
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ec3awyohrtSDhNdNYcuSMpT3_bU.roa
File: Ec3awyohrtSDhNdNYcuSMpT3_bU.roa (raw, json)
Hash identifier: BDu62S4rI1/Y4Zk2l5Rv+CfWPfqtYnFoo3AHNTm53Qk=
Subject key identifier: 11:CD:DA:C3:2A:21:AE:D4:83:84:D7:4D:61:CB:92:32:94:F7:FD:B5
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1404
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ec3awyohrtSDhNdNYcuSMpT3_bU.roa
Signing time: Tue 31 Mar 2026 07:56:42 +0000
ROA not before: Tue 31 Mar 2026 07:56:42 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.75.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5124 (0x1404)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:56:42 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=11CDDAC32A21AED48384D74D61CB923294F7FDB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:54:cd:e3:a1:81:bd:a7:80:38:b5:65:09:f4:
6d:8f:b7:bd:4a:ad:13:ae:53:66:46:92:11:b4:e6:
7a:a8:bf:b8:8e:96:ac:5d:44:2a:ad:75:65:4c:7a:
11:f6:28:bd:10:0e:d9:57:0c:6d:21:44:67:cb:79:
30:af:25:79:af:94:11:58:3a:28:76:5e:9a:9f:5d:
5e:df:b3:a0:bc:b4:fc:4c:56:b5:c8:ad:f6:70:a3:
31:1e:0d:97:06:61:4b:97:a8:9b:48:8e:2e:e2:01:
96:8a:38:c8:ea:bc:b0:e1:ea:40:e7:cc:5f:c2:99:
2f:18:23:f4:5f:41:fc:37:3c:2d:ba:63:c0:e9:17:
13:87:c6:65:f1:58:08:69:93:cb:b4:5e:b9:23:86:
f2:bf:90:4c:d1:4a:80:80:60:c4:07:fb:cb:d1:3f:
67:73:92:00:43:e1:b0:15:48:2a:e2:ab:ea:51:1c:
8b:96:e8:55:2c:0c:fe:17:08:94:fd:7a:81:4f:b0:
69:38:77:2b:67:92:99:54:bb:8c:f9:a8:23:9a:bc:
e2:3c:a0:fb:ba:55:a0:b1:32:c1:08:39:5c:ce:db:
2a:18:95:60:ff:ba:1a:2e:8d:e8:74:fe:c8:05:59:
df:51:59:01:05:b6:77:ca:12:1f:26:06:00:25:a6:
92:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CD:DA:C3:2A:21:AE:D4:83:84:D7:4D:61:CB:92:32:94:F7:FD:B5
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ec3awyohrtSDhNdNYcuSMpT3_bU.roa
sbgp-ipAddrBlock: critical
IPv4:
1.75.236.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:ae:1a:c3:0d:70:96:d9:a6:a8:c8:8b:89:8c:c3:22:a0:0e:
a5:aa:97:e8:00:7a:6c:c7:ac:0b:0d:46:16:94:cf:5e:d7:93:
0d:a1:c2:71:ec:6d:11:f6:2c:4c:09:01:67:54:87:69:5a:a4:
ae:1e:5e:3d:07:fc:32:d0:83:8b:ba:b3:0d:23:85:3c:c5:78:
44:79:94:06:fd:bc:4f:e5:ec:5c:85:8e:81:9e:0f:a8:75:55:
68:38:a9:4a:0d:3d:53:46:27:4b:1f:92:7c:1d:b7:fb:87:10:
e6:fb:bf:7d:fe:b7:26:65:7f:26:75:7e:11:33:1f:c4:5c:f7:
3f:82:d2:0e:d4:ba:50:81:44:18:df:e0:e6:8a:b1:61:e3:e5:
8d:51:8f:22:c8:b7:42:37:b3:0b:57:04:75:b3:66:25:fb:44:
c2:fe:18:07:78:69:f5:70:77:11:a7:21:a6:85:47:95:90:df:
15:74:c8:70:e9:69:ae:df:f7:1c:36:2d:2f:bd:9e:c8:84:87:
56:e0:cd:a5:92:c8:17:47:5c:f6:15:9c:0d:18:9c:b0:35:4a:
cf:d6:d5:bd:30:e8:f0:06:1b:db:29:39:f9:d4:be:53:e2:28:
4d:22:07:64:23:03:3a:dd:cf:e8:3f:8f:61:31:6b:cf:10:79:
cc:26:d8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:08 2026 by rpki-client