
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/2c9_4aVE0lbSV3AXSbu6sU1ohho.roa
File: 2c9_4aVE0lbSV3AXSbu6sU1ohho.roa (raw, json)
Hash identifier: hBlxjIjkBTtHFnG4EK1hwGQb/HNwWBG/lwlxjDzL79M=
Subject key identifier: D9:CF:7F:E1:A5:44:D2:56:D2:57:70:17:49:BB:BA:B1:4D:68:86:1A
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1456
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2c9_4aVE0lbSV3AXSbu6sU1ohho.roa
Signing time: Tue 31 Mar 2026 07:57:21 +0000
ROA not before: Tue 31 Mar 2026 07:57:21 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.75.160.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5206 (0x1456)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:57:21 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=D9CF7FE1A544D256D257701749BBBAB14D68861A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4a:8e:6f:0d:e9:f2:8a:6d:e3:8d:40:52:cb:
28:e0:29:61:49:01:74:af:f6:02:c0:29:6e:55:0a:
b8:67:51:92:96:1e:6d:63:88:54:b7:80:87:79:4f:
c6:e8:94:8f:95:b7:9b:a7:9d:74:eb:6c:3a:eb:e2:
36:ea:c4:33:24:b3:fb:84:cf:24:a0:7e:ad:81:fb:
28:e3:2c:d7:43:63:82:85:59:30:73:5e:9d:d8:00:
7c:15:87:e6:20:a3:3d:0c:60:a3:92:01:bd:48:98:
0b:6a:fd:92:49:bd:7f:98:c3:58:c2:87:6a:a0:d5:
65:21:6b:7a:bd:0f:f2:5a:03:db:08:44:c8:c8:8c:
cb:59:2d:cf:f5:21:56:00:00:5e:76:1c:71:69:71:
bf:7b:43:53:99:0f:95:b6:97:bf:2b:80:ee:3d:4b:
a9:9a:b7:cc:e5:2f:4a:70:a5:c3:aa:72:a8:1b:f8:
a0:69:98:c5:e3:7e:e5:e9:eb:fb:0b:30:6b:04:63:
e3:18:6e:5e:9b:05:4d:59:b1:b4:c2:4f:2a:77:2b:
40:b3:e2:8f:6a:98:67:76:4d:68:2d:8a:e5:68:3b:
16:16:9e:c3:20:55:34:02:ca:82:b1:9e:a4:70:39:
9b:de:b6:1c:79:a7:1d:82:ea:1d:42:07:c2:34:4f:
66:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CF:7F:E1:A5:44:D2:56:D2:57:70:17:49:BB:BA:B1:4D:68:86:1A
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2c9_4aVE0lbSV3AXSbu6sU1ohho.roa
sbgp-ipAddrBlock: critical
IPv4:
1.75.160.0/20
Signature Algorithm: sha256WithRSAEncryption
4c:01:91:51:68:a6:0a:25:65:99:b6:91:e5:1c:d2:a8:24:c7:
9d:a7:4e:2c:e6:48:20:f9:55:83:ab:c3:42:01:d5:42:52:17:
9f:fd:84:d4:d9:6e:c2:15:19:ca:45:76:f6:f4:43:7b:9c:4f:
06:5e:e6:cb:81:6e:6b:66:52:99:f5:3c:31:3f:6a:bc:cb:b0:
c6:29:f0:70:e3:59:9d:d0:ca:23:b1:17:83:e1:92:f0:7f:1c:
4a:b9:24:ae:b1:a1:27:64:f8:fd:ad:69:57:f3:74:8a:d9:74:
10:cc:71:0f:43:23:62:bc:99:eb:5d:d1:b5:d7:dd:7f:e9:fd:
9c:fa:3e:ba:e2:b7:a4:a0:29:c0:81:c8:6d:b9:39:3c:91:ea:
5d:65:c0:c0:23:64:7f:0b:c9:63:89:71:6e:01:53:34:9d:6a:
d0:19:4b:97:9f:a6:76:92:90:e7:5c:1c:bf:04:02:aa:78:fe:
39:7d:19:71:ce:0e:15:93:2b:c3:f9:ea:ae:36:a9:22:6a:ed:
42:b0:3c:d8:3b:e7:f9:5d:47:a2:06:7c:fd:8d:8e:fa:f1:1d:
f6:32:d5:17:f7:e6:38:d9:48:a9:05:32:cf:8c:9a:38:d5:5e:
14:e7:f7:9e:e1:4f:cd:c1:4b:91:37:22:12:82:9d:b1:6a:8d:
87:f5:cf:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:36 2026 by rpki-client