
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/GWvCJzXquHO8FG1dzFvquUAGz0k.roa
File: GWvCJzXquHO8FG1dzFvquUAGz0k.roa (raw, json)
Hash identifier: Qazte6Oy320PthAVBGvO0YXpilw3BwGm9HjEWkF3mVU=
Subject key identifier: 19:6B:C2:27:35:EA:B8:73:BC:14:6D:5D:CC:5B:EA:B9:40:06:CF:49
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1817
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GWvCJzXquHO8FG1dzFvquUAGz0k.roa
Signing time: Tue 31 Mar 2026 08:05:16 +0000
ROA not before: Tue 31 Mar 2026 08:05:16 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 220.159.208.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6167 (0x1817)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:05:16 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=196BC22735EAB873BC146D5DCC5BEAB94006CF49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:54:c1:5a:3e:02:1c:8d:68:91:22:60:de:c6:
1c:2e:9a:47:dc:e1:d8:98:94:e3:c0:cc:48:03:f2:
df:b9:a4:b3:01:8a:5e:e0:2d:95:2a:fe:ff:8a:9b:
c0:bf:08:93:47:22:ec:e3:cb:25:3c:f0:62:b1:f4:
92:3e:23:3f:c6:0c:55:d8:0f:67:61:05:72:75:df:
9d:ba:65:e8:37:b0:6d:9c:6f:7f:39:42:9d:d1:48:
b4:5c:bb:27:f0:21:93:b9:11:f0:33:9f:d9:c3:59:
7e:e0:d8:64:f9:90:68:38:32:82:07:d7:47:fb:3b:
3c:55:e8:cc:b5:29:15:36:bb:e7:c0:2a:55:24:2d:
eb:cf:56:e4:aa:86:ce:7d:a3:de:e5:ca:4b:f5:14:
cb:f3:75:f5:87:cf:f5:31:76:8f:f1:6c:2e:39:f7:
4d:f9:f6:35:9b:9f:86:b7:8b:82:44:8f:e2:ab:ff:
ac:06:8a:ea:f8:41:cd:13:34:57:85:3e:28:54:64:
69:cd:b1:46:dd:0b:dd:57:26:ce:74:84:9b:e1:98:
80:aa:24:7f:8b:85:43:c5:e0:51:7e:95:53:d4:ef:
72:86:a4:f2:56:96:48:8a:df:5c:ec:50:7d:84:ab:
d9:46:30:47:94:bc:ff:eb:ae:b3:23:92:4f:73:03:
a1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6B:C2:27:35:EA:B8:73:BC:14:6D:5D:CC:5B:EA:B9:40:06:CF:49
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GWvCJzXquHO8FG1dzFvquUAGz0k.roa
sbgp-ipAddrBlock: critical
IPv4:
220.159.208.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:6f:2b:f2:52:01:af:a4:06:d0:f2:59:a1:c3:f2:04:41:40:
6f:15:36:06:d2:d9:32:0f:d3:43:2c:b8:e8:41:1a:ac:98:11:
67:22:c7:3b:00:58:5f:ad:b2:b6:79:eb:9c:ee:cc:f2:cd:d4:
a3:eb:20:c7:35:5a:5a:f7:e2:a7:4c:b6:71:2b:e6:29:07:30:
8a:70:79:6c:4f:1c:42:4f:c2:a2:4f:b3:a5:fd:be:bd:d8:b3:
aa:2f:28:37:12:0e:80:04:31:7a:7e:f0:4d:69:63:60:76:1e:
32:6a:0f:a7:b5:1e:a1:b3:a8:1b:12:4a:2c:7c:b7:d0:98:2e:
09:75:59:5a:df:ee:eb:ba:6a:47:fb:a1:08:1d:5f:b8:1e:8e:
56:40:7d:5f:8d:bd:8e:54:b6:e5:e2:01:c4:b8:91:83:52:bb:
32:31:e1:e7:7d:f9:77:62:ed:b2:59:ab:1e:15:33:49:81:73:
b1:ed:69:3a:1c:05:e3:84:93:fc:39:0f:58:a8:bf:0e:dd:dd:
42:62:3e:45:a9:af:02:e3:48:93:d3:3c:78:26:6f:7d:94:e3:
f5:6e:61:85:67:2c:70:17:da:8d:01:79:7b:24:6a:32:20:33:
93:aa:62:0a:df:bb:f6:db:75:05:61:87:7f:91:17:34:7b:77:
72:bb:67:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:41 2026 by rpki-client