
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/8iTyDSzi3SZnCScuYdNvYxOV1OI.roa
File: 8iTyDSzi3SZnCScuYdNvYxOV1OI.roa (raw, json)
Hash identifier: b9hfUvnvIahOnwg4OIO05IqCSai4rlXWOtFKwXcH8s8=
Subject key identifier: F2:24:F2:0D:2C:E2:DD:26:67:09:27:2E:61:D3:6F:63:13:95:D4:E2
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 16A5
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8iTyDSzi3SZnCScuYdNvYxOV1OI.roa
Signing time: Tue 31 Mar 2026 08:02:12 +0000
ROA not before: Tue 31 Mar 2026 08:02:12 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 110.163.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5797 (0x16a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:02:12 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=F224F20D2CE2DD266709272E61D36F631395D4E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5a:8b:ca:9f:bf:bf:8e:01:5d:28:9e:49:f1:
ee:f1:69:bf:12:9b:aa:80:c7:80:bc:db:e0:9c:cf:
bb:7c:ef:d9:90:5b:d9:31:1d:03:e6:2b:50:ed:e9:
27:11:cf:5d:df:af:23:ac:c3:86:40:c4:c1:1a:f3:
d8:1e:b7:b3:01:e3:e4:2b:45:6e:a2:aa:fa:ce:fc:
cc:f9:f6:0d:71:34:50:f9:36:83:e2:9b:47:71:6d:
d1:9c:13:62:e6:93:c6:00:0c:e0:c0:68:7b:4c:af:
b5:f6:5a:d1:87:82:1d:2f:bb:43:fd:54:63:d1:32:
20:94:23:f5:cf:31:a6:46:dc:be:87:fc:b6:7c:af:
f5:ea:80:64:20:c3:49:1e:16:b8:fd:cd:a0:7f:a7:
46:3c:f5:11:8b:86:1d:5e:83:cb:ed:e9:f6:fc:ab:
28:8f:9d:06:3c:37:e7:34:3d:cb:9b:de:bd:c6:db:
00:e6:a9:37:d8:e5:31:c8:1b:fc:e0:a7:e8:fc:f0:
4f:0e:d0:08:9f:77:9f:22:74:f0:57:a1:c6:31:27:
0a:d5:d9:85:c8:3a:d7:c0:27:8a:3c:2f:32:e4:5e:
81:b9:5a:67:19:db:1f:92:92:9a:6b:c3:89:7d:dd:
05:1f:6c:37:8b:0b:0c:8d:52:f6:be:2c:e9:c3:ab:
52:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:24:F2:0D:2C:E2:DD:26:67:09:27:2E:61:D3:6F:63:13:95:D4:E2
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8iTyDSzi3SZnCScuYdNvYxOV1OI.roa
sbgp-ipAddrBlock: critical
IPv4:
110.163.40.0/24
Signature Algorithm: sha256WithRSAEncryption
28:df:d7:b7:6f:fa:a0:e9:c0:bc:d8:ca:18:36:8a:cf:34:21:
60:f8:1d:40:b3:fc:07:a0:d0:de:36:69:e3:be:67:8b:24:7f:
57:20:5e:88:39:cb:c6:1e:59:1d:80:eb:f5:48:7c:d3:42:e2:
07:b2:bb:09:98:f9:1f:b4:2f:f7:20:bc:52:a1:ce:33:84:13:
5d:74:01:30:a5:66:4d:63:85:63:1e:cf:6c:8b:35:21:6d:b9:
84:58:52:ce:41:a8:7f:4a:8c:c9:36:07:8a:2c:c3:1b:b8:f1:
90:c6:ec:ec:22:70:6a:32:a6:dc:9b:f2:61:92:05:a9:20:61:
87:0d:5d:4b:3d:9e:a9:b3:95:d9:94:b7:52:18:4e:a5:d1:12:
65:cf:51:e4:c5:f9:d3:9e:c0:59:5f:91:a5:02:d0:54:3c:16:
91:12:6a:0c:de:cc:ea:9d:54:2a:dc:a4:72:63:7f:9c:49:35:
44:97:fb:ee:5b:e2:89:f7:a2:ac:60:c6:35:0c:5a:0b:a2:af:
fa:93:cb:12:6b:3a:e5:15:2d:ea:36:cd:39:bc:eb:21:8c:5a:
4c:28:b4:6f:a7:df:2b:6f:01:aa:05:fe:8a:52:95:7b:1b:8a:
80:aa:53:99:2a:58:f1:4a:03:9b:05:38:72:39:04:21:99:c7:
b9:02:af:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:37 2026 by rpki-client