
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/HyTsaydN7IuxukX7PRpTHFc5AZI.roa
File: HyTsaydN7IuxukX7PRpTHFc5AZI.roa (raw, json)
Hash identifier: ctr821+fxYrjeaIaKmzUcC7ds+pXCkecbOdRBekjLyo=
Subject key identifier: 1F:24:EC:6B:27:4D:EC:8B:B1:BA:45:FB:3D:1A:53:1C:57:39:01:92
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 171E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HyTsaydN7IuxukX7PRpTHFc5AZI.roa
Signing time: Tue 31 Mar 2026 08:03:11 +0000
ROA not before: Tue 31 Mar 2026 08:03:11 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 220.210.52.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5918 (0x171e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:03:11 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=1F24EC6B274DEC8BB1BA45FB3D1A531C57390192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:93:7f:32:c0:bc:38:73:4e:4e:97:03:20:47:
f2:0f:65:50:d4:22:75:32:a2:dc:c0:51:8d:1e:87:
8a:47:cd:4b:5e:e5:87:35:28:d9:c0:ae:be:f3:11:
c3:86:74:41:c7:fc:2d:b8:6a:be:9c:c2:8d:67:d5:
eb:9c:7b:ef:8c:46:40:99:d9:70:56:4e:61:58:26:
7d:0c:b4:d2:33:7c:ae:32:fc:e6:ba:e1:03:ac:73:
70:8f:5d:67:93:12:4e:f8:a1:04:d3:e5:a7:3a:f2:
98:66:d8:6d:a4:79:c5:33:53:cd:ee:5c:d8:a4:3b:
d7:ec:f5:70:b6:3d:c4:ad:f4:bb:e5:cd:0f:b7:e7:
af:dd:31:8d:a0:94:e0:1d:32:62:e6:4c:82:ad:d0:
06:dc:29:dc:cd:bb:86:db:c5:21:8e:84:0e:14:4d:
ab:02:88:5f:7a:9b:54:32:7f:62:be:08:eb:87:10:
e9:be:47:8f:35:44:50:08:1a:9d:f0:51:60:ca:bc:
48:ce:20:d8:93:b8:f6:56:47:3b:a5:3f:3b:72:04:
a6:88:11:ef:00:5b:76:99:23:97:e6:23:dc:8f:fe:
56:ec:70:64:eb:f6:05:b5:9e:01:2f:e7:03:fe:db:
43:b9:15:42:0c:16:26:75:3c:71:15:5b:82:1f:bf:
c1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:24:EC:6B:27:4D:EC:8B:B1:BA:45:FB:3D:1A:53:1C:57:39:01:92
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HyTsaydN7IuxukX7PRpTHFc5AZI.roa
sbgp-ipAddrBlock: critical
IPv4:
220.210.52.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:5e:33:b1:56:66:96:f9:4d:98:51:f5:14:3b:0b:5f:ca:82:
d6:70:93:d8:e8:9e:ce:7f:de:23:18:c7:51:79:88:28:45:fe:
e6:55:2d:37:3b:7c:b2:53:78:09:f4:4e:54:52:ba:42:ac:bc:
0f:ca:5f:c0:d6:7b:9d:9b:c3:bb:9c:2e:00:46:c0:ad:7f:5b:
13:e1:07:b6:77:c4:6a:a5:6a:a9:a8:a1:69:43:81:4c:0c:a3:
f8:11:51:cc:5b:29:e1:4c:15:d9:18:18:87:01:be:79:66:71:
b2:6e:c3:6a:ff:7f:1c:a7:97:e4:52:5a:8e:2c:00:06:ac:33:
8e:7c:b1:8f:c0:30:58:25:94:ef:61:97:1e:df:3e:8b:d7:b9:
e7:19:85:5e:13:71:7e:7f:d5:37:62:d5:4c:29:2e:96:e5:b1:
4d:f8:3b:72:d7:24:3b:74:fa:20:d2:a1:ab:79:25:84:ea:cb:
f5:3d:f2:af:9f:b2:1e:e7:63:46:4b:35:56:56:40:65:ff:10:
1b:f6:fe:9c:5b:ca:89:fb:61:5b:65:b2:31:4d:b1:6b:24:72:
9c:eb:4b:cb:a1:5a:f3:c6:2e:bd:07:2b:c7:33:40:78:86:58:
e1:44:d9:9e:e7:ba:98:6e:41:d1:8b:be:7f:b8:7d:4d:09:a8:
94:aa:ef:7a
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFx4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODAzMTFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDFGMjRFQzZCMjc0REVD
OEJCMUJBNDVGQjNEMUE1MzFDNTczOTAxOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4k38ywLw4c05OlwMgR/IPZVDUInUyotzAUY0eh4pHzUte5Yc1
KNnArr7zEcOGdEHH/C24ar6cwo1n1euce++MRkCZ2XBWTmFYJn0MtNIzfK4y/Oa6
4QOsc3CPXWeTEk74oQTT5ac68phm2G2kecUzU83uXNikO9fs9XC2PcSt9LvlzQ+3
56/dMY2glOAdMmLmTIKt0AbcKdzNu4bbxSGOhA4UTasCiF96m1Qyf2K+COuHEOm+
R481RFAIGp3wUWDKvEjOINiTuPZWRzulPztyBKaIEe8AW3aZI5fmI9yP/lbscGTr
9gW1ngEv5wP+20O5FUIMFiZ1PHEVW4Ifv8E1AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUHyTsaydN7IuxukX7PRpTHFc5AZIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L0h5VHNheWRON0l1eHVrWDdQUnBUSEZjNUFaSS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALc0jQwDQYJKoZIhvcNAQELBQADggEB
AMFeM7FWZpb5TZhR9RQ7C1/KgtZwk9jons5/3iMYx1F5iChF/uZVLTc7fLJTeAn0
TlRSukKsvA/KX8DWe52bw7ucLgBGwK1/WxPhB7Z3xGqlaqmooWlDgUwMo/gRUcxb
KeFMFdkYGIcBvnlmcbJuw2r/fxynl+RSWo4sAAasM458sY/AMFgllO9hlx7fPovX
uecZhV4TcX5/1Tdi1UwpLpblsU34O3LXJDt0+iDSoat5JYTqy/U98q+fsh7nY0ZL
NVZWQGX/EBv2/pxbyon7YVtlsjFNsWskcpzrS8uhWvPGLr0HK8czQHiGWOFE2Z7n
uphuQdGLvn+4fU0JqJSq73o=
-----END CERTIFICATE-----
Generated at Tue Apr 7 21:01:47 2026 by rpki-client