
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/02ll6ZU9MK_KeIZoMSRM9tNdZTQ.roa
File: 02ll6ZU9MK_KeIZoMSRM9tNdZTQ.roa (raw, json)
Hash identifier: RyX4HGRv8vdVs01Dycq0a2g8hLtKQm4ds06cPZQvXdE=
Subject key identifier: D3:69:65:E9:95:3D:30:AF:CA:78:86:68:31:24:4C:F6:D3:5D:65:34
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1781
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/02ll6ZU9MK_KeIZoMSRM9tNdZTQ.roa
Signing time: Tue 31 Mar 2026 08:03:57 +0000
ROA not before: Tue 31 Mar 2026 08:03:57 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 220.159.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6017 (0x1781)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:03:57 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=D36965E9953D30AFCA78866831244CF6D35D6534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:eb:a4:85:44:2d:53:53:e2:16:cf:34:cb:9e:
93:e8:2b:83:b1:7e:f9:b6:05:56:6c:dc:d7:32:5c:
90:ec:e6:58:c9:14:e2:7e:b1:01:5e:7d:61:dd:16:
48:ba:22:21:ef:a0:78:3a:ff:6e:53:55:ac:3e:0e:
73:b6:cf:74:87:46:26:61:f0:81:20:e5:47:c7:37:
f8:9b:9a:63:d6:45:53:72:fb:18:ab:15:27:89:47:
2e:f9:11:d0:c6:78:cf:38:52:f5:e4:a4:3a:4f:41:
17:20:4e:82:2a:f3:08:bf:0d:c9:33:3a:37:4b:f4:
16:08:d5:09:59:69:2f:5b:82:ad:4d:ca:fe:ee:1c:
32:b1:e2:42:f8:3f:da:74:66:50:4e:a0:e0:5f:07:
e9:87:6d:27:12:1f:95:64:2e:c2:48:67:a0:de:ae:
df:f2:f0:a7:b3:59:41:66:03:91:30:7b:71:83:a0:
0e:58:33:8a:84:b5:85:17:89:a8:ca:4a:a6:26:25:
fd:ab:2d:f8:41:47:00:d6:37:5f:99:88:aa:06:2c:
99:ca:2c:13:81:50:b6:a5:3b:a8:1d:9f:fc:94:e1:
88:ca:7f:1f:57:22:e7:ea:03:8e:b9:f3:4f:d1:17:
9a:dc:8e:d0:a7:da:12:9a:30:8c:43:73:06:5e:eb:
66:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:69:65:E9:95:3D:30:AF:CA:78:86:68:31:24:4C:F6:D3:5D:65:34
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/02ll6ZU9MK_KeIZoMSRM9tNdZTQ.roa
sbgp-ipAddrBlock: critical
IPv4:
220.159.64.0/19
Signature Algorithm: sha256WithRSAEncryption
0e:40:91:62:3e:45:84:1d:28:29:50:9f:fb:46:f9:a7:c0:ab:
ad:54:37:dd:b5:8c:71:bd:5f:a1:ca:c5:5c:39:59:2e:f4:52:
43:da:87:6f:bc:37:8a:41:80:e2:88:27:77:08:3e:3e:31:63:
5c:13:58:c6:3d:cd:7f:db:3f:b5:5c:ee:a3:f1:2c:2c:45:ae:
e9:cf:5c:fd:54:fd:c8:ed:e8:52:c0:a6:0f:aa:eb:e1:d3:52:
4c:a4:aa:cf:ff:8e:db:2b:45:4c:ca:af:a2:58:28:2a:91:92:
e5:9c:0f:c4:49:3c:55:da:2d:21:98:a2:aa:7e:84:5f:5b:1a:
d8:ca:28:1e:10:5c:45:08:df:c9:e1:b3:fb:27:e6:01:6e:b5:
aa:33:1e:ea:ba:ac:70:ec:a0:23:b4:98:33:38:a3:a7:17:e8:
b7:20:3d:22:0d:7b:d0:b2:27:c8:01:7d:eb:97:9f:4f:17:5f:
a2:0c:ed:ea:c9:99:5c:29:87:9b:77:a3:80:03:77:89:7b:2b:
29:ef:00:60:1b:78:95:82:a6:f8:85:e5:89:dc:76:13:98:d0:
08:40:9a:e4:e9:7f:9f:3d:03:83:ae:60:fd:b9:59:dd:3b:ed:
2d:80:96:b9:b0:4f:b6:b5:5e:9b:a4:74:1f:6d:22:44:00:a4:
22:a8:99:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:39 2026 by rpki-client