
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/8U-QM5lnKPPnN5a6va-VRvte-WI.roa
File: 8U-QM5lnKPPnN5a6va-VRvte-WI.roa (raw, json)
Hash identifier: Vo9AKwez++FLvpuMWKKJr0OcI7iXJIvY8ObBreVFy38=
Subject key identifier: F1:4F:90:33:99:67:28:F3:E7:37:96:BA:BD:AF:95:46:FB:5E:F9:62
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 17F5
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8U-QM5lnKPPnN5a6va-VRvte-WI.roa
Signing time: Tue 31 Mar 2026 08:04:52 +0000
ROA not before: Tue 31 Mar 2026 08:04:52 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 220.159.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6133 (0x17f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:04:52 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=F14F9033996728F3E73796BABDAF9546FB5EF962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:78:27:f7:fc:9d:09:83:3f:8b:e0:a9:12:69:
a9:22:2e:7a:1c:ab:2f:1a:93:9d:c2:6e:e8:58:f2:
53:a4:ad:aa:c9:14:8a:91:fd:77:a5:99:bb:0c:42:
07:b4:ab:c3:a6:a2:70:34:69:c2:f4:2a:91:64:03:
b8:82:f2:53:4c:fd:37:94:fe:e2:cf:31:65:16:74:
ab:74:73:e7:5d:83:52:00:91:fd:3a:a7:12:41:eb:
cb:f6:b2:c1:56:cd:b9:9f:60:78:c8:5a:2f:d5:c7:
a4:17:90:13:d4:51:89:93:70:3a:fd:00:6e:02:58:
1b:5e:fa:91:2a:53:4f:b5:50:9d:23:34:38:b9:76:
78:ea:0d:77:d0:83:3e:27:e5:a4:38:49:1e:00:a8:
65:5e:c1:db:ee:e9:5a:f6:52:2e:2b:fc:1c:b7:c2:
5d:b3:e4:3a:af:b1:d4:df:43:c1:30:47:ca:9c:f9:
28:6c:75:e3:77:45:c6:bc:72:d3:5c:ab:0c:6e:a1:
d6:96:53:58:ee:b1:9b:da:cc:d6:03:99:dd:9d:cc:
bd:d9:2e:04:bb:86:6b:b2:41:9e:61:f2:55:76:cd:
bc:61:fb:be:5b:00:93:3d:3a:52:cf:f7:68:c9:ea:
38:2b:f4:88:f9:8b:3f:b2:9c:da:17:32:13:2a:ca:
ec:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4F:90:33:99:67:28:F3:E7:37:96:BA:BD:AF:95:46:FB:5E:F9:62
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8U-QM5lnKPPnN5a6va-VRvte-WI.roa
sbgp-ipAddrBlock: critical
IPv4:
220.159.250.0/24
Signature Algorithm: sha256WithRSAEncryption
77:ce:f3:e2:65:b7:9b:ef:56:7a:c4:ed:86:9b:c5:7f:69:3d:
20:df:64:d5:54:f0:f7:00:fe:a0:15:02:26:30:f9:26:ed:bb:
13:6c:42:14:38:a5:99:63:ee:57:84:30:7f:be:74:b5:49:48:
95:cf:58:a8:72:04:cc:03:1c:0a:da:90:9b:01:43:6b:8c:39:
4b:00:c9:dc:0c:38:9a:cd:dc:d4:58:5d:61:a0:cc:26:bc:75:
d6:cb:75:10:4e:d2:99:c0:cd:1f:a6:62:27:e7:9b:36:5b:31:
14:3f:6c:1c:a5:34:5b:8b:7e:e5:4d:8c:6d:95:83:f3:23:4e:
f3:44:a0:6c:07:1b:e1:b6:97:6c:7c:84:a3:f5:f6:7d:ba:a3:
6a:9a:83:99:77:ac:f4:37:68:58:71:0c:5c:65:48:18:e3:bd:
33:98:e5:74:52:e4:45:e2:ca:2e:d6:12:28:19:a5:22:a9:34:
b7:6c:ab:ca:2b:05:79:f2:a6:79:75:80:7b:a1:be:c6:10:29:
08:2d:47:6b:03:0c:cf:40:e0:5c:45:a6:7f:9a:d6:88:49:77:
c9:1a:af:81:e4:b0:00:5e:2e:90:52:c0:1b:ef:a2:4c:ca:a2:
40:2c:65:39:77:38:00:ee:7f:4d:4e:26:b4:24:88:f1:8b:c0:
e0:0f:76:0b
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICF/UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODA0NTJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEYxNEY5MDMzOTk2NzI4
RjNFNzM3OTZCQUJEQUY5NTQ2RkI1RUY5NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDUeCf3/J0Jgz+L4KkSaakiLnocqy8ak53CbuhY8lOkrarJFIqR
/XelmbsMQge0q8OmonA0acL0KpFkA7iC8lNM/TeU/uLPMWUWdKt0c+ddg1IAkf06
pxJB68v2ssFWzbmfYHjIWi/Vx6QXkBPUUYmTcDr9AG4CWBte+pEqU0+1UJ0jNDi5
dnjqDXfQgz4n5aQ4SR4AqGVewdvu6Vr2Ui4r/By3wl2z5DqvsdTfQ8EwR8qc+Shs
deN3Rca8ctNcqwxuodaWU1jusZvazNYDmd2dzL3ZLgS7hmuyQZ5h8lV2zbxh+75b
AJM9OlLP92jJ6jgr9Ij5iz+ynNoXMhMqyuxpAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU8U+QM5lnKPPnN5a6va+VRvte+WIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5LzhVLVFNNWxuS1BQbk41YTZ2YS1WUnZ0ZS1XSS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADcn/owDQYJKoZIhvcNAQELBQADggEB
AHfO8+Jlt5vvVnrE7YabxX9pPSDfZNVU8PcA/qAVAiYw+SbtuxNsQhQ4pZlj7leE
MH++dLVJSJXPWKhyBMwDHArakJsBQ2uMOUsAydwMOJrN3NRYXWGgzCa8ddbLdRBO
0pnAzR+mYifnmzZbMRQ/bBylNFuLfuVNjG2Vg/MjTvNEoGwHG+G2l2x8hKP19n26
o2qag5l3rPQ3aFhxDFxlSBjjvTOY5XRS5EXiyi7WEigZpSKpNLdsq8orBXnypnl1
gHuhvsYQKQgtR2sDDM9A4FxFpn+a1ohJd8kar4HksABeLpBSwBvvokzKokAsZTl3
OADuf01OJrQkiPGLwOAPdgs=
-----END CERTIFICATE-----
Generated at Tue Apr 7 21:01:09 2026 by rpki-client