
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ELPfHMAyvUXYE1t4KiWPC6GrCR8.roa
File: ELPfHMAyvUXYE1t4KiWPC6GrCR8.roa (raw, json)
Hash identifier: BrFRJtIcsNrnqPvAu14c3Q87plIxq8lTq9R3HkZExRU=
Subject key identifier: 10:B3:DF:1C:C0:32:BD:45:D8:13:5B:78:2A:25:8F:0B:A1:AB:09:1F
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1753
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ELPfHMAyvUXYE1t4KiWPC6GrCR8.roa
Signing time: Tue 31 Mar 2026 08:03:36 +0000
ROA not before: Tue 31 Mar 2026 08:03:36 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.72.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5971 (0x1753)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:03:36 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=10B3DF1CC032BD45D8135B782A258F0BA1AB091F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6d:cc:38:62:3d:b5:3b:29:8e:7c:a6:33:83:
92:b7:89:4e:4a:c7:0e:dc:f6:fd:d8:a6:24:f0:71:
d7:90:40:c5:2c:5d:28:a7:e2:a1:8b:8b:c8:70:4e:
e0:ba:b3:ba:83:73:fd:ad:16:a7:1c:5e:ed:d5:47:
fd:01:4c:cb:27:58:71:dc:6b:1b:ac:75:11:d3:3c:
36:98:b1:bd:e5:12:c2:42:7d:0d:66:42:7a:61:ec:
09:70:b9:b4:9b:5d:19:58:13:34:5c:21:97:88:38:
7b:65:c1:17:23:8b:ce:f3:24:de:00:3f:a7:65:04:
46:5b:5d:f2:ff:93:b8:31:8d:ed:d4:aa:f4:97:58:
a6:aa:c8:2f:c3:63:85:e3:ed:bb:e1:da:7b:80:83:
dd:e2:87:77:6c:45:24:32:8b:5e:fe:97:d7:18:f8:
12:3a:32:8b:8f:ad:97:5a:4f:de:e9:a3:b3:55:a7:
00:08:d1:5c:e5:7d:87:2a:87:5f:ea:dd:9a:04:e2:
f6:26:6e:54:83:d2:c0:ea:8f:2e:08:5e:ee:00:5f:
4e:b7:01:c2:af:f3:18:11:5b:a7:bc:8a:7f:d6:71:
57:7c:e0:60:d4:52:41:15:62:59:e9:2a:fb:3a:1c:
aa:b9:08:0e:76:9e:6a:63:1a:8a:87:44:fa:76:2d:
a8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B3:DF:1C:C0:32:BD:45:D8:13:5B:78:2A:25:8F:0B:A1:AB:09:1F
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ELPfHMAyvUXYE1t4KiWPC6GrCR8.roa
sbgp-ipAddrBlock: critical
IPv4:
1.72.11.0/24
Signature Algorithm: sha256WithRSAEncryption
57:ba:38:10:32:b8:0f:d4:c4:ac:78:c8:f6:c2:1a:2d:b2:be:
a0:ac:bb:a7:f1:22:6b:04:d7:93:e5:a2:9d:32:e1:83:e0:eb:
13:40:2c:9e:df:6b:65:82:3e:d2:11:d6:6b:b7:e2:5f:5b:3f:
2f:6b:af:71:d5:0b:e6:ee:e1:c8:b0:e7:cf:94:5f:20:ae:a3:
54:f3:ae:cf:82:09:b0:ae:17:77:dc:40:53:f0:f4:42:29:88:
68:10:6a:4a:71:80:bc:b4:61:c9:3f:6d:f6:38:35:f1:5a:fc:
08:fc:8b:54:33:3f:7b:3e:9e:df:69:6c:e9:d2:08:53:16:bf:
ab:75:70:02:df:a5:bd:69:71:60:31:37:13:d1:84:62:0b:6d:
a7:d4:6d:ac:e7:da:77:f3:1c:a0:d4:94:a8:fc:b4:31:1a:1f:
82:75:52:01:ef:0d:a2:6f:a1:6d:07:b0:03:d9:f5:0a:0c:35:
c0:6b:74:f9:d1:26:e7:6d:4f:e9:4e:ca:d1:8a:a4:12:33:e2:
7d:cb:0e:81:fb:ee:04:e7:43:b3:e3:a5:4c:09:8d:b8:f4:ac:
bd:a9:f0:69:a4:05:26:8f:e3:48:0d:58:67:47:22:02:72:04:
06:e5:70:cc:f0:a3:7f:f7:8b:65:ff:02:08:e6:97:3e:9b:21:
71:4c:44:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:42:53 2026 by rpki-client