
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/1KMSc11ZqPpTYmKs7cSaAbXgMsY.roa
File: 1KMSc11ZqPpTYmKs7cSaAbXgMsY.roa (raw, json)
Hash identifier: 4ZEPyYipywcBdeEc54I9+/lnPDtJ8285dZvtqWYlT6k=
Subject key identifier: D4:A3:12:73:5D:59:A8:FA:53:62:62:AC:ED:C4:9A:01:B5:E0:32:C6
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 157D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1KMSc11ZqPpTYmKs7cSaAbXgMsY.roa
Signing time: Tue 31 Mar 2026 07:59:44 +0000
ROA not before: Tue 31 Mar 2026 07:59:44 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 183.73.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5501 (0x157d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:59:44 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=D4A312735D59A8FA536262ACEDC49A01B5E032C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4b:34:54:37:ef:a9:0d:2d:9e:a0:da:f2:dd:
19:a4:70:c4:db:f9:12:10:38:4b:2a:0f:27:f2:10:
84:89:ef:4e:fe:bd:dd:7e:16:18:84:1c:82:fa:12:
ec:a6:09:de:da:d0:04:19:8a:58:79:09:87:8d:a7:
05:4f:bc:91:5a:74:cb:32:e6:8e:db:70:be:ff:42:
6b:c3:b4:86:4c:99:b5:58:48:a9:e6:6b:a4:6e:8c:
de:02:15:ae:85:d8:54:5c:3a:54:7c:ab:65:fe:f5:
5c:a1:d9:fd:7e:31:16:74:84:09:9b:3f:fc:1a:2a:
f4:fb:53:c1:d7:6f:ba:43:29:3a:71:d7:8b:4c:94:
84:46:c6:1f:bb:e5:69:2f:96:c4:a5:55:ef:e3:bd:
b8:a8:1a:00:47:f8:48:77:b3:1e:07:36:0b:31:a9:
6b:79:14:91:72:e8:a2:56:13:31:ad:b5:50:cc:a2:
1f:c9:cf:a8:00:3d:6f:41:6c:d0:49:30:52:33:a8:
74:76:1b:24:bc:79:92:28:76:d1:e3:d7:dc:43:27:
e5:e3:94:34:68:9b:1a:5a:45:aa:fa:f4:88:9e:46:
2d:8e:e7:d1:a2:4e:a7:1a:1f:23:2f:b7:e0:89:e7:
b9:ad:20:c3:d7:b0:ee:ce:61:96:76:2e:ed:12:85:
fd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A3:12:73:5D:59:A8:FA:53:62:62:AC:ED:C4:9A:01:B5:E0:32:C6
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1KMSc11ZqPpTYmKs7cSaAbXgMsY.roa
sbgp-ipAddrBlock: critical
IPv4:
183.73.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a2:c0:d5:2f:a9:1a:d7:dc:3d:da:d1:af:00:df:a0:39:0e:8d:
33:df:2b:c3:13:f3:d7:cd:34:1e:38:4a:f3:43:26:44:6c:58:
83:d1:01:27:86:08:5e:5d:70:8c:cd:b0:e2:94:99:6d:91:dd:
e7:b8:86:38:e0:32:5e:99:23:b0:ba:4d:a5:5e:cf:9a:f6:b7:
78:70:19:a2:0f:11:e6:9d:77:28:08:95:68:5d:4f:cf:fe:5b:
0e:48:de:5c:56:e8:9f:35:e0:15:c3:5a:aa:0c:e5:98:09:a1:
2b:82:a7:c2:98:61:72:61:8e:3c:1f:b5:d2:c7:a2:3c:a1:d2:
97:2d:ed:d2:e4:f9:50:f3:7c:af:6e:de:c7:34:a5:54:10:d1:
1f:09:98:73:32:d6:3a:13:51:9d:cf:ce:5d:bd:54:df:11:a3:
62:f1:33:fe:e9:c2:da:2c:8e:08:1f:59:67:52:88:20:61:2c:
0d:9b:0c:d6:c5:ee:b8:6e:e7:05:84:6c:8a:f2:9a:47:da:8c:
a2:f5:f8:bc:c7:52:06:49:31:c9:60:c9:d0:92:ff:0b:d7:2c:
44:44:63:75:f1:f1:3b:8e:b2:e8:e9:88:b4:0a:3a:ea:3c:32:
5b:57:bd:1a:66:a1:87:bd:10:3f:44:1b:ca:27:eb:5b:6b:e2:
97:66:2f:b0
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFX0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
NzU5NDRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ0QTMxMjczNUQ1OUE4
RkE1MzYyNjJBQ0VEQzQ5QTAxQjVFMDMyQzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPSzRUN++pDS2eoNry3RmkcMTb+RIQOEsqDyfyEISJ707+vd1+
FhiEHIL6EuymCd7a0AQZilh5CYeNpwVPvJFadMsy5o7bcL7/QmvDtIZMmbVYSKnm
a6RujN4CFa6F2FRcOlR8q2X+9Vyh2f1+MRZ0hAmbP/waKvT7U8HXb7pDKTpx14tM
lIRGxh+75WkvlsSlVe/jvbioGgBH+Eh3sx4HNgsxqWt5FJFy6KJWEzGttVDMoh/J
z6gAPW9BbNBJMFIzqHR2GyS8eZIodtHj19xDJ+XjlDRomxpaRar69IieRi2O59Gi
TqcaHyMvt+CJ57mtIMPXsO7OYZZ2Lu0Shf0nAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU1KMSc11ZqPpTYmKs7cSaAbXgMsYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5LzFLTVNjMTFacVBwVFltS3M3Y1NhQWJYZ01zWS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAa3SUAwDQYJKoZIhvcNAQELBQADggEB
AKLA1S+pGtfcPdrRrwDfoDkOjTPfK8MT89fNNB44SvNDJkRsWIPRASeGCF5dcIzN
sOKUmW2R3ee4hjjgMl6ZI7C6TaVez5r2t3hwGaIPEeaddygIlWhdT8/+Ww5I3lxW
6J814BXDWqoM5ZgJoSuCp8KYYXJhjjwftdLHojyh0pct7dLk+VDzfK9u3sc0pVQQ
0R8JmHMy1joTUZ3Pzl29VN8Ro2LxM/7pwtosjggfWWdSiCBhLA2bDNbF7rhu5wWE
bIrymkfajKL1+LzHUgZJMclgydCS/wvXLEREY3Xx8TuOsujpiLQKOuo8MltXvRpm
oYe9ED9EG8on61tr4pdmL7A=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:35 2026 by rpki-client