
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ARwB4XBbNNlqv3zqs06XRBqj_ag.roa
File: ARwB4XBbNNlqv3zqs06XRBqj_ag.roa (raw, json)
Hash identifier: Yfe39vEnMSyWi5ijneo1rhWqwdtRb0gpJhP8A1bhq20=
Subject key identifier: 01:1C:01:E1:70:5B:34:D9:6A:BF:7C:EA:B3:4E:97:44:1A:A3:FD:A8
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1553
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ARwB4XBbNNlqv3zqs06XRBqj_ag.roa
Signing time: Tue 31 Mar 2026 07:59:26 +0000
ROA not before: Tue 31 Mar 2026 07:59:26 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 27.230.104.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5459 (0x1553)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:59:26 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=011C01E1705B34D96ABF7CEAB34E97441AA3FDA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dc:57:6b:1c:5c:7e:ca:8c:37:16:4d:3b:d9:
6e:a9:af:b9:e0:c5:19:ef:9d:52:1c:b2:f0:88:db:
28:64:67:b5:35:a5:78:ba:d5:46:df:dd:8d:4c:b3:
e2:e2:24:a3:8a:94:68:e7:41:0d:00:a4:81:62:2c:
f2:43:a9:32:28:d2:0d:36:93:d9:55:55:c3:bc:f2:
dc:fe:05:95:10:65:fc:b6:79:cc:99:0d:c4:9e:89:
3a:fa:9e:c3:d3:75:cd:7c:b6:c8:4f:3f:f9:5f:5e:
1f:83:e1:fb:2e:d5:46:19:96:ff:b5:eb:d0:58:bb:
6a:f0:28:5e:09:cf:d3:f2:bb:2f:2f:37:4c:de:be:
51:5c:67:c3:64:79:f7:44:af:8a:e4:97:9f:da:ff:
b4:0e:33:a1:00:d2:d0:8a:3b:8f:04:f5:0a:97:ae:
22:41:19:99:60:bf:4e:03:f6:05:79:7a:f3:79:59:
f8:a5:3e:5a:d0:5f:bf:a2:4d:af:5b:52:df:ae:3b:
d6:04:98:7d:12:20:5f:08:6e:07:e2:4f:6e:55:a4:
8b:60:14:bc:e0:58:ec:c9:1e:3b:01:2f:f7:a1:9e:
da:1b:b9:44:f9:72:ff:65:ef:2c:76:e5:bf:e5:07:
b9:3f:7f:5f:d1:1b:d1:40:55:29:ca:6d:a4:cf:4f:
20:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1C:01:E1:70:5B:34:D9:6A:BF:7C:EA:B3:4E:97:44:1A:A3:FD:A8
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ARwB4XBbNNlqv3zqs06XRBqj_ag.roa
sbgp-ipAddrBlock: critical
IPv4:
27.230.104.0/21
Signature Algorithm: sha256WithRSAEncryption
50:3a:62:e3:a4:69:2e:59:3d:d5:02:ad:8a:b6:ef:8f:f0:de:
1b:c1:ca:3e:d6:35:c2:b1:0f:aa:39:e8:59:17:f7:64:e7:93:
3c:da:32:79:ec:2e:1f:b8:94:11:58:b9:26:1a:1f:25:73:fe:
24:e9:6c:59:bb:bd:97:49:f2:8a:bb:8b:ff:63:19:e4:fc:b8:
45:01:70:3b:49:98:79:56:b5:66:ef:02:c1:cd:f3:71:4b:be:
5e:32:c5:95:ba:fe:73:89:4d:47:c4:86:09:bc:0f:76:cc:1c:
31:62:9d:df:77:7a:da:c2:dd:5a:4e:ec:6a:21:9b:ea:9c:ca:
0a:cf:9a:32:6a:bf:71:3e:4a:e1:2f:b4:dc:c7:d1:1a:b3:c5:
f5:4c:67:c0:84:63:99:8c:1b:42:fb:47:6f:56:c2:b6:bf:d8:
62:fa:f7:73:54:b5:19:cb:09:32:2e:c2:b8:23:c0:0b:3d:8f:
40:60:d7:56:36:4c:ec:c0:e0:09:21:64:66:72:00:94:14:bf:
bf:2e:6a:0d:8c:48:8c:30:62:e6:4b:3d:42:6f:72:b8:d9:a3:
aa:68:77:39:c3:6e:64:2d:c8:aa:79:12:50:77:e6:d4:33:08:
f8:a9:0d:a9:d5:24:f3:46:64:4f:b6:0e:74:b8:ea:83:86:e3:
81:5a:2f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:58 2026 by rpki-client