
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/CZ6UumzMGBG5A_SN2QKFDKvhtv8.roa
File: CZ6UumzMGBG5A_SN2QKFDKvhtv8.roa (raw, json)
Hash identifier: 0Y9q+eOqt4dqcCumxKf94Vk3xoj2T4bXrO7aC8AAfOU=
Subject key identifier: 09:9E:94:BA:6C:CC:18:11:B9:03:F4:8D:D9:02:85:0C:AB:E1:B6:FF
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 17C4
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CZ6UumzMGBG5A_SN2QKFDKvhtv8.roa
Signing time: Tue 31 Mar 2026 08:04:31 +0000
ROA not before: Tue 31 Mar 2026 08:04:31 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6084 (0x17c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:04:31 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=099E94BA6CCC1811B903F48DD902850CABE1B6FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2a:b3:aa:7e:3c:50:74:99:aa:97:f4:f1:ae:
12:8d:a5:8f:6e:00:78:17:ed:8c:38:12:0f:c5:b1:
d0:0c:0f:0c:a7:b6:d5:25:fc:1a:82:14:22:ef:e5:
e7:88:74:c6:f1:52:52:f4:0f:15:d6:ba:4d:1f:0b:
6d:fb:17:4e:52:10:2d:e0:00:2b:0c:ca:68:af:68:
3a:b3:f8:a8:1b:a9:cd:fb:0f:f3:e6:fc:2f:6d:82:
b5:1f:24:dc:e0:dc:8e:18:47:86:76:04:04:a7:43:
6e:5d:22:0d:0a:7e:83:cb:d0:4a:06:08:17:60:77:
f4:9c:e0:43:5f:1c:e6:5d:e0:0d:ad:20:db:f0:35:
aa:df:a1:c5:e4:1a:71:d0:8e:4b:af:42:8a:28:11:
ea:62:29:c9:34:55:16:7d:2d:95:69:cd:9e:09:23:
a3:5f:e4:12:ac:3a:38:81:be:1e:f3:69:27:ae:75:
6a:8b:10:db:f5:30:71:b9:e1:fd:66:8f:f0:3c:1c:
aa:19:4b:b2:fb:ac:7d:99:d7:e8:e3:a4:ba:12:37:
c6:be:f8:a2:16:89:5b:7c:42:2d:58:eb:71:8a:47:
bc:7d:29:28:e2:fe:2f:c8:a4:5f:32:75:c8:ff:60:
98:1d:8a:15:84:79:61:9b:ed:40:16:83:cf:c2:21:
16:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:9E:94:BA:6C:CC:18:11:B9:03:F4:8D:D9:02:85:0C:AB:E1:B6:FF
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CZ6UumzMGBG5A_SN2QKFDKvhtv8.roa
sbgp-ipAddrBlock: critical
IPv4:
1.79.216.0/22
Signature Algorithm: sha256WithRSAEncryption
45:de:3f:6a:89:11:d3:70:06:61:93:79:a3:91:1c:8c:a5:f4:
2c:d4:f2:5a:c9:bc:f4:ec:e7:61:21:08:68:44:71:5d:be:2d:
da:af:ea:28:07:75:af:4c:6b:04:a7:4f:c5:45:da:c9:95:5a:
fb:9e:e7:52:66:82:1d:fc:92:5a:b5:ff:f7:b4:56:65:93:27:
b1:75:d4:9a:cb:1f:2f:6c:27:e2:31:1f:9e:94:43:d9:54:c1:
d5:05:b2:ee:ee:9e:06:37:5a:0d:ee:1d:c1:0e:f5:3c:96:27:
09:3b:37:59:ba:d6:a2:61:87:90:1c:be:e5:37:b8:e7:a0:9f:
61:6e:af:4b:f9:46:bd:d5:1f:c5:a6:c1:0c:01:83:c4:02:d4:
82:8e:ca:22:7e:92:10:fd:b4:ae:46:6d:08:7c:80:b9:ed:fe:
b0:13:ac:95:4b:db:7b:c2:53:cd:74:8c:20:2d:c5:bc:af:84:
eb:27:d4:38:59:a1:d8:3a:c6:d6:3f:85:17:1d:34:7b:e4:d4:
7e:6b:97:6f:eb:8b:14:9f:a8:3c:87:73:a9:db:ee:f4:96:fe:
e5:6f:54:40:45:17:b1:fd:31:5b:9a:33:e0:b1:ed:81:2c:d3:
c9:93:ce:48:f5:6e:99:15:04:ef:55:23:26:7e:35:31:82:8a:
85:cf:ff:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:20 2026 by rpki-client