
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Q285TkDeJscTKoGDvNIour2Ltp4.roa
File: Q285TkDeJscTKoGDvNIour2Ltp4.roa (raw, json)
Hash identifier: WHNcIdM37vkZHcV7OhiHvAx2qVFEwxqxRkbu7W4yDX4=
Subject key identifier: 43:6F:39:4E:40:DE:26:C7:13:2A:81:83:BC:D2:28:BA:BD:8B:B6:9E
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1717
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Q285TkDeJscTKoGDvNIour2Ltp4.roa
Signing time: Tue 31 Mar 2026 08:03:08 +0000
ROA not before: Tue 31 Mar 2026 08:03:08 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 110.158.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5911 (0x1717)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:03:08 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=436F394E40DE26C7132A8183BCD228BABD8BB69E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:43:f8:9e:73:55:1f:11:94:3b:e4:88:f8:9d:
dc:79:7b:17:49:33:db:9e:f6:f4:56:0d:bc:92:f8:
07:28:ad:a6:20:f8:35:41:b8:8d:13:3a:78:3a:e8:
a2:45:80:3d:58:1b:f6:52:48:0a:3e:06:df:a6:28:
37:21:35:45:bb:78:01:38:06:59:90:3f:3a:1e:fc:
57:bb:cd:43:c4:3e:47:4a:c0:67:0c:54:db:b7:14:
ef:eb:6e:b2:bd:54:b5:9a:bb:1b:cd:53:e5:c7:86:
01:d3:35:c3:3b:98:ad:4b:ff:39:7a:0d:4c:05:42:
ea:46:26:10:58:72:dd:2f:04:87:7d:b1:9a:bd:0b:
31:8a:0e:f3:4b:cc:3b:0e:c5:98:00:3d:20:32:1e:
4e:61:2e:59:98:cd:b3:a0:13:1a:53:2c:24:be:b8:
b1:91:02:82:cd:ae:36:4d:78:33:2d:f2:e5:e5:29:
1e:dd:e5:f3:90:e7:e0:7b:3a:b6:c5:43:4f:04:2d:
37:0f:fd:9e:c6:2c:6a:42:e4:c1:c3:e1:a7:8a:6f:
82:48:c5:f6:09:f4:c2:ef:c8:51:e4:12:1e:9c:67:
46:b5:de:8b:17:8f:4b:88:6c:59:bc:8e:d8:c4:82:
7c:cc:f8:a6:82:c5:dd:e0:73:02:ec:a7:e2:1c:45:
ca:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6F:39:4E:40:DE:26:C7:13:2A:81:83:BC:D2:28:BA:BD:8B:B6:9E
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Q285TkDeJscTKoGDvNIour2Ltp4.roa
sbgp-ipAddrBlock: critical
IPv4:
110.158.224.0/19
Signature Algorithm: sha256WithRSAEncryption
de:c5:45:12:60:50:56:c3:88:5c:35:8a:3f:68:09:fe:81:f3:
e9:bd:4c:f6:31:7c:6d:a6:10:37:ed:ab:5b:fc:5a:58:00:8e:
a0:8d:79:cb:ce:b3:d7:5d:66:9f:06:20:31:a4:24:3e:b8:c1:
c9:51:83:2f:d0:6f:98:b7:ff:1a:b7:15:d3:61:54:69:33:ec:
4a:e0:0b:05:31:66:f3:f3:99:b7:6d:44:d6:ec:3e:66:d2:e2:
36:d3:7d:5c:39:f5:16:ee:e0:29:7c:7c:34:5a:cf:f1:23:db:
e2:6e:40:a1:8d:56:ff:65:4d:a6:7e:5a:78:9f:2d:08:74:24:
87:b9:98:5b:50:a7:cf:38:17:06:08:ed:3f:8b:6f:e4:6a:ba:
cb:df:97:98:0c:6a:df:b5:6f:51:df:f1:02:4e:70:75:4b:b7:
44:95:0f:ca:9e:ac:09:b4:56:6c:76:0c:b6:41:69:12:40:33:
ad:b3:df:c2:ad:14:9e:6a:d7:60:1a:0d:f2:cc:18:14:77:2d:
34:40:4b:f5:07:d5:11:b1:8b:ca:cb:02:b4:aa:c6:22:dc:3f:
a0:6a:c5:3a:a9:0f:cb:c9:a9:cc:00:47:63:30:ea:a6:b7:db:
70:5c:f6:8d:db:f0:ed:71:bd:2e:cc:6d:74:28:6b:d0:fc:5b:
14:be:bd:36
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFxcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODAzMDhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQzNkYzOTRFNDBERTI2
QzcxMzJBODE4M0JDRDIyOEJBQkQ4QkI2OUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8Q/iec1UfEZQ75Ij4ndx5exdJM9ue9vRWDbyS+AcoraYg+DVB
uI0TOng66KJFgD1YG/ZSSAo+Bt+mKDchNUW7eAE4BlmQPzoe/Fe7zUPEPkdKwGcM
VNu3FO/rbrK9VLWauxvNU+XHhgHTNcM7mK1L/zl6DUwFQupGJhBYct0vBId9sZq9
CzGKDvNLzDsOxZgAPSAyHk5hLlmYzbOgExpTLCS+uLGRAoLNrjZNeDMt8uXlKR7d
5fOQ5+B7OrbFQ08ELTcP/Z7GLGpC5MHD4aeKb4JIxfYJ9MLvyFHkEh6cZ0a13osX
j0uIbFm8jtjEgnzM+KaCxd3gcwLsp+IcRcqNAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUQ285TkDeJscTKoGDvNIour2Ltp4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L1EyODVUa0RlSnNjVEtvR0R2TklvdXIyTHRwNC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAVunuAwDQYJKoZIhvcNAQELBQADggEB
AN7FRRJgUFbDiFw1ij9oCf6B8+m9TPYxfG2mEDftq1v8WlgAjqCNecvOs9ddZp8G
IDGkJD64wclRgy/Qb5i3/xq3FdNhVGkz7ErgCwUxZvPzmbdtRNbsPmbS4jbTfVw5
9Rbu4Cl8fDRaz/Ej2+JuQKGNVv9lTaZ+WnifLQh0JIe5mFtQp884FwYI7T+Lb+Rq
usvfl5gMat+1b1Hf8QJOcHVLt0SVD8qerAm0Vmx2DLZBaRJAM62z38KtFJ5q12Aa
DfLMGBR3LTRAS/UH1RGxi8rLArSqxiLcP6BqxTqpD8vJqcwAR2Mw6qa323Bc9o3b
8O1xvS7MbXQoa9D8WxS+vTY=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:51 2026 by rpki-client