
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/AzjIpQnJhntTSrX3B_rh4C9cGyc.roa
File: AzjIpQnJhntTSrX3B_rh4C9cGyc.roa (raw, json)
Hash identifier: Nyf3pYsCmuc4fjiqpzGVA85K19giLeIhgzs0KNKep7M=
Subject key identifier: 03:38:C8:A5:09:C9:86:7B:53:4A:B5:F7:07:FA:E1:E0:2F:5C:1B:27
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 14A0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AzjIpQnJhntTSrX3B_rh4C9cGyc.roa
Signing time: Tue 31 Mar 2026 07:57:55 +0000
ROA not before: Tue 31 Mar 2026 07:57:55 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 110.163.226.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5280 (0x14a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:57:55 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=0338C8A509C9867B534AB5F707FAE1E02F5C1B27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bb:a5:1a:1b:80:93:eb:f1:00:e3:b6:3d:3e:
7d:c4:9b:cb:ab:ef:ab:1f:2c:de:0d:1e:5e:f5:c9:
e9:03:bd:0d:d4:21:8d:fe:ac:0d:e6:f5:ed:72:e5:
ed:d3:ea:5b:89:be:63:ff:cd:bc:55:2d:56:b0:c6:
d8:de:93:fb:8f:29:f0:db:de:a6:be:07:6a:ee:a4:
53:94:64:b1:4f:01:a1:dd:15:bd:8a:28:89:c3:b2:
d3:0f:2b:23:c0:c8:b7:3a:2e:35:c0:fe:d5:38:50:
25:6e:5c:ee:0f:f9:9f:20:18:51:cc:80:16:6e:19:
80:cb:43:f2:2d:fe:81:71:0d:14:6b:e0:3f:c9:46:
8e:c0:fc:92:87:99:60:53:e9:de:83:4c:4d:d1:e0:
04:92:66:7f:aa:44:38:16:3d:23:9c:e6:0b:71:5f:
dc:a8:f4:8a:95:a0:2c:b2:54:a5:3c:29:dd:1a:70:
a8:3f:35:a0:f1:a1:2b:f1:12:62:fa:9c:88:6a:90:
4d:f8:5d:0d:67:69:57:1d:01:47:74:4b:2a:03:4f:
e9:3f:b0:c9:0a:a4:8d:ab:05:50:28:ef:69:e0:b2:
6c:21:0d:6b:22:3e:60:54:22:0e:6e:1f:11:b0:15:
ce:07:26:5e:89:c4:93:89:92:54:50:db:c0:ce:7d:
94:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:38:C8:A5:09:C9:86:7B:53:4A:B5:F7:07:FA:E1:E0:2F:5C:1B:27
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AzjIpQnJhntTSrX3B_rh4C9cGyc.roa
sbgp-ipAddrBlock: critical
IPv4:
110.163.226.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:1b:7c:07:13:bc:96:df:e2:1d:c5:df:bd:70:32:3b:48:15:
39:13:3d:30:60:6c:64:9d:f3:49:9c:71:45:08:97:84:95:7b:
47:05:38:03:2f:41:01:a0:75:11:c7:ae:00:d3:b9:5a:6c:28:
c6:67:b6:f6:85:ac:5b:8a:95:a2:e3:2f:60:e6:eb:2e:0f:6a:
ed:95:8d:3d:a7:57:9a:c1:d8:3a:f4:14:ba:73:27:24:dc:82:
16:08:18:5b:d3:fe:cf:4a:03:cd:67:ec:1f:b7:9b:76:bc:f2:
45:75:db:6b:20:9b:b8:81:26:a0:71:43:fc:8f:c3:0a:e5:33:
34:35:55:b6:e3:85:ea:d5:a0:52:4d:9a:50:5e:0b:31:6d:01:
64:dc:0c:b4:e7:02:ba:6c:0f:8a:d3:99:16:17:4f:fa:78:c7:
2b:f4:18:08:f2:6d:bc:24:cd:e6:74:30:75:3f:23:2f:bb:13:
bd:81:6f:71:c4:76:d0:9b:30:90:0d:5d:db:49:0e:c8:cf:fe:
d5:87:61:b8:bd:a1:53:60:48:4d:0a:07:af:09:3b:57:9b:b9:
47:41:8f:5b:a2:1d:a5:43:b2:99:20:3c:8b:2e:29:52:e9:58:
22:96:54:a1:95:11:98:05:bc:70:75:f8:ad:1d:ca:80:53:0a:
1a:b9:13:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:16 2026 by rpki-client