
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ihWscgZw9m344knMoL9f-K5kkrw.roa
File: ihWscgZw9m344knMoL9f-K5kkrw.roa (raw, json)
Hash identifier: vTZIt5L+i0O287/vnLOKC+wwjiiaLP0p7hsfmoqREpI=
Subject key identifier: 8A:15:AC:72:06:70:F6:6D:F8:E2:49:CC:A0:BF:5F:F8:AE:64:92:BC
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 17F2
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ihWscgZw9m344knMoL9f-K5kkrw.roa
Signing time: Tue 31 Mar 2026 08:04:51 +0000
ROA not before: Tue 31 Mar 2026 08:04:51 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 110.158.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6130 (0x17f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:04:51 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=8A15AC720670F66DF8E249CCA0BF5FF8AE6492BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:35:39:9b:63:29:6f:a3:1d:14:94:f1:39:71:
30:96:7e:d6:b1:56:d2:bd:70:02:5b:96:0c:55:4e:
11:40:c5:6e:c5:47:b5:3a:bd:d5:86:f7:69:e2:88:
a2:ac:3e:2a:31:53:07:d1:c5:5f:c9:a4:fc:66:76:
7a:70:dd:a0:df:bf:4e:6b:d6:dd:96:b7:29:da:bb:
ff:de:b7:d8:25:14:e9:ed:da:cc:c1:e0:f9:48:3b:
94:c5:cb:06:dc:a1:94:34:c0:72:4b:01:9e:72:20:
d6:69:22:d3:7c:80:ed:57:1a:d7:d6:8b:0e:5b:58:
b5:f7:23:2d:ba:b0:63:a3:22:62:48:be:33:af:93:
c2:72:6d:f0:51:70:66:9f:15:22:25:7d:f2:c5:4f:
02:bf:4e:31:02:85:44:95:2a:01:44:97:6f:01:74:
bd:34:66:c5:e0:aa:82:b9:9a:27:ad:f7:a1:49:80:
0a:2c:2a:27:a2:40:c1:b9:e4:e5:d4:de:bc:58:86:
13:e8:02:5e:63:f7:c8:a5:1b:e1:9d:01:d8:73:47:
a6:0b:7d:60:e1:7d:47:5b:9b:68:b3:60:68:1e:69:
a3:8b:44:c9:76:88:29:0d:07:b8:78:39:dc:4e:4c:
3b:bc:20:5c:06:84:9b:98:da:95:9d:c3:e1:04:e2:
fe:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:15:AC:72:06:70:F6:6D:F8:E2:49:CC:A0:BF:5F:F8:AE:64:92:BC
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ihWscgZw9m344knMoL9f-K5kkrw.roa
sbgp-ipAddrBlock: critical
IPv4:
110.158.129.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:23:64:c7:23:2e:e2:b5:f9:da:46:60:9b:5b:d1:d4:7c:fd:
26:4c:70:7c:14:62:59:91:be:fe:c9:ef:ec:35:4d:db:08:c6:
99:05:28:a9:73:59:01:27:1b:85:24:02:c6:68:ae:8d:f3:6d:
4a:c2:f7:4c:f6:6d:ff:78:b6:f1:f8:fd:69:d7:b4:f2:98:f6:
d0:a7:1a:8e:bc:b6:e1:38:78:c6:b1:ee:8b:d7:95:c6:de:7a:
d7:dd:95:d2:48:af:c1:0a:72:21:23:12:85:21:2b:cc:7e:aa:
85:ac:0a:71:46:38:1a:6f:82:06:3f:f4:26:66:ca:79:0a:80:
1b:34:31:ca:89:6f:22:f3:91:40:e8:fe:7c:03:89:28:66:31:
48:0c:3e:51:45:7c:9a:fd:1e:10:89:64:c6:e1:4e:64:93:01:
b8:df:33:c1:4b:ed:35:76:c0:e0:66:d8:3c:94:56:e7:49:63:
85:d7:30:55:59:09:4b:3d:69:ef:b7:2b:65:81:f1:f5:39:ec:
93:57:53:ee:2a:f7:c2:40:3f:fa:76:59:f5:5d:51:0a:9f:88:
c2:c1:fd:ec:4a:7a:06:6b:d6:f2:75:1f:9f:a2:52:95:59:66:
b7:8d:56:1a:02:64:7b:c9:1c:fa:bf:c8:b9:f3:01:76:c6:92:
10:71:4b:7b
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICF/IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODA0NTFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDhBMTVBQzcyMDY3MEY2
NkRGOEUyNDlDQ0EwQkY1RkY4QUU2NDkyQkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2NTmbYylvox0UlPE5cTCWftaxVtK9cAJblgxVThFAxW7FR7U6
vdWG92niiKKsPioxUwfRxV/JpPxmdnpw3aDfv05r1t2Wtynau//et9glFOnt2szB
4PlIO5TFywbcoZQ0wHJLAZ5yINZpItN8gO1XGtfWiw5bWLX3Iy26sGOjImJIvjOv
k8JybfBRcGafFSIlffLFTwK/TjEChUSVKgFEl28BdL00ZsXgqoK5miet96FJgAos
KieiQMG55OXU3rxYhhPoAl5j98ilG+GdAdhzR6YLfWDhfUdbm2izYGgeaaOLRMl2
iCkNB7h4OdxOTDu8IFwGhJuY2pWdw+EE4v4fAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUihWscgZw9m344knMoL9f+K5kkrwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L2loV3NjZ1p3OW0zNDRrbk1vTDlmLUs1a2tydy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABunoEwDQYJKoZIhvcNAQELBQADggEB
AJwjZMcjLuK1+dpGYJtb0dR8/SZMcHwUYlmRvv7J7+w1TdsIxpkFKKlzWQEnG4Uk
AsZoro3zbUrC90z2bf94tvH4/WnXtPKY9tCnGo68tuE4eMax7ovXlcbeetfdldJI
r8EKciEjEoUhK8x+qoWsCnFGOBpvggY/9CZmynkKgBs0McqJbyLzkUDo/nwDiShm
MUgMPlFFfJr9HhCJZMbhTmSTAbjfM8FL7TV2wOBm2DyUVudJY4XXMFVZCUs9ae+3
K2WB8fU57JNXU+4q98JAP/p2WfVdUQqfiMLB/exKegZr1vJ1H5+iUpVZZreNVhoC
ZHvJHPq/yLnzAXbGkhBxS3s=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:19 2026 by rpki-client