
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/O-mcqY32X-0xqkS-CeH7yB88vB0.roa
File: O-mcqY32X-0xqkS-CeH7yB88vB0.roa (raw, json)
Hash identifier: kbtJLRwxE3ceDbfhAivq3N/Sl+ib0ZLK+dkkqFHkaSE=
Subject key identifier: 3B:E9:9C:A9:8D:F6:5F:ED:31:AA:44:BE:09:E1:FB:C8:1F:3C:BC:1D
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 181F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/O-mcqY32X-0xqkS-CeH7yB88vB0.roa
Signing time: Tue 31 Mar 2026 08:05:19 +0000
ROA not before: Tue 31 Mar 2026 08:05:19 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 220.210.18.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6175 (0x181f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:05:19 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=3BE99CA98DF65FED31AA44BE09E1FBC81F3CBC1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7a:09:70:e8:13:23:45:7f:b1:cc:04:bb:2a:
96:d0:7e:de:7a:79:0d:54:8c:57:8a:70:1b:c4:d0:
16:ae:21:dc:b5:cb:74:7a:cc:ef:81:67:7d:ab:9e:
d2:14:f8:28:26:38:cb:ab:e0:c6:2b:04:29:cf:f7:
c3:9d:01:3c:65:87:5e:b2:e8:dd:a4:0a:f6:de:02:
b7:75:8e:7e:7c:7e:b4:1b:14:41:7c:60:d0:e3:62:
f0:65:cc:f1:db:23:60:14:b6:91:5c:70:94:fb:c8:
3c:3f:85:15:f9:ff:ad:09:47:df:68:19:e7:28:3e:
60:47:f7:f3:23:9b:f4:0a:b9:47:fb:1e:df:f0:93:
cd:66:83:ba:78:e5:c8:0b:77:32:ad:6d:bc:a8:51:
db:ec:98:6b:d1:05:6e:71:79:b8:62:79:d2:cc:12:
7f:7a:8d:3d:36:be:01:04:06:d8:c5:53:a3:7b:e2:
33:1a:44:23:63:4c:e0:16:83:16:c5:aa:d6:1b:78:
a0:e6:56:8c:d7:73:17:54:0f:cc:c2:02:4b:4e:2d:
99:67:ef:41:26:92:4e:9b:e5:3d:4c:1e:2a:03:6c:
78:54:55:50:3f:c5:50:58:57:31:22:cb:d0:3d:a0:
6f:33:cd:f2:8e:bf:f8:1f:40:99:26:9c:39:0f:d4:
f6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E9:9C:A9:8D:F6:5F:ED:31:AA:44:BE:09:E1:FB:C8:1F:3C:BC:1D
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/O-mcqY32X-0xqkS-CeH7yB88vB0.roa
sbgp-ipAddrBlock: critical
IPv4:
220.210.18.0/23
Signature Algorithm: sha256WithRSAEncryption
c6:d3:f4:78:42:6b:90:91:76:7b:c9:a5:91:df:6b:76:cc:3f:
34:54:69:1a:ad:56:62:bc:a1:e5:93:c2:ab:0f:ec:23:f9:65:
8f:4c:30:fd:58:d5:b8:2d:47:ad:32:36:c0:2e:ea:07:8e:45:
16:cd:d8:77:8d:6f:77:5c:5a:25:4c:c2:de:a1:68:65:d2:62:
91:9f:92:1f:00:21:93:29:63:3e:bf:ee:95:6d:11:a5:b4:d4:
7c:4d:43:a0:6d:2e:53:21:15:8f:4a:b0:7f:fa:a5:ec:85:8c:
27:22:49:5b:65:5d:ff:05:a3:79:3b:fd:ee:8f:87:22:c9:9b:
0f:15:53:5e:51:a9:a3:93:16:4b:d4:55:d2:5a:d5:df:54:e0:
60:4e:23:b3:cf:a7:a5:be:b7:94:ac:67:db:ff:41:38:23:b8:
55:2e:3d:98:35:dc:be:9e:99:c3:fd:4c:18:e8:0b:3c:c4:a9:
f1:d3:ba:61:7e:2a:a1:85:05:fa:01:e5:99:04:6b:11:31:cb:
9e:54:4f:47:dd:6c:15:e9:c5:fd:f9:93:44:b3:7b:7d:47:7d:
1a:af:86:e5:92:2d:c2:5b:3c:73:52:4d:e6:e8:dd:25:53:cd:
28:b2:bd:5c:c3:f6:ba:d0:f3:39:dd:da:43:ca:ae:16:70:19:
5d:39:f4:4c
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICGB8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODA1MTlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNCRTk5Q0E5OERGNjVG
RUQzMUFBNDRCRTA5RTFGQkM4MUYzQ0JDMUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDeeglw6BMjRX+xzAS7KpbQft56eQ1UjFeKcBvE0BauIdy1y3R6
zO+BZ32rntIU+CgmOMur4MYrBCnP98OdATxlh16y6N2kCvbeArd1jn58frQbFEF8
YNDjYvBlzPHbI2AUtpFccJT7yDw/hRX5/60JR99oGecoPmBH9/Mjm/QKuUf7Ht/w
k81mg7p45cgLdzKtbbyoUdvsmGvRBW5xebhiedLMEn96jT02vgEEBtjFU6N74jMa
RCNjTOAWgxbFqtYbeKDmVozXcxdUD8zCAktOLZln70Emkk6b5T1MHioDbHhUVVA/
xVBYVzEiy9A9oG8zzfKOv/gfQJkmnDkP1PapAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUO+mcqY32X+0xqkS+CeH7yB88vB0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L08tbWNxWTMyWC0weHFrUy1DZUg3eUI4OHZCMC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHc0hIwDQYJKoZIhvcNAQELBQADggEB
AMbT9HhCa5CRdnvJpZHfa3bMPzRUaRqtVmK8oeWTwqsP7CP5ZY9MMP1Y1bgtR60y
NsAu6geORRbN2HeNb3dcWiVMwt6haGXSYpGfkh8AIZMpYz6/7pVtEaW01HxNQ6Bt
LlMhFY9KsH/6peyFjCciSVtlXf8Fo3k7/e6PhyLJmw8VU15RqaOTFkvUVdJa1d9U
4GBOI7PPp6W+t5SsZ9v/QTgjuFUuPZg13L6emcP9TBjoCzzEqfHTumF+KqGFBfoB
5ZkEaxExy55UT0fdbBXpxf35k0Sze31HfRqvhuWSLcJbPHNSTebo3SVTzSiyvVzD
9rrQ8znd2kPKrhZwGV059Ew=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:39 2026 by rpki-client