
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/1zOmVI2fsdmsm1HqzZU4RqRJSxg.roa
File: 1zOmVI2fsdmsm1HqzZU4RqRJSxg.roa (raw, json)
Hash identifier: zDgq26cRMPeOtqPap76e6C4pV0G2uz7Q7ekM8pFC8No=
Subject key identifier: D7:33:A6:54:8D:9F:B1:D9:AC:9B:51:EA:CD:95:38:46:A4:49:4B:18
Certificate issuer: /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial: AE
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1zOmVI2fsdmsm1HqzZU4RqRJSxg.roa
Signing time: Tue 31 Mar 2026 07:55:19 +0000
ROA not before: Tue 31 Mar 2026 07:55:19 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 160.249.80.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174 (0xae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Validity
Not Before: Mar 31 07:55:19 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=D733A6548D9FB1D9AC9B51EACD953846A4494B18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:67:bc:a3:7a:dc:7b:29:c3:44:31:05:69:b0:
85:29:06:80:b5:7f:8f:33:8b:5c:99:d8:87:15:ce:
2d:ea:9c:99:d7:56:40:18:b9:ec:ec:96:ee:1c:8d:
46:e2:8a:9e:f8:eb:4a:21:62:7b:82:5b:94:87:6a:
d8:6f:88:5f:f7:55:70:ed:5c:31:b9:21:38:3a:81:
8b:b2:aa:6b:b7:55:c7:dd:1e:75:2a:72:39:dd:37:
6e:6e:28:c8:11:af:ba:e9:69:f0:e9:23:f7:a4:99:
0f:a0:0a:e2:0a:dc:6f:e5:59:fb:e4:89:38:ca:07:
28:50:97:74:28:52:64:57:a8:42:93:06:14:e4:71:
4e:e2:f7:cf:09:0b:71:79:ee:10:be:73:21:14:ed:
e9:99:d9:4b:31:c0:29:37:39:ce:d2:37:50:dd:19:
a3:13:5a:5e:20:23:68:82:16:78:fa:f7:50:54:5b:
a0:a5:1c:b7:97:ae:49:d3:d2:28:60:a8:3a:be:c9:
9d:d0:aa:e3:9b:7d:68:28:7e:62:4c:48:1c:81:0d:
9f:39:4a:15:c2:03:0d:2c:c6:e0:6e:36:d6:eb:2f:
80:f5:7a:92:58:f6:4b:06:d8:88:f6:71:52:a0:61:
85:19:01:b1:29:98:56:b8:c1:b8:28:11:7e:5e:4d:
58:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:33:A6:54:8D:9F:B1:D9:AC:9B:51:EA:CD:95:38:46:A4:49:4B:18
X509v3 Authority Key Identifier:
keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1zOmVI2fsdmsm1HqzZU4RqRJSxg.roa
sbgp-ipAddrBlock: critical
IPv4:
160.249.80.0/21
Signature Algorithm: sha256WithRSAEncryption
a3:a8:c0:e2:fe:27:0b:e3:9a:3b:e3:57:b9:49:11:2a:f1:dd:
27:3f:d6:a8:1b:99:06:d8:ff:25:5a:bf:07:e2:c3:00:8f:68:
b3:cd:ab:e0:b0:2f:78:df:f3:89:53:f4:b6:5b:8e:93:6b:68:
be:76:9c:26:58:11:ab:4a:63:53:d0:43:18:09:aa:02:c3:2e:
a7:78:8a:91:8c:34:59:4e:d0:16:58:ba:1f:5e:2b:65:c6:49:
be:91:dd:6e:4f:52:43:89:b6:3a:ff:95:9d:73:9b:8c:0c:40:
8f:e8:d8:b6:71:a0:85:21:1e:f7:d5:e8:04:19:bc:f3:9a:51:
7c:b9:9b:3f:f7:d9:c2:b2:98:f1:fc:29:96:6c:ac:82:04:df:
b0:80:0b:2d:e5:15:e3:07:05:be:3b:e0:ca:d3:28:0e:be:0c:
87:d4:01:66:e7:7a:cb:e1:5b:17:1e:88:69:0b:73:ed:c7:52:
e8:4e:78:7e:0a:f5:65:56:f7:7f:a9:d9:c7:eb:3e:4b:59:24:
b1:cb:83:3b:4a:ef:33:e9:47:26:26:ad:5a:14:9c:f1:0b:10:
4a:41:e3:ef:22:df:a6:24:b0:5b:67:71:55:86:a4:46:5a:25:
7d:17:f5:6c:f1:61:db:d6:22:46:c3:c8:2c:00:f4:6d:3c:9b:
70:b4:94:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:23:34 2026 by rpki-client