
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/7WmjUxmxXce4VwSiH4HXaloowdo.roa
File: 7WmjUxmxXce4VwSiH4HXaloowdo.roa (raw, json)
Hash identifier: 5Az2Cjyq9JgtLfEHlyO6dG4jt/XVObQjDf3SCIOqRFo=
Subject key identifier: ED:69:A3:53:19:B1:5D:C7:B8:57:04:A2:1F:81:D7:6A:5A:28:C1:DA
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1525
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7WmjUxmxXce4VwSiH4HXaloowdo.roa
Signing time: Tue 31 Mar 2026 07:59:00 +0000
ROA not before: Tue 31 Mar 2026 07:59:00 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5413 (0x1525)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:59:00 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=ED69A35319B15DC7B85704A21F81D76A5A28C1DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:15:bd:5f:0f:be:b4:2a:4b:ca:c9:1a:3b:11:
f6:4a:58:30:fb:57:98:3b:93:73:39:d7:28:98:21:
13:11:2e:98:bf:9b:52:5f:41:c1:40:6f:e4:d0:7e:
7c:92:db:23:6c:40:b8:e7:77:d4:57:9a:45:9b:ad:
a2:38:50:2f:5e:5a:85:e9:fe:84:83:58:24:ec:1c:
8d:c0:7a:75:32:f6:2b:dc:6e:47:86:75:7f:d0:74:
f6:ce:3f:d0:81:37:a8:aa:a4:9e:e5:d9:ee:8a:df:
df:fe:c6:cb:2a:c5:ba:e6:55:0c:d9:a0:94:10:75:
98:85:f8:22:74:c8:db:a3:d6:16:ce:4a:e7:3b:b5:
f1:fc:6b:4b:e8:70:05:d9:0a:f5:0d:f7:43:36:5c:
63:b8:00:09:7d:b2:f6:72:3d:9d:0a:46:c6:84:87:
5a:03:c2:d0:93:43:95:00:5f:33:71:64:21:08:dd:
85:74:3f:03:68:d2:c1:1a:b0:87:14:d0:69:5e:ea:
a5:7c:58:a9:9c:43:7e:9a:74:15:c0:c7:8d:af:a4:
1b:88:04:67:1e:9f:04:4f:ca:68:f4:5d:87:ae:ff:
22:87:9f:ea:9d:71:67:a1:16:21:a2:fc:fd:97:ba:
e5:0d:42:ce:26:cb:9c:2c:df:ba:32:d0:6a:24:5f:
6c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:69:A3:53:19:B1:5D:C7:B8:57:04:A2:1F:81:D7:6A:5A:28:C1:DA
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7WmjUxmxXce4VwSiH4HXaloowdo.roa
sbgp-ipAddrBlock: critical
IPv4:
1.79.172.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:49:b9:68:4f:7d:93:72:ef:6c:ac:32:39:37:cc:6c:48:1e:
f2:0b:89:11:4c:9a:1a:ae:98:9f:a5:1b:d9:df:56:61:79:e0:
07:3d:81:29:f3:d1:e8:7b:a5:19:b7:c0:93:ce:de:e9:3d:db:
88:6d:f5:5e:dd:33:43:3a:f0:d1:8f:0a:e8:25:c8:a7:11:59:
09:2f:27:82:27:32:20:ae:63:85:b5:21:06:d5:ea:ee:84:da:
ff:9c:ed:46:d3:96:20:e4:76:4a:d1:54:1a:41:0a:c8:b1:84:
26:74:ab:9b:48:45:71:c5:8b:2f:1d:90:89:17:60:ac:d7:28:
b9:f4:a3:9e:eb:f5:08:34:16:2d:b1:93:41:91:57:cc:f8:d9:
83:21:1e:8f:1f:3d:fa:6e:76:7d:a3:6c:1d:a8:72:e4:68:a9:
2f:33:2d:be:fd:75:c0:be:db:1f:fc:33:3e:77:df:28:03:b3:
35:bb:5a:1a:35:85:11:f8:70:7e:84:d5:6d:40:60:ad:7a:fe:
07:12:bd:ee:d4:3a:c9:30:25:86:29:fb:d5:67:96:ae:24:ef:
b8:6c:fc:60:99:8a:af:61:fd:7d:9c:be:eb:f5:f0:71:ed:73:
d6:96:e4:49:02:51:cf:38:1b:2c:7b:32:32:8b:a1:9e:61:30:
75:60:f0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:29 2026 by rpki-client