
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Afso3nQPT81G9j6EFKbjAFoDGDo.roa
File: Afso3nQPT81G9j6EFKbjAFoDGDo.roa (raw, json)
Hash identifier: cMHEX0LwKbjO4KP2hiBPaWQK/68trno/caF4mfr/8a0=
Subject key identifier: 01:FB:28:DE:74:0F:4F:CD:46:F6:3E:84:14:A6:E3:00:5A:03:18:3A
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 182C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Afso3nQPT81G9j6EFKbjAFoDGDo.roa
Signing time: Tue 31 Mar 2026 08:05:25 +0000
ROA not before: Tue 31 Mar 2026 08:05:25 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.75.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6188 (0x182c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:05:25 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=01FB28DE740F4FCD46F63E8414A6E3005A03183A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:61:b7:ae:f7:81:24:f0:93:1a:cc:b8:dc:ec:
c1:96:1a:ad:6e:34:03:ac:c9:b3:16:5e:f0:72:61:
4c:2b:a1:fc:2d:4d:2d:d4:a2:08:9e:47:f6:b9:81:
ef:d4:bf:ca:50:34:28:89:bc:cf:ab:4f:4e:47:14:
24:0c:9d:4d:d8:dc:74:32:3f:20:3e:61:6f:a5:22:
f5:77:22:db:73:24:8c:56:ca:4c:59:27:6f:91:d3:
b4:c2:ad:a6:73:61:79:ef:c1:ef:50:5d:35:27:de:
14:f3:36:e8:5e:31:1e:4c:03:8f:ce:86:86:c4:a5:
dd:3a:68:e3:5f:06:78:90:41:20:0a:64:00:09:6c:
4f:1e:7e:ca:4e:03:0a:da:e8:f0:01:c5:f9:7d:04:
57:a1:2c:c3:16:4a:b2:56:cd:c1:65:e1:66:bf:5c:
35:d5:75:19:82:51:02:18:4f:f2:55:ff:e2:72:8d:
b5:96:43:18:fe:91:9a:f2:5f:52:29:0c:63:bf:29:
ee:9b:3e:dc:14:c5:fd:14:a0:2a:9c:72:93:19:49:
a8:ea:e8:7f:60:76:89:1b:ae:ef:c2:3f:b1:e9:76:
9f:93:4d:3e:77:e9:40:92:90:c3:ce:a7:80:82:24:
6d:29:81:b4:b3:ca:c8:aa:39:2b:58:35:e7:5d:a2:
f5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FB:28:DE:74:0F:4F:CD:46:F6:3E:84:14:A6:E3:00:5A:03:18:3A
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Afso3nQPT81G9j6EFKbjAFoDGDo.roa
sbgp-ipAddrBlock: critical
IPv4:
1.75.64.0/19
Signature Algorithm: sha256WithRSAEncryption
af:ea:c1:c5:8d:5f:27:0c:73:4f:db:d6:e3:03:db:4a:71:cc:
a9:be:32:e1:5c:25:16:eb:21:95:e7:91:a4:b0:51:05:d6:37:
00:b8:2c:31:22:44:c1:45:ed:16:40:45:3c:9e:a5:1d:bb:6e:
83:1c:5f:f1:61:94:64:ca:d1:57:da:d1:1a:ca:da:9c:06:60:
ed:b6:71:08:b2:8b:81:b3:d3:b3:2f:3f:d5:ef:0c:a5:82:cf:
b4:cb:fe:aa:2d:f3:e6:37:2d:2f:c9:bd:7e:ba:d9:d2:9e:79:
f5:9a:d0:9f:87:7c:35:c2:6c:1c:4b:5f:d4:a0:9e:73:f8:b3:
16:fb:05:54:e4:69:3b:62:9e:63:61:38:0c:fb:ea:4a:b2:92:
d6:8e:e7:c9:50:b4:ef:04:cf:05:ae:ac:68:10:c8:88:4c:c9:
1c:00:b8:11:15:70:5d:2c:01:fd:06:ff:4e:64:0f:4f:33:1b:
0e:98:66:a1:84:52:43:27:09:ec:b0:4a:3f:fb:06:56:45:1f:
59:c7:f7:14:93:d1:b0:f8:ca:ad:dc:f8:f8:02:be:a5:0e:08:
91:a8:1f:ae:21:75:05:3d:62:3c:79:db:00:33:61:42:cd:3c:
2d:36:47:98:78:21:9b:14:f8:8b:8c:6e:1e:e6:b1:c7:db:c2:
0f:f4:bf:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:24:06 2026 by rpki-client