
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/708ylTfoJ12JbcNWKEnI5fVHG9w.roa
File: 708ylTfoJ12JbcNWKEnI5fVHG9w.roa (raw, json)
Hash identifier: zbeNO6iEwc+hIA0BcTcwrydZ4uQX6mt3I10+5q4Ifes=
Subject key identifier: EF:4F:32:95:37:E8:27:5D:89:6D:C3:56:28:49:C8:E5:F5:47:1B:DC
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1526
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/708ylTfoJ12JbcNWKEnI5fVHG9w.roa
Signing time: Tue 31 Mar 2026 07:59:01 +0000
ROA not before: Tue 31 Mar 2026 07:59:01 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.76.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5414 (0x1526)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:59:01 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=EF4F329537E8275D896DC3562849C8E5F5471BDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e0:13:04:a5:c9:24:7a:c1:e9:69:88:51:87:
35:4f:a9:a5:7d:64:f5:5c:76:31:bd:09:86:b9:00:
f6:05:ac:28:22:af:3a:7d:37:0e:d4:cd:ab:22:b2:
51:d7:05:34:a2:bc:8d:b1:fa:68:f8:28:ba:40:d6:
d2:ad:60:11:45:89:f8:73:fa:98:02:76:a5:b4:52:
79:d8:09:b8:21:88:19:f1:57:a8:36:2a:a2:eb:36:
bd:b8:41:94:b4:29:51:77:07:cc:4c:2d:65:84:62:
30:e6:cd:ad:7c:4e:24:1a:cc:4d:0a:2f:10:1d:88:
1f:4e:6f:f5:fa:23:0c:9d:af:f6:1c:69:a8:56:39:
65:6e:0c:4e:97:c7:2e:04:86:a8:c2:00:87:8a:8e:
e9:eb:37:09:19:83:34:1d:0b:c9:45:05:6d:01:6d:
54:7c:76:dd:83:46:e8:ba:0c:85:84:07:ab:6d:67:
05:44:90:db:6b:ad:86:74:00:e5:b8:dc:d1:7b:e4:
c1:2f:af:d2:04:55:3c:71:d5:7b:a0:e3:36:09:85:
18:66:7a:72:dd:26:98:97:aa:b5:a0:99:45:b8:09:
71:62:55:ce:73:35:6d:d3:7a:97:06:5e:02:4f:9a:
e6:7b:04:70:d3:24:9c:6d:46:2b:1c:e7:b2:dc:c7:
ad:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4F:32:95:37:E8:27:5D:89:6D:C3:56:28:49:C8:E5:F5:47:1B:DC
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/708ylTfoJ12JbcNWKEnI5fVHG9w.roa
sbgp-ipAddrBlock: critical
IPv4:
1.76.72.0/22
Signature Algorithm: sha256WithRSAEncryption
62:51:b1:a4:64:29:a3:61:10:3b:9a:60:a0:6f:5e:27:80:5a:
e0:f9:24:08:7d:0e:9f:ce:40:75:e3:f6:62:e8:61:4f:0c:44:
8e:01:45:89:95:e1:83:12:63:3c:db:ee:f6:78:00:32:29:46:
33:84:4f:ae:8e:da:58:9f:96:9c:71:93:ef:49:73:29:4e:dc:
07:de:39:19:b1:9d:9d:3d:8f:c3:13:69:98:fd:47:30:1a:3a:
ef:60:3b:1a:5b:1c:b9:98:0e:cf:c9:67:97:23:af:51:ed:59:
f8:ad:c7:b3:a7:eb:b0:4e:9d:79:80:33:c9:ff:44:a8:30:bc:
3d:e0:5b:ab:36:68:7a:7d:9f:90:f3:81:41:8f:20:cb:df:6d:
40:22:f9:22:65:de:09:1d:98:a0:55:13:c6:35:40:75:5d:4a:
41:73:9c:62:33:5c:6c:93:8d:df:90:13:b2:ed:02:5e:d1:43:
a3:f9:2e:69:47:4b:8d:ed:54:34:39:84:a3:13:13:43:12:e9:
8d:fa:78:07:14:93:8a:68:0d:d5:43:e3:34:4e:d7:76:1d:f6:
94:f6:ee:ed:11:40:6b:93:66:83:72:64:5a:03:25:0c:c9:fe:
35:4b:2f:e7:b1:91:5d:23:a2:f3:15:d8:2c:96:8c:0e:0b:02:
1c:97:64:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:26 2026 by rpki-client