
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/18s25iB5RLAMZ0aQRU10Kf9vN7g.roa
File: 18s25iB5RLAMZ0aQRU10Kf9vN7g.roa (raw, json)
Hash identifier: p1eDwsWCDL3481oePXvr+DveYDPKUiA3EsLLvz36sgw=
Subject key identifier: D7:CB:36:E6:20:79:44:B0:0C:67:46:90:45:4D:74:29:FF:6F:37:B8
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1802
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/18s25iB5RLAMZ0aQRU10Kf9vN7g.roa
Signing time: Tue 31 Mar 2026 08:04:58 +0000
ROA not before: Tue 31 Mar 2026 08:04:58 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 220.210.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6146 (0x1802)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:04:58 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=D7CB36E6207944B00C674690454D7429FF6F37B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:56:5f:a8:8c:fc:9d:95:ec:22:95:8e:30:42:
af:dc:80:3a:52:64:dc:88:2f:04:57:b5:bc:c6:6e:
8c:88:32:e2:3c:f5:3e:41:12:04:00:f7:34:61:f8:
0f:fc:8b:0f:7d:a2:b6:6a:58:73:c8:7d:e9:42:ab:
2d:69:b8:d5:eb:03:ca:3a:76:af:6d:0d:59:97:33:
85:cb:54:5a:bc:ee:70:3a:a4:a6:6a:de:ad:9a:e3:
c5:33:4d:3a:2e:1e:4e:04:0e:d8:ad:a2:09:ce:a4:
10:26:43:63:a1:46:88:76:d3:c9:39:83:9e:95:10:
50:46:72:9b:14:d2:c7:fb:64:20:fc:13:b0:91:36:
9c:d5:35:ec:17:a6:94:ef:41:2c:53:b8:b3:5f:42:
59:ec:3b:39:39:aa:89:8c:a6:45:22:6b:ba:91:ea:
33:42:74:cb:a1:29:b4:6e:a4:c7:23:7b:de:d9:d7:
94:a0:87:06:74:8e:1c:97:ce:24:b1:56:6c:d3:ec:
b2:73:de:eb:7e:e7:9c:ce:f0:08:54:d3:da:a9:b7:
70:95:ec:af:a4:8c:39:4f:48:f2:63:1a:67:24:b9:
06:43:e2:ab:bc:55:59:f4:3b:76:c8:16:43:75:33:
48:c1:89:c2:26:7c:2b:1c:97:69:f1:2f:40:02:e2:
27:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CB:36:E6:20:79:44:B0:0C:67:46:90:45:4D:74:29:FF:6F:37:B8
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/18s25iB5RLAMZ0aQRU10Kf9vN7g.roa
sbgp-ipAddrBlock: critical
IPv4:
220.210.28.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:da:dc:1b:06:7e:28:0e:a0:3f:0b:8a:6a:04:07:3e:b4:69:
0c:d4:ac:09:6e:74:95:b0:07:ee:77:84:e3:fd:99:b4:63:1c:
fa:3f:39:2d:fd:2e:ec:0c:bb:1c:de:3f:7f:a7:6f:d5:91:21:
7f:56:a8:b5:65:34:c7:05:90:cb:f7:f2:4e:57:23:f8:f6:43:
10:6c:a0:c1:ac:0f:15:e5:5e:da:13:a5:de:22:49:d3:23:ac:
e4:62:28:94:2c:d7:ac:ab:67:32:90:65:5d:d3:19:55:22:6c:
5d:66:36:75:6c:ff:1b:c3:3a:8d:05:6b:44:09:b7:3e:03:58:
d2:09:55:41:1d:5d:73:aa:35:de:31:72:34:c8:ca:28:8a:37:
41:90:ba:b3:38:28:bb:ea:b9:48:d6:33:d3:13:e4:48:21:e5:
81:0b:65:f5:62:2e:e3:e3:bc:e6:9d:22:fd:0e:42:b0:0d:b0:
e3:c2:4b:ff:03:70:db:60:cb:df:cd:6b:9c:60:7e:6b:c6:58:
1e:ef:f4:46:92:52:4c:d5:7e:35:34:40:2a:88:9b:a6:39:00:
77:e5:cb:12:3e:1c:53:4f:97:3a:68:04:f2:16:22:d9:fb:14:
e3:0c:3c:ad:cc:5f:82:ac:4b:a2:bf:d6:f0:d8:1e:b2:28:ec:
ab:15:91:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:17 2026 by rpki-client