BKzNsb5Wm7vtzZaM0MKpp7uIAq4xFgXG0nwEquByFjbm/8PeW4BNorjn
OOXXDAT0iatBcaFacybhh0uUbwYddlRKHge6Jkbb3JORZAdJWWQxqudN4J4I5RUA
GyUlts4kc/EaOuPlHbY9vhuMBpI33AHUVmh+6V0Pn3RtHsnl6iR9Ic5KE9g=
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:19:39 2026 by rpki-client