
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/o5nu4hAVn2lZU7beMWopzBjjVWw.roa
File: o5nu4hAVn2lZU7beMWopzBjjVWw.roa (raw, json)
Hash identifier: mZXPoKrChyjHHmEpIKbT0ehDV6rrg0aRNmJ1AsqkKh8=
Subject key identifier: A3:99:EE:E2:10:15:9F:69:59:53:B6:DE:31:6A:29:CC:18:E3:55:6C
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 150B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/o5nu4hAVn2lZU7beMWopzBjjVWw.roa
Signing time: Tue 31 Mar 2026 07:58:49 +0000
ROA not before: Tue 31 Mar 2026 07:58:49 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 219.114.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5387 (0x150b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:58:49 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=A399EEE210159F695953B6DE316A29CC18E3556C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:10:eb:34:de:bd:1d:60:0a:00:51:3a:95:b8:
e8:ef:65:64:b5:04:00:83:50:8f:0f:1c:c8:3b:ad:
be:c2:85:12:de:17:9b:e1:3a:c7:2e:cb:9e:d8:d9:
ee:78:21:77:3d:d3:11:74:c4:2c:15:4d:33:36:af:
d0:98:78:3a:46:96:fc:e2:38:1b:65:96:0b:76:3b:
23:94:86:95:77:ec:95:d2:bc:45:c3:09:7d:99:8d:
b3:63:0a:b4:86:b8:b1:a6:79:1d:12:c5:f9:a0:c7:
40:78:1b:ee:a9:ee:93:b5:02:f7:c5:ea:51:f9:7f:
ec:4e:20:72:b4:6e:35:5b:e4:e5:a8:8a:39:89:e3:
44:75:94:96:ad:12:65:5d:89:fd:ef:cd:5f:17:b4:
1b:58:33:ca:d5:26:f5:30:c9:0d:67:c9:d1:e0:76:
00:f1:c0:4d:2d:6c:af:02:22:96:07:d1:06:fc:10:
e3:d0:c5:24:9b:a4:6e:97:c6:21:14:8d:67:d7:c5:
07:a2:17:da:a0:76:bf:24:bb:ab:45:44:26:a9:f6:
f1:8b:df:d2:d2:c5:99:42:cd:2b:5a:ee:c0:22:64:
11:17:e6:78:ab:ad:64:55:46:0a:45:11:1e:59:4e:
78:a9:f4:c3:b6:b9:02:ba:67:ac:91:f3:6a:6f:5e:
a2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:99:EE:E2:10:15:9F:69:59:53:B6:DE:31:6A:29:CC:18:E3:55:6C
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/o5nu4hAVn2lZU7beMWopzBjjVWw.roa
sbgp-ipAddrBlock: critical
IPv4:
219.114.185.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:5f:bd:bf:b5:9b:82:5a:00:03:b1:bd:4f:25:d7:53:54:0c:
3a:48:c5:eb:a0:9c:49:c4:d3:aa:90:09:aa:94:16:8f:46:71:
69:23:96:3f:f2:3d:da:1c:b4:ef:87:21:29:57:88:bd:7e:a2:
5f:8e:b4:4b:39:15:ae:a0:f3:74:b3:b4:22:c4:8d:1c:71:dc:
39:b2:39:c4:29:bc:7f:d3:45:d8:7b:45:5c:7f:a1:69:d7:6a:
b8:1f:92:cb:92:9b:32:13:e5:db:27:b7:f9:f1:b0:17:7d:75:
b5:2e:fb:8c:1b:4d:e6:00:13:ac:0c:15:ed:7b:41:d6:d5:e3:
62:8b:5d:1e:b8:22:1e:e1:26:6c:ef:4e:09:8c:5c:48:64:a6:
e3:db:aa:cf:d3:7c:9c:2d:27:78:93:3c:70:c0:08:b5:5b:3d:
1e:95:97:71:27:96:e0:21:89:bd:f6:4e:b4:d7:22:0c:3a:20:
f8:b9:48:a8:20:39:80:cd:5b:84:ce:8f:b1:61:b2:bb:0c:44:
b8:cc:5b:9a:0b:56:05:57:9c:4b:72:42:56:eb:8c:3a:40:54:
d2:1a:a7:5a:4a:3d:c0:a2:58:c9:fd:14:89:77:c6:8d:81:af:
15:db:c5:ed:e9:54:dd:fd:2d:8f:3a:3e:f4:82:7a:76:56:2a:
03:8a:59:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:55 2026 by rpki-client