
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/GZUwqpUTwTuH0B7KVwULppxtJkU.roa
File: GZUwqpUTwTuH0B7KVwULppxtJkU.roa (raw, json)
Hash identifier: TGoczCkR0NxiyHFkWe1g75egYDmo2OIScxi7PS0Gmy0=
Subject key identifier: 19:95:30:AA:95:13:C1:3B:87:D0:1E:CA:57:05:0B:A6:9C:6D:26:45
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 17DE
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GZUwqpUTwTuH0B7KVwULppxtJkU.roa
Signing time: Tue 31 Mar 2026 08:04:42 +0000
ROA not before: Tue 31 Mar 2026 08:04:42 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 219.114.128.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6110 (0x17de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:04:42 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=199530AA9513C13B87D01ECA57050BA69C6D2645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4f:c3:58:07:da:27:8c:8e:9d:c7:de:98:77:
47:81:b9:1c:fc:17:3a:e2:e2:15:dc:e9:81:0e:e7:
d8:a6:c0:09:9d:d9:01:b7:7f:64:f5:ef:d8:d2:88:
e6:07:6d:3d:61:47:89:ba:52:1d:f4:a7:bb:2d:2b:
08:9a:02:d1:8f:0c:c6:af:50:7e:58:df:a4:7d:92:
1a:f1:06:6e:16:2d:f6:85:54:9c:02:04:21:46:78:
6d:57:fc:70:c5:41:b3:23:d7:de:a6:c8:f0:93:10:
3c:1a:cd:a3:bb:8e:f9:0f:40:db:4c:c2:76:32:60:
b7:47:29:6c:f9:92:64:44:99:6c:2d:8b:bf:72:24:
e5:f5:b1:14:fc:2e:ea:7a:70:43:42:07:5b:25:75:
a9:b8:70:49:b0:3a:b3:81:86:dd:0c:3c:5f:ae:bc:
2d:ad:c7:aa:b0:66:d8:b5:b9:7a:57:81:de:d5:f9:
bd:e5:5e:ca:e4:47:8e:ed:a8:f5:04:0c:39:4f:57:
eb:63:dd:ab:95:ee:a0:3a:8d:74:d4:c2:2f:d0:cb:
fb:df:b1:b3:78:cc:f5:5d:a6:e8:4d:56:fb:4a:7d:
a4:8f:1c:92:0b:b9:47:fa:c6:35:08:89:09:49:3b:
bd:ad:7e:58:cc:db:e1:5f:59:45:55:73:b3:dd:54:
57:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:95:30:AA:95:13:C1:3B:87:D0:1E:CA:57:05:0B:A6:9C:6D:26:45
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GZUwqpUTwTuH0B7KVwULppxtJkU.roa
sbgp-ipAddrBlock: critical
IPv4:
219.114.128.0/20
Signature Algorithm: sha256WithRSAEncryption
6a:33:66:5d:57:aa:b0:18:01:2e:b1:f3:b7:11:54:f5:67:f4:
86:ea:e7:52:ec:b9:f1:a3:f3:cc:d0:71:72:82:ab:37:a9:89:
5a:63:e0:20:d4:3d:ad:4f:7b:a1:94:a4:f8:64:33:b9:c3:df:
84:b3:56:11:25:bc:f2:24:ef:25:25:b4:bc:eb:43:17:80:49:
f9:53:4d:fa:14:a6:d4:39:c5:28:96:24:0a:34:01:8e:77:59:
e7:ca:34:2c:cc:00:df:c6:66:dd:c3:84:55:a4:a0:58:42:6c:
19:53:aa:69:74:5f:e8:55:64:4e:c2:ae:5d:56:1f:76:f2:ad:
cf:2c:ca:5b:87:66:fa:b8:76:41:0b:39:19:f1:e5:e7:1f:2e:
88:a5:84:17:45:80:51:ec:71:2d:22:eb:52:f2:07:fb:ff:2e:
54:5e:d7:6a:4b:2e:85:ca:5d:a7:68:7c:13:47:ed:69:af:ff:
b9:51:07:c5:09:09:07:d0:99:ac:ca:2d:1c:f7:a9:92:4d:4f:
2c:f8:e4:62:be:ab:37:1e:40:a0:87:e0:7e:20:b9:4f:69:88:
5b:69:4c:ad:65:6a:d2:2d:08:e1:f0:a7:d1:1a:97:8a:eb:2b:
18:43:f0:db:44:40:b2:b4:7d:ee:d0:98:e2:b4:46:69:3b:40:
3d:d2:24:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:38 2026 by rpki-client