
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/9M57zqzLXSBpTz4PIfAYEXpgYVM.roa
File: 9M57zqzLXSBpTz4PIfAYEXpgYVM.roa (raw, json)
Hash identifier: nHIm8zuG1DU3Sc6RmfTunp6DGmTZfsMhGL8vABe7/m4=
Subject key identifier: F4:CE:7B:CE:AC:CB:5D:20:69:4F:3E:0F:21:F0:18:11:7A:60:61:53
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 17A8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9M57zqzLXSBpTz4PIfAYEXpgYVM.roa
Signing time: Tue 31 Mar 2026 08:04:16 +0000
ROA not before: Tue 31 Mar 2026 08:04:16 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 219.122.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6056 (0x17a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:04:16 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=F4CE7BCEACCB5D20694F3E0F21F018117A606153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e4:36:fd:eb:da:6f:54:45:45:e9:50:65:23:
88:b0:0c:82:43:29:e3:29:be:0b:eb:7b:55:82:ee:
e0:6b:83:bc:52:33:11:3d:5b:ce:96:10:94:fd:a4:
f7:d5:7a:b6:aa:50:31:86:44:22:05:6c:9f:82:17:
5c:0c:df:3c:a7:28:79:3f:ef:6a:e9:11:3b:23:e9:
21:91:b6:da:c5:c2:e6:c6:cc:1e:e8:f8:5f:c6:83:
47:21:60:ed:98:81:c3:b8:a1:e5:73:63:e9:77:06:
c3:ea:0c:c5:7e:03:0a:22:fc:66:c2:71:10:7b:bf:
30:e2:aa:31:e1:81:86:0b:02:03:78:c8:1c:1b:38:
de:b0:26:8a:f0:70:91:d4:f1:9d:cd:90:22:81:3c:
32:82:a2:7a:7b:40:7c:87:97:3d:e0:20:02:aa:b6:
c4:51:54:f3:1b:b0:33:40:8d:72:8a:6c:b8:4c:2f:
25:78:f9:b4:82:37:23:44:12:90:cf:dc:17:04:10:
0f:fc:0b:89:40:66:17:12:e9:a6:11:b4:44:0f:bb:
65:d9:9a:63:8b:3d:5e:0d:69:5f:d3:ff:8a:33:3b:
e4:d3:92:bd:0f:50:f3:b1:95:1b:7d:70:36:37:57:
8e:b9:f0:e7:0e:ec:89:7d:28:4c:59:05:ed:95:6e:
36:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CE:7B:CE:AC:CB:5D:20:69:4F:3E:0F:21:F0:18:11:7A:60:61:53
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9M57zqzLXSBpTz4PIfAYEXpgYVM.roa
sbgp-ipAddrBlock: critical
IPv4:
219.122.72.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:86:2b:cd:28:f7:b3:93:79:47:6b:44:88:86:2a:8c:74:c2:
46:3a:ef:c3:56:26:55:be:ec:49:c1:e5:e3:7c:67:fd:3a:ba:
10:21:f5:cf:4a:e3:14:5f:53:5b:4e:4f:5d:f5:13:ce:70:00:
d2:49:4e:dd:55:44:b5:ce:f8:45:ca:78:46:cb:43:4d:bc:a2:
e1:f1:f6:3c:de:1e:e0:c9:62:56:2c:eb:6f:8a:bf:a9:ad:fd:
09:da:ef:ef:6b:95:7c:25:00:53:78:9d:2d:a1:d6:95:08:12:
e3:ba:25:b2:18:b7:18:4c:0c:76:b5:c5:bf:d1:e3:8d:ed:4d:
00:84:9c:e5:ca:af:72:87:8b:b1:7f:3c:5c:13:3d:36:17:10:
4d:ef:10:61:bd:f6:5a:d2:3a:94:58:95:a4:95:a5:21:a0:1c:
aa:f8:5e:42:ef:03:7b:4f:58:04:25:2c:18:61:fc:fd:32:99:
b4:0c:73:1f:d4:45:d0:28:5e:47:cf:ef:6a:aa:91:7d:61:83:
be:ff:3f:64:71:a9:ee:32:75:a5:97:a2:b8:8d:aa:1b:8d:96:
9e:e9:e0:81:be:8b:07:21:36:42:16:b7:dc:3d:49:2c:0d:c2:
11:64:b4:07:54:90:e8:34:2e:80:21:15:a0:49:7c:96:37:23:
b9:76:c3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:32 2026 by rpki-client