
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/wsAZyL0k7HMqDMUj1kIo-WQyta4.roa
File: wsAZyL0k7HMqDMUj1kIo-WQyta4.roa (raw, json)
Hash identifier: 2kI3zRv3xswPaJNdqQwT374EQT1ey7/E3hYGTk+5O3Y=
Subject key identifier: C2:C0:19:C8:BD:24:EC:73:2A:0C:C5:23:D6:42:28:F9:64:32:B5:AE
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 11E8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wsAZyL0k7HMqDMUj1kIo-WQyta4.roa
Signing time: Sun 01 Mar 2026 02:44:27 +0000
ROA not before: Sun 01 Mar 2026 02:44:27 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.108.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4584 (0x11e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:44:27 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=C2C019C8BD24EC732A0CC523D64228F96432B5AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f5:18:3b:e1:b6:e3:b9:da:b7:af:b4:4b:1a:
bd:73:f5:a8:71:63:3e:b6:84:7a:09:24:8c:9b:f5:
22:9d:d5:93:2a:97:b3:c7:00:88:84:3d:60:cf:03:
f5:85:55:99:74:d3:44:6c:48:ba:ef:12:23:63:4d:
15:96:ee:16:fa:88:a4:5b:89:f9:7d:b3:67:84:38:
aa:44:bd:a6:84:02:e6:5d:ac:a1:4b:c4:b5:85:f7:
52:68:e1:bc:e7:83:3e:84:07:fd:84:e1:e2:38:98:
59:09:d2:12:a7:5c:96:c8:af:8e:77:2c:4f:9c:c4:
46:d4:e5:75:bd:34:2e:31:39:c6:d8:86:af:90:da:
a0:a5:f5:f0:fb:50:74:f8:0d:13:42:8f:98:5e:75:
23:73:94:3e:0e:00:c4:09:45:a7:17:e4:47:03:d6:
ec:38:ea:5a:50:bd:f2:27:bc:4d:f4:a5:fd:65:38:
17:d8:02:b9:9e:d4:e6:8e:40:2a:e4:62:8a:0e:c7:
6c:79:f0:62:4e:64:2e:4d:64:61:f3:6a:97:e0:83:
d0:24:b6:cc:9a:43:aa:98:3f:ad:9f:66:eb:69:ab:
72:1d:8c:49:02:15:f0:73:b8:27:2d:7d:d8:6a:5a:
8b:ce:a4:aa:93:75:27:10:09:b9:33:7e:8a:b6:37:
2b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C0:19:C8:BD:24:EC:73:2A:0C:C5:23:D6:42:28:F9:64:32:B5:AE
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wsAZyL0k7HMqDMUj1kIo-WQyta4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.108.192.0/19
Signature Algorithm: sha256WithRSAEncryption
e5:97:c2:91:12:26:16:24:dc:06:da:03:2e:07:af:28:c9:e3:
9f:df:3c:5b:7c:89:03:a7:74:a4:39:96:57:dd:61:00:22:46:
94:5d:b3:81:c8:5d:6d:0e:66:8d:33:8b:49:83:41:5c:78:82:
3e:42:dc:83:1e:b3:e9:d5:a5:c7:a4:83:70:a4:4f:43:33:e2:
08:da:fe:77:bf:de:b6:b4:56:c4:58:10:55:0c:f9:2a:0f:81:
a4:e2:59:a5:c5:c5:39:75:f8:45:d0:ad:22:66:0f:39:6b:ee:
fc:7d:7a:ef:8d:60:7f:cd:ff:9d:c0:cd:98:a6:b2:f5:0b:d1:
32:a0:9f:f2:ee:4e:e3:15:b3:ab:3a:8a:5c:bf:83:be:6f:6f:
5b:da:61:4d:17:8d:d5:e0:6e:0e:ba:ba:a5:6c:72:d9:82:34:
79:88:e7:eb:5c:a7:02:59:7f:f9:05:1a:5d:ee:23:ac:ca:7e:
d3:5e:34:42:e5:bc:a8:c6:96:ae:c5:69:82:f7:87:ff:af:d7:
25:6d:3c:d4:91:03:9c:3f:1e:25:b1:97:0d:41:0f:b9:a2:ef:
83:76:a5:30:36:96:7a:6f:7d:57:6a:d9:51:05:66:a3:7a:75:
cf:86:ae:4a:35:63:10:63:d3:f8:c7:d5:10:97:17:63:bb:26:
cd:6d:fc:9d
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEegwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MjQ0MjdaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEMyQzAxOUM4QkQyNEVD
NzMyQTBDQzUyM0Q2NDIyOEY5NjQzMkI1QUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCu9Rg74bbjudq3r7RLGr1z9ahxYz62hHoJJIyb9SKd1ZMql7PH
AIiEPWDPA/WFVZl000RsSLrvEiNjTRWW7hb6iKRbifl9s2eEOKpEvaaEAuZdrKFL
xLWF91Jo4bzngz6EB/2E4eI4mFkJ0hKnXJbIr453LE+cxEbU5XW9NC4xOcbYhq+Q
2qCl9fD7UHT4DRNCj5hedSNzlD4OAMQJRacX5EcD1uw46lpQvfInvE30pf1lOBfY
Arme1OaOQCrkYooOx2x58GJOZC5NZGHzapfgg9AktsyaQ6qYP62fZutpq3IdjEkC
FfBzuCctfdhqWovOpKqTdScQCbkzfoq2Nyu7AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUwsAZyL0k7HMqDMUj1kIo+WQyta4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3dzQVp5TDBrN0hNcURNVWoxa0lvLVdReXRhNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAUxbMAwDQYJKoZIhvcNAQELBQADggEBAOWXwpESJhYk3AbaAy4HryjJ45/f
PFt8iQOndKQ5llfdYQAiRpRds4HIXW0OZo0zi0mDQVx4gj5C3IMes+nVpcekg3Ck
T0Mz4gja/ne/3ra0VsRYEFUM+SoPgaTiWaXFxTl1+EXQrSJmDzlr7vx9eu+NYH/N
/53AzZimsvUL0TKgn/LuTuMVs6s6ily/g75vb1vaYU0XjdXgbg66uqVsctmCNHmI
5+tcpwJZf/kFGl3uI6zKftNeNELlvKjGlq7FaYL3h/+v1yVtPNSRA5w/HiWxlw1B
D7mi74N2pTA2lnpvfVdq2VEFZqN6dc+Grko1YxBj0/jH1RCXF2O7Js1t/J0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:29:37 2026 by rpki-client