
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/rSEhAiQaqgExBCfQTlHSHqT1J2E.roa
File: rSEhAiQaqgExBCfQTlHSHqT1J2E.roa (raw, json)
Hash identifier: DqnqvaHaws/z7FDYs1qM2uyUVQ5DbYQar7LSo/A22fY=
Subject key identifier: AD:21:21:02:24:1A:AA:01:31:04:27:D0:4E:51:D2:1E:A4:F5:27:61
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 133E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rSEhAiQaqgExBCfQTlHSHqT1J2E.roa
Signing time: Sun 01 Mar 2026 03:40:35 +0000
ROA not before: Sun 01 Mar 2026 03:40:35 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 183.74.8.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4926 (0x133e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 03:40:35 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=AD212102241AAA01310427D04E51D21EA4F52761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:80:4e:90:dc:8b:f9:17:01:c9:da:1f:1b:ee:
a9:71:40:20:0a:6e:3e:1d:7c:0a:bc:2c:3c:3b:07:
74:ee:c2:6c:12:df:90:a6:c6:7e:89:e4:09:1e:74:
b3:42:9f:28:4a:9c:2d:41:46:4e:8f:e0:5c:d6:e6:
e6:21:db:c4:38:df:aa:15:d2:24:b6:bb:2a:c2:9f:
bd:67:cf:6c:ae:8a:5c:8b:af:a9:ff:c1:fc:e0:4d:
d7:a4:05:49:0f:74:b4:58:a0:d2:99:2b:43:b3:dd:
e8:28:0b:31:67:ce:c7:67:f5:49:74:c9:c3:e3:3d:
b9:0a:28:87:96:bb:25:76:54:7c:38:f8:3f:48:ba:
5c:3f:02:da:74:2b:b1:40:aa:d1:9b:9c:ab:d4:c0:
fb:8f:2a:11:23:02:06:fa:06:67:20:53:38:1d:bd:
d3:c6:d8:ca:73:18:37:75:64:25:79:ce:07:5b:68:
66:3b:fc:c1:70:ef:9c:bd:af:76:9b:c0:b9:9f:50:
69:74:91:f6:7a:92:e1:b7:6d:e6:90:e7:78:a5:be:
bb:57:d2:b7:81:6d:32:90:29:65:06:ba:5c:5a:26:
f0:3f:d3:bd:40:01:c5:13:c6:c1:82:2b:a0:23:34:
d0:0c:9e:d3:5b:34:d8:e4:4d:da:9c:93:d5:26:ac:
1e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:21:21:02:24:1A:AA:01:31:04:27:D0:4E:51:D2:1E:A4:F5:27:61
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rSEhAiQaqgExBCfQTlHSHqT1J2E.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
183.74.8.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:28:fd:30:c9:27:f4:d7:ff:ab:58:6a:24:d2:f3:3b:0a:dc:
a6:d6:68:d3:f4:66:5f:dd:10:98:75:7b:a6:6e:b0:a8:4e:de:
54:b6:e2:97:1d:a7:f3:f6:bf:f9:c0:a3:3c:da:9c:74:fa:ca:
fc:fd:eb:65:39:2b:eb:a7:71:2d:20:9c:fd:0f:85:2c:9d:24:
fa:d6:df:b6:19:45:07:2c:1b:9d:3a:3d:07:99:20:0e:bb:fc:
fd:89:14:8e:d0:e2:66:28:ea:3c:d7:32:7a:29:6d:9b:50:86:
01:a4:40:37:aa:ca:16:98:1d:59:99:84:97:7f:c0:ce:18:98:
85:bb:a3:b4:75:56:43:b4:61:40:d5:ee:4b:65:fe:fa:10:97:
96:09:fc:49:55:ab:e6:05:ce:cf:c6:ae:1c:53:ef:1a:59:29:
5e:c0:b5:9c:9e:f1:7c:3c:a3:a6:86:99:30:37:74:0c:de:8c:
24:1d:51:c7:42:9c:bc:07:8b:99:0e:47:56:7c:89:6c:95:3b:
9a:4d:69:02:a1:85:5f:c1:8e:1f:16:ed:b1:4a:ee:58:1a:34:
0a:db:53:8d:43:d9:62:8c:3a:ec:d1:e6:44:9b:a3:4d:d3:36:
61:1b:4e:cd:ec:c1:23:49:d0:55:2c:d3:66:9d:1f:17:a2:05:
c4:bf:0a:e1
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEz4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MzQwMzVaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFEMjEyMTAyMjQxQUFB
MDEzMTA0MjdEMDRFNTFEMjFFQTRGNTI3NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFgE6Q3Iv5FwHJ2h8b7qlxQCAKbj4dfAq8LDw7B3TuwmwS35Cm
xn6J5AkedLNCnyhKnC1BRk6P4FzW5uYh28Q436oV0iS2uyrCn71nz2yuilyLr6n/
wfzgTdekBUkPdLRYoNKZK0Oz3egoCzFnzsdn9Ul0ycPjPbkKKIeWuyV2VHw4+D9I
ulw/Atp0K7FAqtGbnKvUwPuPKhEjAgb6BmcgUzgdvdPG2MpzGDd1ZCV5zgdbaGY7
/MFw75y9r3abwLmfUGl0kfZ6kuG3beaQ53ilvrtX0reBbTKQKWUGulxaJvA/071A
AcUTxsGCK6AjNNAMntNbNNjkTdqck9UmrB6/AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUrSEhAiQaqgExBCfQTlHSHqT1J2EwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3JTRWhBaVFhcWdFeEJDZlFUbEhTSHFUMUoyRS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAG3SggwDQYJKoZIhvcNAQELBQADggEBALQo/TDJJ/TX/6tYaiTS8zsK3KbW
aNP0Zl/dEJh1e6ZusKhO3lS24pcdp/P2v/nAozzanHT6yvz962U5K+uncS0gnP0P
hSydJPrW37YZRQcsG506PQeZIA67/P2JFI7Q4mYo6jzXMnopbZtQhgGkQDeqyhaY
HVmZhJd/wM4YmIW7o7R1VkO0YUDV7ktl/voQl5YJ/ElVq+YFzs/GrhxT7xpZKV7A
tZye8Xw8o6aGmTA3dAzejCQdUcdCnLwHi5kOR1Z8iWyVO5pNaQKhhV/Bjh8W7bFK
7lgaNArbU41D2WKMOuzR5kSbo03TNmEbTs3swSNJ0FUs02adHxeiBcS/CuE=
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:04:42 2026 by rpki-client