
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ATo4JpexzT2S3yK3FhaR6w96QUY.roa
File: ATo4JpexzT2S3yK3FhaR6w96QUY.roa (raw, json)
Hash identifier: PqLYDYWID8VoIqr0o+8Wz9iR+QNwMOrWXQxkGsig1y0=
Subject key identifier: 01:3A:38:26:97:B1:CD:3D:92:DF:22:B7:16:16:91:EB:0F:7A:41:46
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1804
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ATo4JpexzT2S3yK3FhaR6w96QUY.roa
Signing time: Tue 31 Mar 2026 08:05:00 +0000
ROA not before: Tue 31 Mar 2026 08:05:00 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.72.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6148 (0x1804)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:05:00 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=013A382697B1CD3D92DF22B7161691EB0F7A4146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:04:22:f5:d9:cb:94:2f:95:c5:10:ce:94:a4:
46:77:bd:1f:d8:fe:1f:91:f8:0d:f6:a0:c6:17:6f:
d2:99:fd:30:30:8a:9a:fd:2f:4b:ed:5d:71:09:0c:
73:83:e7:f0:f0:42:74:10:ee:57:8e:44:95:e7:c6:
a3:46:42:ae:0d:d1:56:2a:23:7c:da:32:15:6e:a0:
ab:1e:ea:a4:c1:c6:4a:de:68:f6:4c:3f:39:a2:ae:
d4:71:cc:a7:f1:4a:97:12:fb:6f:70:3d:82:d3:c3:
84:db:56:d1:7e:2a:8f:29:3b:b4:82:fa:03:09:eb:
0a:19:28:a7:96:3f:fb:8f:d0:42:b8:2f:29:9c:bb:
b4:b8:e8:43:29:61:13:cd:57:b0:f9:b4:76:43:f8:
a3:01:f8:97:76:03:c0:e7:ad:1f:92:96:1c:21:d9:
fa:8a:41:70:29:a8:17:ae:62:1f:8f:d6:73:f8:8d:
57:4f:2e:90:b8:18:6a:63:d1:d7:da:ea:b1:94:2e:
64:e8:80:9e:26:2b:f3:4c:a4:18:fe:db:7f:ae:0c:
de:b7:3e:55:f0:09:d1:e6:82:9e:25:c4:9b:be:d4:
d9:7d:f0:33:4c:1f:eb:3a:b2:7d:cd:cd:6b:b5:50:
bd:09:4f:6c:58:da:84:5d:ea:89:59:57:bd:c1:c3:
50:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:3A:38:26:97:B1:CD:3D:92:DF:22:B7:16:16:91:EB:0F:7A:41:46
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ATo4JpexzT2S3yK3FhaR6w96QUY.roa
sbgp-ipAddrBlock: critical
IPv4:
1.72.48.0/20
Signature Algorithm: sha256WithRSAEncryption
4f:6a:f5:ea:5b:18:5f:cf:09:b5:6f:1e:c8:97:45:58:12:ca:
33:67:1a:59:e6:3c:96:36:e0:05:15:3f:2f:5f:fe:56:f8:95:
6e:34:a5:2b:c4:15:e2:ca:11:92:28:1e:3e:96:19:a4:24:ad:
bc:b4:30:81:c4:57:35:fe:a6:48:17:ea:b4:d3:bc:31:59:bd:
3f:4a:63:71:fb:ed:97:f3:a7:0b:d4:25:de:07:c7:91:4c:e3:
c8:ce:ec:58:64:0c:f7:bd:12:e3:e4:93:c0:fb:88:5b:77:2d:
08:61:92:e8:c4:9a:20:9b:30:7f:f4:a7:3e:76:6e:be:d1:3d:
88:04:bf:97:fb:be:a5:9c:5e:4a:19:24:1d:49:ca:89:2b:44:
2b:20:9d:88:93:cf:16:14:3a:a2:bd:b7:7f:a5:23:88:fc:69:
66:61:78:3b:18:dc:f1:34:b9:62:2d:53:e3:63:34:9e:7f:ac:
36:bc:f7:75:f2:d2:43:8e:9e:2c:61:0f:95:d1:b7:b7:ab:7a:
93:58:82:70:05:e0:9d:68:07:2a:5a:98:f8:b6:25:f8:be:8d:
e0:0b:e8:46:86:6a:6b:91:c7:95:ea:91:c8:1b:fc:53:96:70:
be:84:c1:c1:67:ac:33:49:60:5e:93:06:33:a5:0e:a6:e7:d9:
b2:c9:dc:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:08 2026 by rpki-client