
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/mnPgnxv_PLzgdopmeE4YbzWgnSw.roa
File: mnPgnxv_PLzgdopmeE4YbzWgnSw.roa (raw, json)
Hash identifier: rLXftHIf+sWNSBvTa+cNsP+rGwaY+RN3+lf40rcuOao=
Subject key identifier: 9A:73:E0:9F:1B:FF:3C:BC:E0:76:8A:66:78:4E:18:6F:35:A0:9D:2C
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 186F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mnPgnxv_PLzgdopmeE4YbzWgnSw.roa
Signing time: Tue 31 Mar 2026 08:05:58 +0000
ROA not before: Tue 31 Mar 2026 08:05:58 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 27.230.160.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6255 (0x186f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:05:58 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=9A73E09F1BFF3CBCE0768A66784E186F35A09D2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b2:50:4f:f6:84:8b:d4:76:3a:ba:13:eb:a9:
79:8d:04:b8:7b:38:f5:38:8c:5f:cf:50:4d:65:d3:
4b:05:95:c2:24:a8:12:9b:c7:7f:38:4f:b8:78:4e:
e8:fa:10:ad:63:43:f7:a2:fb:7c:45:09:02:15:7e:
c6:60:b2:c5:e2:eb:d2:15:99:b5:72:a4:c7:01:68:
67:70:68:ac:2f:eb:e5:e5:fc:10:ea:d4:19:c7:88:
bb:49:e5:89:06:28:5b:0e:f0:3b:52:b6:54:f8:bf:
50:5e:eb:c7:5b:25:32:1d:3b:63:38:24:e3:21:75:
e4:9c:9f:9e:f8:98:19:6b:f1:9a:9b:34:7b:a9:6a:
cb:9b:82:7c:58:ad:e3:e5:7a:ad:5c:52:1f:69:60:
83:d0:15:9d:f1:db:a3:36:1d:fe:4f:f8:35:f0:e4:
b2:8c:b9:08:e0:2c:cd:ef:d5:83:81:9a:54:41:b8:
3d:0f:ac:44:57:da:ef:b8:b3:ee:95:3b:dd:8f:99:
ba:ee:be:0b:33:d6:18:6d:dd:e6:ac:04:0b:dc:2b:
99:19:ee:6a:41:de:57:53:59:6d:75:1e:7d:41:be:
ee:c2:29:e5:4f:da:d7:15:83:ec:7c:a9:e9:4d:16:
a0:02:f2:00:24:2d:d9:c6:a9:e7:1a:e1:c9:7a:a1:
ff:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:73:E0:9F:1B:FF:3C:BC:E0:76:8A:66:78:4E:18:6F:35:A0:9D:2C
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mnPgnxv_PLzgdopmeE4YbzWgnSw.roa
sbgp-ipAddrBlock: critical
IPv4:
27.230.160.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:0c:93:c7:16:de:7b:5c:ec:cd:25:93:59:df:7b:4d:80:35:
09:cf:6c:3f:7e:70:25:4a:1c:e1:72:e5:4a:e9:96:de:b1:98:
e9:21:5b:63:05:00:44:0b:c6:e1:58:97:03:08:81:9d:16:14:
13:19:15:1c:47:da:83:56:f5:f2:52:e1:bd:ce:c9:58:60:a5:
30:38:7d:38:a8:87:20:13:b2:e9:57:4b:b6:9d:39:93:39:f8:
ce:12:b8:af:0e:79:43:5d:19:fc:2d:44:b6:27:61:65:cf:1f:
68:d4:02:d5:db:91:a9:d3:ca:fe:46:e9:c9:8e:da:c3:47:99:
b5:95:2a:e4:d8:20:c6:26:68:c7:9e:39:64:79:ed:0d:0b:f0:
bf:34:7e:eb:f3:fa:1c:ef:6c:39:82:3f:f7:b3:ea:67:17:a7:
fc:0c:81:ef:4f:16:96:21:8e:ae:5d:8b:0e:37:c7:eb:c8:d5:
c3:3d:ff:ec:c8:fa:bb:f0:cc:29:87:89:5e:3b:27:a9:1e:4e:
5a:5b:fa:73:1b:87:21:b8:34:62:c6:fd:2b:f5:4e:b1:51:dd:
40:0c:b2:ab:30:ec:12:b0:01:32:19:52:1a:ff:57:ea:f5:1c:
45:04:45:11:c6:65:fd:b7:65:65:1d:b9:25:d9:73:a5:2e:8e:
3b:1e:5f:68
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICGG8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODA1NThaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDlBNzNFMDlGMUJGRjND
QkNFMDc2OEE2Njc4NEUxODZGMzVBMDlEMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDtslBP9oSL1HY6uhPrqXmNBLh7OPU4jF/PUE1l00sFlcIkqBKb
x384T7h4Tuj6EK1jQ/ei+3xFCQIVfsZgssXi69IVmbVypMcBaGdwaKwv6+Xl/BDq
1BnHiLtJ5YkGKFsO8DtStlT4v1Be68dbJTIdO2M4JOMhdeScn574mBlr8ZqbNHup
asubgnxYrePleq1cUh9pYIPQFZ3x26M2Hf5P+DXw5LKMuQjgLM3v1YOBmlRBuD0P
rERX2u+4s+6VO92Pmbruvgsz1hht3easBAvcK5kZ7mpB3ldTWW11Hn1Bvu7CKeVP
2tcVg+x8qelNFqAC8gAkLdnGqeca4cl6of/pAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUmnPgnxv/PLzgdopmeE4YbzWgnSwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L21uUGdueHZfUEx6Z2RvcG1lRTRZYnpXZ25Tdy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIb5qAwDQYJKoZIhvcNAQELBQADggEB
AG8Mk8cW3ntc7M0lk1nfe02ANQnPbD9+cCVKHOFy5Urplt6xmOkhW2MFAEQLxuFY
lwMIgZ0WFBMZFRxH2oNW9fJS4b3OyVhgpTA4fTiohyATsulXS7adOZM5+M4SuK8O
eUNdGfwtRLYnYWXPH2jUAtXbkanTyv5G6cmO2sNHmbWVKuTYIMYmaMeeOWR57Q0L
8L80fuvz+hzvbDmCP/ez6mcXp/wMge9PFpYhjq5diw43x+vI1cM9/+zI+rvwzCmH
iV47J6keTlpb+nMbhyG4NGLG/Sv1TrFR3UAMsqsw7BKwATIZUhr/V+r1HEUERRHG
Zf23ZWUduSXZc6UujjseX2g=
-----END CERTIFICATE-----
Generated at Tue Apr 7 21:01:44 2026 by rpki-client