
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/EMp1oE1bYpIFhGzdppqBtt8h3vc.roa
File: EMp1oE1bYpIFhGzdppqBtt8h3vc.roa (raw, json)
Hash identifier: HTsal9w4N8FpUo0y3twuD3YlWJZHpv3dqofJDh3J6Ds=
Subject key identifier: 10:CA:75:A0:4D:5B:62:92:05:84:6C:DD:A6:9A:81:B6:DF:21:DE:F7
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 147C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EMp1oE1bYpIFhGzdppqBtt8h3vc.roa
Signing time: Tue 31 Mar 2026 07:57:38 +0000
ROA not before: Tue 31 Mar 2026 07:57:38 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.75.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5244 (0x147c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:57:38 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=10CA75A04D5B629205846CDDA69A81B6DF21DEF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2a:87:5e:9f:69:83:dc:e4:ea:d3:75:78:7b:
84:9d:7c:bc:0b:01:43:7f:32:c2:f8:73:8b:5c:0e:
83:b1:5a:a3:d4:49:9a:54:ae:79:e3:6a:1b:19:42:
37:da:cc:6b:7f:b8:41:b2:60:39:96:6f:7a:9e:61:
51:f0:c7:8c:d8:59:72:33:4c:87:d1:9d:51:88:16:
df:57:e9:ac:7d:5e:3b:5e:15:46:7e:9a:be:9d:4c:
37:74:88:89:c7:d5:64:e0:5f:0b:65:b9:24:81:7c:
c8:f2:1e:26:8e:8d:5a:0b:c9:bb:68:fe:f9:d5:c1:
cf:4d:c0:ba:63:5b:eb:ef:32:22:47:ee:a6:49:16:
a2:f7:f9:26:c9:8e:c0:23:35:f6:42:b3:7a:31:63:
f3:f2:ff:7f:16:81:5a:b3:0a:7e:46:b3:ef:2d:5b:
f7:c5:48:fa:48:ce:0e:11:d4:e4:47:d9:0a:83:ea:
f8:99:f5:2e:a2:ca:de:04:03:31:0c:49:21:81:61:
be:bd:57:86:ec:5d:18:a9:7e:2a:4a:25:26:59:9c:
00:67:96:88:f1:51:15:11:b7:21:33:08:1d:22:42:
c1:54:20:ca:67:c8:00:42:75:e8:8c:48:21:43:3c:
47:31:24:3e:f5:56:3e:6a:32:de:fc:21:25:9a:c5:
4f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CA:75:A0:4D:5B:62:92:05:84:6C:DD:A6:9A:81:B6:DF:21:DE:F7
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EMp1oE1bYpIFhGzdppqBtt8h3vc.roa
sbgp-ipAddrBlock: critical
IPv4:
1.75.239.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:45:ca:0e:3a:e9:1a:cc:c0:97:83:2b:00:3e:58:a7:6b:60:
e4:b7:1d:a1:d5:64:f5:6d:71:07:a5:34:ae:27:93:8c:5a:23:
80:46:c6:a5:97:63:67:89:fe:5a:6d:41:96:96:a5:9f:c3:20:
6b:aa:34:40:69:dd:ad:bf:86:27:c2:5f:5b:3e:03:11:5f:d9:
c0:c3:89:04:54:22:71:a5:f4:67:34:08:88:68:6d:35:b0:44:
cf:c6:22:e4:ce:72:69:fe:e8:31:64:fa:b9:2d:9f:db:4c:d5:
74:52:ab:33:a0:1d:a4:48:ff:76:f4:e7:c6:de:d5:ed:24:8d:
48:ff:ef:fd:77:81:f8:56:fb:d9:bf:d3:cf:01:0a:b9:7a:84:
e3:a4:44:48:86:89:9d:f2:04:23:51:c2:cc:a1:d7:45:58:f9:
54:b4:52:e9:3e:81:72:d0:37:7b:ff:58:b2:d7:43:f7:b9:15:
b9:9d:f3:4c:89:74:93:49:ba:32:ba:59:0f:6b:76:f7:3a:72:
34:0b:bc:00:2f:a7:70:00:cb:da:d6:00:ec:d7:2b:e6:72:1c:
9d:f8:90:a7:90:65:e8:7d:91:ec:40:7b:2c:ed:f0:80:ff:48:
c1:51:bb:45:89:1e:cc:63:8a:42:0d:58:4f:06:b1:88:59:5e:
ca:f0:d0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:03 2026 by rpki-client