
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/AUhNSz-ClBLGQ00HWJWTodThMJI.roa
File: AUhNSz-ClBLGQ00HWJWTodThMJI.roa (raw, json)
Hash identifier: TkFLLzbs1cmXCZsvX0YcvfJdOQ5el0n0B+BSKNjvLS4=
Subject key identifier: 01:48:4D:4B:3F:82:94:12:C6:43:4D:07:58:95:93:A1:D4:E1:30:92
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1444
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AUhNSz-ClBLGQ00HWJWTodThMJI.roa
Signing time: Tue 31 Mar 2026 07:57:13 +0000
ROA not before: Tue 31 Mar 2026 07:57:13 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5188 (0x1444)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:57:13 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=01484D4B3F829412C6434D07589593A1D4E13092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2f:2a:29:40:34:6f:98:93:ed:af:e6:aa:c5:
78:91:de:de:b4:b4:32:b0:9c:82:bb:aa:6e:7e:09:
60:63:6e:c6:cb:be:fd:d2:38:16:7f:38:2c:9d:ef:
cb:32:c5:30:49:6b:c8:81:9a:a9:46:d2:e0:6d:ed:
82:a6:d9:73:de:d3:4e:36:b3:82:f1:96:b8:a8:81:
03:55:26:08:f5:5d:0e:39:c7:16:71:e6:c5:ca:c1:
23:6c:f7:60:85:0f:6a:12:65:5f:04:ee:be:14:ba:
8c:df:2c:ce:d9:a2:c6:27:45:af:5f:cf:bc:4a:9d:
84:cc:79:b4:0c:9a:53:6f:e9:7e:12:92:10:7b:a7:
8c:2c:64:68:3c:b8:08:66:09:bd:de:a6:94:59:3f:
a9:2d:64:bc:ba:fb:4d:8d:be:28:e8:2b:ab:b6:97:
93:45:77:47:09:57:85:ae:7a:61:81:45:18:a0:78:
3a:c7:d5:1d:88:1d:fd:12:c3:c2:76:f0:f2:74:08:
17:bf:ce:0e:57:d5:df:39:52:56:10:9b:53:5d:ed:
42:ec:37:60:fe:bf:64:d1:f2:1d:df:ee:1c:d3:5f:
fa:3d:6c:3e:b2:a2:f2:85:85:e0:9c:d8:0f:43:4e:
2e:7c:6a:0c:af:84:39:61:88:c3:59:b2:ab:50:2e:
6f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:48:4D:4B:3F:82:94:12:C6:43:4D:07:58:95:93:A1:D4:E1:30:92
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AUhNSz-ClBLGQ00HWJWTodThMJI.roa
sbgp-ipAddrBlock: critical
IPv4:
1.79.75.0/24
Signature Algorithm: sha256WithRSAEncryption
97:2e:12:79:9f:60:b5:3e:6e:73:c6:25:5f:9b:4a:9c:af:74:
d2:f4:41:c6:f7:54:df:27:bc:47:13:35:62:e3:32:2b:29:ef:
dc:99:f8:ed:d8:28:3c:23:6d:d9:04:8d:d0:e2:16:aa:7c:57:
6f:fc:8e:a0:d7:d5:a0:60:e1:12:16:c1:d8:fd:75:52:fb:7c:
97:80:22:6d:41:d6:af:4b:3e:6f:6e:87:38:cf:25:de:20:fd:
53:cd:a3:c7:49:00:56:60:77:7b:e3:ca:c0:fa:76:96:00:4c:
14:46:f5:7a:5d:40:e3:15:bf:b7:9e:aa:5b:25:81:60:80:6b:
50:3c:2e:9a:2e:64:b2:0a:9b:47:1a:12:e0:ad:40:98:0b:a5:
46:29:e6:26:b6:ef:58:5d:f2:3e:ef:62:9e:cf:48:c0:39:6d:
6d:7f:71:d4:85:dc:c0:6d:e9:3f:d5:9d:35:b5:74:58:1a:75:
8f:fb:50:b3:6a:c1:62:22:e7:67:2b:2d:b6:46:e2:15:29:fe:
48:35:ec:8e:ea:b8:ae:a0:1f:ca:31:c0:03:46:b0:76:0d:98:
31:f1:2d:68:75:e4:79:fc:66:e8:f2:a1:65:d3:0c:20:9c:7a:
f8:62:2c:fc:7b:53:3e:45:6f:37:9a:e5:11:e1:ed:6e:73:4a:
38:50:7a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:09 2026 by rpki-client