
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/8uHlCMSJ4ISLLhvNuTjhxHVKzbw.roa
File: 8uHlCMSJ4ISLLhvNuTjhxHVKzbw.roa (raw, json)
Hash identifier: Q/S3n5IB1pmEPUmMgPC8h9GW2m4fCQ7UTFtQ0k95Ui0=
Subject key identifier: F2:E1:E5:08:C4:89:E0:84:8B:2E:1B:CD:B9:38:E1:C4:75:4A:CD:BC
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 16D1
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8uHlCMSJ4ISLLhvNuTjhxHVKzbw.roa
Signing time: Tue 31 Mar 2026 08:02:33 +0000
ROA not before: Tue 31 Mar 2026 08:02:33 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 110.162.96.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5841 (0x16d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:02:33 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=F2E1E508C489E0848B2E1BCDB938E1C4754ACDBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4e:6b:80:6c:04:e5:95:ac:64:af:0c:1f:c0:
93:49:ac:2b:37:0f:c3:d8:d8:9c:e5:5c:8e:7a:66:
f2:ff:5a:52:88:46:71:c2:17:1a:f1:0e:49:0b:ed:
33:0d:fa:0c:9c:84:2f:b0:a4:63:da:fe:53:1f:3f:
2a:3f:84:5f:9e:47:3c:ab:d2:7c:44:d7:85:e1:28:
cb:a6:b1:1c:b5:44:1a:32:a6:ad:7f:ed:eb:2c:15:
33:2b:e9:1a:4a:fd:d1:e1:cb:9a:b1:82:03:a0:e7:
65:fe:c5:4b:70:9a:cb:d0:94:ac:ca:a6:44:b6:4b:
a8:0d:df:86:83:66:b0:89:09:e5:38:de:93:d9:ab:
fc:ae:39:f9:8d:82:aa:c6:b4:82:7a:c0:a1:ca:65:
5b:23:2c:2e:7c:68:f9:19:1c:a5:73:a1:07:f1:e8:
19:10:71:53:23:31:3a:19:28:18:da:3f:7e:96:f0:
a6:ed:02:b6:03:92:97:ca:57:07:28:2c:b3:16:31:
3f:6b:f9:c9:11:c4:3d:dc:dd:99:20:78:f6:02:01:
78:3d:c7:99:85:bc:b4:03:36:66:85:29:5a:48:66:
41:ec:72:f8:4b:2c:7c:93:b9:e0:e2:38:ad:99:14:
81:94:21:4f:0e:ae:da:82:31:c2:eb:7c:1a:22:be:
1f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E1:E5:08:C4:89:E0:84:8B:2E:1B:CD:B9:38:E1:C4:75:4A:CD:BC
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8uHlCMSJ4ISLLhvNuTjhxHVKzbw.roa
sbgp-ipAddrBlock: critical
IPv4:
110.162.96.0/20
Signature Algorithm: sha256WithRSAEncryption
6d:73:f7:20:33:7f:06:23:ca:09:17:25:71:55:b5:a8:a8:05:
30:cc:e9:28:9a:f9:9e:d5:aa:dc:02:0e:5d:85:04:ff:e7:fc:
48:f5:9f:a2:82:3a:c8:45:43:a6:d2:97:c4:14:b0:de:cd:09:
3a:17:19:16:3a:da:22:d4:03:f9:1e:be:4e:38:5b:79:f9:55:
fa:5e:3f:05:2b:db:86:d6:c9:85:b8:62:48:98:be:86:d2:e0:
3a:c5:d3:45:b8:c4:b7:2a:bc:8d:f7:56:f8:4b:2a:c6:01:d1:
32:9a:35:58:9c:2e:65:3c:b1:5c:b0:16:45:3f:6c:92:8b:fa:
d8:19:07:22:b4:2d:c5:fa:14:1b:2b:e5:ee:7e:28:79:db:6e:
4d:e7:3c:5f:c6:b4:11:63:29:ee:00:06:16:e5:a4:a8:83:40:
d2:16:9c:5b:59:89:27:7d:bf:a2:cf:34:b5:05:99:93:f2:1d:
0a:4f:34:d1:f1:5f:f5:2f:e8:1b:4e:08:2b:f1:cb:c4:2c:49:
44:0d:13:9c:1a:c9:e3:fa:1f:35:b5:d3:25:5e:b8:da:0d:52:
f1:4c:2d:dc:19:f6:45:5a:00:aa:ad:5e:b4:3a:ab:f5:70:0c:
0e:65:7b:80:5a:01:a7:6f:3c:38:9a:b9:63:39:63:4f:f3:74:
bf:a3:00:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:01:39 2026 by rpki-client