
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/9FJbSzEs7kAOl6tivVPK_PREweM.roa
File: 9FJbSzEs7kAOl6tivVPK_PREweM.roa (raw, json)
Hash identifier: 0pOAMCBVeIqILbd5DzLGCyprNsXdtW9ZizyHajwgPZ4=
Subject key identifier: F4:52:5B:4B:31:2C:EE:40:0E:97:AB:62:BD:53:CA:FC:F4:44:C1:E3
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 17F4
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9FJbSzEs7kAOl6tivVPK_PREweM.roa
Signing time: Tue 31 Mar 2026 08:04:52 +0000
ROA not before: Tue 31 Mar 2026 08:04:52 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 110.162.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6132 (0x17f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:04:52 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=F4525B4B312CEE400E97AB62BD53CAFCF444C1E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:14:2d:94:89:3f:5a:b1:5d:57:ad:1d:49:75:
ac:45:83:ec:63:2d:26:97:50:03:f1:e0:bb:19:f8:
cb:61:12:18:ee:b2:89:77:ba:a7:fa:e9:bc:54:43:
75:b7:e2:79:fb:22:52:67:d7:25:45:1c:5a:ec:23:
7b:2d:b1:8c:b2:ec:62:b3:14:36:31:3d:f4:ee:1c:
54:6e:e2:59:2b:b9:7a:b5:a8:ec:29:c4:12:b2:cc:
0f:2e:a0:15:22:d9:22:7c:1d:27:70:34:00:b3:e5:
33:73:92:e8:6f:39:93:8a:a7:17:00:70:d7:c6:84:
88:50:c8:ec:5f:fa:02:ca:ee:7a:28:8a:6b:28:a8:
6c:f1:11:92:91:68:b3:d7:fd:fb:c0:84:5c:56:92:
da:ac:18:26:5a:ee:41:48:cc:08:10:f4:c2:d3:33:
0e:1e:11:36:75:cc:40:a2:74:30:b8:73:98:7e:8b:
62:4d:5e:9a:bd:3a:a6:2b:86:a0:e9:8b:4a:b0:c1:
ee:e6:2b:11:93:c6:fe:08:5d:2e:c0:7b:94:59:46:
b1:6c:23:fb:05:31:f6:6b:bc:01:5f:a0:1b:c3:af:
f5:c4:00:32:da:75:fb:ff:12:30:d2:bf:6a:3f:a6:
44:f3:9a:4a:09:7b:98:33:e5:4a:67:db:40:c4:94:
77:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:52:5B:4B:31:2C:EE:40:0E:97:AB:62:BD:53:CA:FC:F4:44:C1:E3
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9FJbSzEs7kAOl6tivVPK_PREweM.roa
sbgp-ipAddrBlock: critical
IPv4:
110.162.128.0/18
Signature Algorithm: sha256WithRSAEncryption
68:0a:64:87:d0:b0:f8:f9:bd:0c:c2:20:f7:ce:aa:fc:0c:36:
a2:99:5c:1b:5b:55:33:90:e1:38:2a:42:67:5e:d3:a5:9b:8b:
04:87:23:98:fd:d0:b8:41:4b:b7:9f:a3:6e:d3:35:10:b9:13:
b6:73:43:0e:8c:0e:25:59:54:c6:24:31:1e:3f:37:dd:bd:2f:
74:5b:c3:b7:75:90:b3:97:73:f2:3c:da:6b:1c:49:d2:31:a6:
a9:73:02:f7:ad:cd:18:91:4e:86:00:e1:f0:09:a6:09:bf:76:
87:6a:3e:3a:18:2c:b4:f7:89:44:10:35:bb:00:dc:a6:ba:43:
bc:4a:46:d9:c2:e3:bc:75:46:d7:a4:99:82:c1:b7:fb:2c:1e:
f2:cc:4c:2d:b5:e5:4c:af:23:42:3e:91:9f:5c:ab:1a:04:40:
f2:8e:91:de:57:f8:44:58:43:1f:02:31:88:26:3e:db:a5:db:
cc:76:69:ea:85:d1:e9:f6:70:6d:ff:26:33:cb:19:fa:fa:47:
e5:2f:bd:55:a5:d8:37:3a:7c:4c:4e:af:9e:99:b2:ea:65:c3:
b5:57:12:65:84:f2:ff:69:d6:0c:b3:b5:13:37:ca:6c:dd:0d:
1a:89:a7:78:85:be:a0:80:50:25:70:54:fa:cb:34:12:74:3e:
f2:18:4a:60
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICF/QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODA0NTJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEY0NTI1QjRCMzEyQ0VF
NDAwRTk3QUI2MkJENTNDQUZDRjQ0NEMxRTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZFC2UiT9asV1XrR1JdaxFg+xjLSaXUAPx4LsZ+MthEhjusol3
uqf66bxUQ3W34nn7IlJn1yVFHFrsI3stsYyy7GKzFDYxPfTuHFRu4lkruXq1qOwp
xBKyzA8uoBUi2SJ8HSdwNACz5TNzkuhvOZOKpxcAcNfGhIhQyOxf+gLK7nooimso
qGzxEZKRaLPX/fvAhFxWktqsGCZa7kFIzAgQ9MLTMw4eETZ1zECidDC4c5h+i2JN
Xpq9OqYrhqDpi0qwwe7mKxGTxv4IXS7Ae5RZRrFsI/sFMfZrvAFfoBvDr/XEADLa
dfv/EjDSv2o/pkTzmkoJe5gz5Upn20DElHdpAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU9FJbSzEs7kAOl6tivVPK/PREweMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5LzlGSmJTekVzN2tBT2w2dGl2VlBLX1BSRXdlTS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZuooAwDQYJKoZIhvcNAQELBQADggEB
AGgKZIfQsPj5vQzCIPfOqvwMNqKZXBtbVTOQ4TgqQmde06WbiwSHI5j90LhBS7ef
o27TNRC5E7ZzQw6MDiVZVMYkMR4/N929L3Rbw7d1kLOXc/I82mscSdIxpqlzAvet
zRiRToYA4fAJpgm/dodqPjoYLLT3iUQQNbsA3Ka6Q7xKRtnC47x1RtekmYLBt/ss
HvLMTC215UyvI0I+kZ9cqxoEQPKOkd5X+ERYQx8CMYgmPtul28x2aeqF0en2cG3/
JjPLGfr6R+UvvVWl2Dc6fExOr56Zsuplw7VXEmWE8v9p1gyztRM3ymzdDRqJp3iF
vqCAUCVwVPrLNBJ0PvIYSmA=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:39 2026 by rpki-client