
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/D3TYmneqR_YDuR7hnHpHxre2djE.roa
File: D3TYmneqR_YDuR7hnHpHxre2djE.roa (raw, json)
Hash identifier: LFYIYUrNrR3GFdiyOpRWCUJGRLj45BCOIrCQ7HwIvaM=
Subject key identifier: 0F:74:D8:9A:77:AA:47:F6:03:B9:1E:E1:9C:7A:47:C6:B7:B6:76:31
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 14BF
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/D3TYmneqR_YDuR7hnHpHxre2djE.roa
Signing time: Tue 31 Mar 2026 07:58:12 +0000
ROA not before: Tue 31 Mar 2026 07:58:12 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.76.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5311 (0x14bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:58:12 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=0F74D89A77AA47F603B91EE19C7A47C6B7B67631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:62:9a:fc:90:6a:c6:5a:e7:c2:a9:e5:b2:f0:
21:57:8d:45:3c:32:88:72:b3:4d:38:07:74:5c:bf:
76:bb:b9:c1:a9:30:eb:c4:30:81:ae:ad:9f:ce:36:
c4:5d:b3:6d:2b:c1:2c:5e:83:b1:13:a5:01:6c:0a:
a2:90:da:3b:77:9e:16:56:51:bc:2c:76:47:a5:34:
80:36:f3:1e:01:72:6c:11:62:9f:d2:95:82:bb:c1:
2a:c2:f4:25:27:c3:dd:69:7d:ac:0e:8a:a6:76:47:
4c:17:a0:11:2d:86:4a:f2:10:63:fc:de:5c:ad:0d:
7d:a7:e3:65:b5:22:04:fe:86:8b:c9:1c:51:8d:03:
d2:03:9f:e0:e6:af:f3:fe:3e:53:13:84:dc:00:d3:
46:75:84:9f:1c:98:ea:84:00:86:83:08:0b:30:ba:
97:04:de:93:81:9e:fd:8b:ba:53:c0:37:04:15:3a:
5d:73:ef:62:f7:91:00:96:21:ff:0b:32:d7:c2:1e:
52:a7:64:ef:bd:b4:8f:8c:27:e7:64:21:2c:9d:b4:
3e:ae:2b:ee:08:a1:95:ba:2f:3f:4a:f1:66:07:16:
a5:8a:7a:1f:78:5a:ca:cb:df:a3:3b:d2:f5:f3:9e:
4e:b1:41:16:00:d5:3d:b4:cb:85:20:33:a6:46:f0:
18:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:74:D8:9A:77:AA:47:F6:03:B9:1E:E1:9C:7A:47:C6:B7:B6:76:31
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/D3TYmneqR_YDuR7hnHpHxre2djE.roa
sbgp-ipAddrBlock: critical
IPv4:
1.79.76.0/22
Signature Algorithm: sha256WithRSAEncryption
13:66:5a:63:b7:5b:1f:38:45:97:2a:88:f0:e7:41:75:0b:d8:
46:8f:6e:f4:d7:29:08:b5:69:81:d6:6a:8f:46:8b:da:63:e6:
67:a9:94:84:04:39:e3:78:ba:09:cf:d3:d0:fd:05:81:e0:e3:
52:2e:6b:79:f2:ce:b2:b4:a0:d4:e1:b5:54:f0:61:d6:10:a7:
de:8c:7f:d0:4b:e8:6e:34:6c:46:c6:fc:b1:1c:55:23:7c:6f:
30:7d:8d:79:ca:18:e1:8d:82:3e:b2:23:7b:dc:b0:10:1f:a3:
13:c8:f4:0b:b8:28:ba:21:87:fb:3e:38:d3:3f:04:32:3c:fb:
af:86:b0:0a:8c:0c:df:46:c9:92:af:31:6f:43:47:84:b7:03:
e8:5c:ee:ae:97:28:d8:51:12:97:de:87:d8:c6:b6:e3:b7:8c:
24:1d:ca:46:b2:8a:04:ec:b6:9f:9a:b2:a3:05:3e:34:0c:cb:
ae:3d:66:9f:8e:f0:0b:e6:91:2f:5e:99:72:71:fb:ca:81:a0:
43:a2:0f:06:a2:16:29:7b:02:33:9e:04:14:9b:97:af:f3:1f:
63:49:59:2e:a4:de:a5:79:7f:77:53:b4:a0:2c:f2:e1:d8:9a:
6d:8f:e5:3e:1c:ab:f1:47:e1:b1:0b:ac:ed:cb:07:cc:7c:05:
e3:03:3d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:34 2026 by rpki-client