
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/xDOOhiNtvawHSEe5sgywcOa8YbA.roa
File: xDOOhiNtvawHSEe5sgywcOa8YbA.roa (raw, json)
Hash identifier: B2Uy9UHyhFf/CRjdvbT/NDBHnhdof77pEGunYfccIWQ=
Subject key identifier: C4:33:8E:86:23:6D:BD:AC:07:48:47:B9:B2:0C:B0:70:E6:BC:61:B0
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1521
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xDOOhiNtvawHSEe5sgywcOa8YbA.roa
Signing time: Tue 31 Mar 2026 07:58:58 +0000
ROA not before: Tue 31 Mar 2026 07:58:58 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 110.158.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5409 (0x1521)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:58:58 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=C4338E86236DBDAC074847B9B20CB070E6BC61B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6c:b2:c4:e9:92:86:39:2d:0a:a1:90:7c:66:
4f:86:9a:d2:f3:74:b9:bc:01:46:b8:d9:1e:44:41:
51:01:69:bb:22:9b:da:f5:d4:93:e6:37:87:41:ac:
7a:3e:c3:ea:8a:ca:aa:8d:9f:ea:38:bd:30:3a:3e:
00:a7:71:74:28:97:d7:fa:f7:ab:c8:41:27:f6:02:
a2:da:ea:aa:21:4c:62:62:6a:36:76:75:50:bb:32:
7b:17:44:ab:ab:63:f9:70:b9:47:94:57:92:cc:b3:
7b:87:f4:61:71:ea:68:1c:9d:8a:33:b1:43:c5:2a:
cd:3d:1a:90:dc:3b:ea:42:29:cf:8b:d4:69:63:28:
e0:59:14:31:3a:48:b9:a4:1b:d0:30:b1:f1:0b:c8:
33:fa:40:fe:ed:70:e8:8f:d1:00:48:e3:1f:c4:ef:
71:99:50:94:5e:ee:da:5b:e5:ab:04:52:73:d3:fa:
e6:b3:4f:e0:43:13:81:e8:d9:bf:6a:7a:79:55:6a:
6d:42:e3:81:6c:16:bf:a6:8d:5f:bc:ca:04:91:aa:
7f:e9:50:83:28:14:fd:bd:f2:a2:19:39:31:60:72:
f2:ae:ff:51:27:4c:ba:a7:ad:c0:b6:2d:e4:a6:71:
ef:4a:e6:28:77:c1:3c:ae:df:f2:99:23:38:0e:11:
f0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:33:8E:86:23:6D:BD:AC:07:48:47:B9:B2:0C:B0:70:E6:BC:61:B0
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xDOOhiNtvawHSEe5sgywcOa8YbA.roa
sbgp-ipAddrBlock: critical
IPv4:
110.158.131.0/24
Signature Algorithm: sha256WithRSAEncryption
e4:ef:fb:4d:3f:31:03:0a:8d:37:2c:78:74:3f:91:38:32:fb:
4c:24:ab:ef:20:a8:14:46:51:67:26:7e:90:30:dd:92:0d:01:
de:99:43:11:87:14:40:69:bb:de:bd:11:68:f4:8c:e4:ad:c8:
fb:80:09:7d:6e:cc:82:26:a3:82:a2:ca:f2:55:34:1f:07:e4:
80:de:74:07:2c:21:70:3a:30:5f:b3:be:f0:b5:03:04:7a:a1:
29:07:44:ff:db:04:37:eb:5f:35:90:b3:fd:03:85:12:63:be:
cd:bb:f3:25:1b:bf:2c:ba:21:fc:e9:8a:3d:ae:e6:33:8e:40:
67:d5:2a:c7:f2:ca:7d:ce:f7:73:54:fe:4b:b5:cf:a6:9e:95:
5e:16:b4:85:8f:f2:e2:65:14:78:49:fe:c8:e6:c0:18:a9:6e:
9e:38:b9:5e:45:a8:b1:62:04:dd:33:60:d1:96:c4:a7:a1:77:
7e:d8:b3:ac:2f:26:b9:ad:eb:f8:3a:83:c3:16:4b:47:7c:97:
aa:5f:53:ba:fc:d5:33:f4:de:45:a7:9b:13:a5:d6:4a:9f:2e:
e7:6e:e0:d8:f6:1f:2b:4a:67:84:19:09:29:a2:58:a7:b4:37:
24:a9:e2:d8:a0:6f:44:b9:9b:14:03:70:84:4c:64:f7:2d:9c:
b9:ac:b0:ab
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFSEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
NzU4NThaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM0MzM4RTg2MjM2REJE
QUMwNzQ4NDdCOUIyMENCMDcwRTZCQzYxQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8bLLE6ZKGOS0KoZB8Zk+GmtLzdLm8AUa42R5EQVEBabsim9r1
1JPmN4dBrHo+w+qKyqqNn+o4vTA6PgCncXQol9f696vIQSf2AqLa6qohTGJiajZ2
dVC7MnsXRKurY/lwuUeUV5LMs3uH9GFx6mgcnYozsUPFKs09GpDcO+pCKc+L1Glj
KOBZFDE6SLmkG9AwsfELyDP6QP7tcOiP0QBI4x/E73GZUJRe7tpb5asEUnPT+uaz
T+BDE4Ho2b9qenlVam1C44FsFr+mjV+8ygSRqn/pUIMoFP298qIZOTFgcvKu/1En
TLqnrcC2LeSmce9K5ih3wTyu3/KZIzgOEfD1AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUxDOOhiNtvawHSEe5sgywcOa8YbAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L3hET09oaU50dmF3SFNFZTVzZ3l3Y09hOFliQS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABunoMwDQYJKoZIhvcNAQELBQADggEB
AOTv+00/MQMKjTcseHQ/kTgy+0wkq+8gqBRGUWcmfpAw3ZINAd6ZQxGHFEBpu969
EWj0jOStyPuACX1uzIImo4KiyvJVNB8H5IDedAcsIXA6MF+zvvC1AwR6oSkHRP/b
BDfrXzWQs/0DhRJjvs278yUbvyy6Ifzpij2u5jOOQGfVKsfyyn3O93NU/ku1z6ae
lV4WtIWP8uJlFHhJ/sjmwBipbp44uV5FqLFiBN0zYNGWxKehd37Ys6wvJrmt6/g6
g8MWS0d8l6pfU7r81TP03kWnmxOl1kqfLudu4Nj2HytKZ4QZCSmiWKe0NySp4tig
b0S5mxQDcIRMZPctnLmssKs=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:33 2026 by rpki-client