
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/DYzanlKGQ9304bfNYtv_qA-CSko.roa
File: DYzanlKGQ9304bfNYtv_qA-CSko.roa (raw, json)
Hash identifier: Tp6paMj7SrkjrcciXgfgGEvUgfwdKPo9FQlnwDkMnZU=
Subject key identifier: 0D:8C:DA:9E:52:86:43:DD:F4:E1:B7:CD:62:DB:FF:A8:0F:82:4A:4A
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 16D2
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DYzanlKGQ9304bfNYtv_qA-CSko.roa
Signing time: Tue 31 Mar 2026 08:02:34 +0000
ROA not before: Tue 31 Mar 2026 08:02:34 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.74.196.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5842 (0x16d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:02:34 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=0D8CDA9E528643DDF4E1B7CD62DBFFA80F824A4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d9:b1:37:7f:cd:39:53:3f:98:e1:f2:6f:0d:
4f:cf:2c:0c:21:8b:f1:22:f3:0e:cf:14:58:ed:1e:
90:d2:52:52:73:ba:60:e4:ef:52:f2:e4:1a:41:0f:
d9:d9:fb:fa:58:f5:46:4b:44:55:52:a9:ae:8c:98:
62:d3:fc:86:59:0b:19:23:e0:3e:82:12:1a:88:ef:
24:8a:bb:32:52:7c:48:8f:d3:86:4e:73:d0:b1:2a:
1e:d7:2c:43:3d:2b:0a:cb:0f:2a:98:a3:8d:e0:06:
db:02:d1:86:25:fa:a1:3e:eb:8c:3c:3b:80:b2:4d:
0d:fb:e9:6f:a3:f4:41:9b:a6:88:94:54:c2:6b:22:
aa:37:df:20:95:89:d0:d8:20:bb:28:13:0a:3a:ce:
8a:a9:0b:38:04:3e:7b:0c:c2:59:7b:98:c0:b2:f8:
01:c5:4f:47:c4:58:a3:78:d2:c4:7e:cd:ae:07:b7:
ea:83:7b:0a:bb:d9:e9:03:69:b4:b6:d7:39:1b:b2:
5b:3b:72:4e:83:99:ac:e0:80:84:53:04:9b:d9:0b:
8f:af:88:4e:da:27:80:fd:f9:ea:ed:3f:71:f6:99:
d3:12:cc:ff:ab:74:59:e9:3f:47:57:08:28:5f:97:
6f:71:80:87:3e:91:4a:fd:d6:23:bd:c3:44:c3:40:
e8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8C:DA:9E:52:86:43:DD:F4:E1:B7:CD:62:DB:FF:A8:0F:82:4A:4A
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DYzanlKGQ9304bfNYtv_qA-CSko.roa
sbgp-ipAddrBlock: critical
IPv4:
1.74.196.0/23
Signature Algorithm: sha256WithRSAEncryption
68:8f:4d:55:15:a9:ab:9d:fb:60:82:4a:bf:a4:71:6d:ac:a8:
c4:07:12:41:98:9c:cd:80:be:03:f1:c6:25:ca:3d:14:b1:a5:
4f:a2:62:56:11:81:eb:b0:10:d3:64:8b:af:fd:3f:a0:f1:a5:
af:18:1a:c6:93:38:ab:1d:dd:24:93:cd:26:b8:4b:3c:34:ee:
b2:96:b0:8f:18:26:8c:1e:5c:4e:e9:21:41:f7:80:5c:a7:90:
60:6e:76:17:2d:5f:45:f5:4f:fe:a9:f9:ae:de:d7:9f:a7:f4:
21:36:df:5b:8f:18:82:3a:ad:d6:db:b5:dc:cb:70:c4:82:6c:
49:04:bc:7f:e7:99:81:7e:1e:8f:57:0b:a0:23:9a:e0:13:a1:
75:ea:4a:d7:63:c0:12:bf:f9:3e:4e:d7:0a:dd:40:8e:fe:41:
0b:11:c9:2d:39:1e:ce:40:26:e8:5e:eb:61:10:5f:7d:fc:d6:
26:1a:7f:a8:2b:07:8e:39:13:b6:6a:64:49:62:b6:63:05:ac:
27:2d:05:04:c7:48:fa:af:35:71:49:75:a4:b1:83:e8:d0:6b:
25:18:39:48:b8:6e:a0:a7:e0:b0:46:31:fb:cc:32:25:d8:65:
9e:92:2e:b2:25:d4:bb:6a:2a:38:fe:84:27:67:fd:ac:c9:0f:
8e:b4:ac:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:31 2026 by rpki-client