
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IPaCmrYZYUhgcB731X-pRpY0LGk.roa
File: IPaCmrYZYUhgcB731X-pRpY0LGk.roa (raw, json)
Hash identifier: IBscSyclgZw97SuVHGYgud74/FPooU+7Ew0jHcVsOfQ=
Subject key identifier: 20:F6:82:9A:B6:19:61:48:60:70:1E:F7:D5:7F:A9:46:96:34:2C:69
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 141D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IPaCmrYZYUhgcB731X-pRpY0LGk.roa
Signing time: Tue 31 Mar 2026 07:56:52 +0000
ROA not before: Tue 31 Mar 2026 07:56:52 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 110.163.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5149 (0x141d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:56:52 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=20F6829AB619614860701EF7D57FA94696342C69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5a:17:2c:b4:8a:53:f3:3a:4e:75:8f:fa:89:
d3:af:cb:7f:f5:17:4d:7c:6a:80:99:ca:2f:cc:7e:
55:74:a4:26:f2:34:7f:b5:a9:7e:b9:0c:7e:70:98:
6c:a4:88:f5:0f:51:33:33:2e:7d:f2:cb:b2:c3:c2:
06:6e:80:2f:37:26:87:f3:0d:be:52:27:ee:2c:bc:
76:f2:18:42:d2:45:79:28:ec:31:7b:cb:c4:53:3b:
9c:6c:63:78:20:71:b4:13:3a:d6:db:b8:ab:1a:f3:
99:33:0c:f5:77:72:c1:6c:bf:2e:e8:b9:51:30:0e:
fb:3f:02:53:e4:9c:6a:b8:a4:65:59:93:2c:e5:58:
d1:9f:1a:7f:1c:3c:94:64:bc:56:49:bd:69:5f:30:
58:ae:e5:c3:b3:42:08:da:b8:95:6b:ae:e6:48:cc:
07:66:f9:19:8f:7b:e9:d7:18:dc:44:8a:f9:5f:c3:
22:df:e4:73:16:bd:bd:e7:74:01:d4:3f:e5:d6:88:
69:7a:f8:e1:30:28:93:b5:1b:7b:f4:fb:e0:e8:b2:
6b:5e:05:12:8f:66:c3:32:e1:83:b2:03:72:19:cf:
79:50:89:f7:1a:23:f9:a7:b0:5e:70:5e:7a:b7:6d:
aa:01:e9:3f:64:cb:00:5a:84:86:f6:9c:85:d4:6c:
a6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F6:82:9A:B6:19:61:48:60:70:1E:F7:D5:7F:A9:46:96:34:2C:69
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IPaCmrYZYUhgcB731X-pRpY0LGk.roa
sbgp-ipAddrBlock: critical
IPv4:
110.163.12.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:57:3a:85:8b:e2:23:5c:e9:fe:fe:2e:e0:28:f3:38:48:d8:
d9:02:59:1d:67:78:31:6a:7c:d0:81:69:66:1c:08:72:0b:ff:
47:c1:b5:51:b2:c8:cc:37:25:3a:20:f5:5f:ed:e7:d8:fd:87:
a3:a8:e1:82:de:79:e3:29:f6:53:92:8f:41:95:eb:8d:ef:91:
56:5e:84:87:27:fc:8d:40:56:34:fa:c5:97:54:2e:c7:05:6d:
88:0a:65:32:0e:0d:b8:7b:f9:b0:6e:d6:34:42:4b:21:0b:c8:
0f:09:7d:21:84:7f:50:8b:3c:6c:ef:dd:62:6e:ec:83:1d:ea:
76:71:0e:5a:1f:e6:46:fc:35:93:4a:7d:53:bf:02:16:36:1c:
61:77:64:76:a4:bd:81:53:16:2d:85:12:1d:25:05:64:c0:87:
64:a0:d0:45:bc:12:05:cd:54:fe:a4:71:4c:43:b0:4d:0f:7b:
41:5b:20:e7:85:47:27:7c:91:6a:a2:ad:ba:e8:0e:fb:27:94:
3b:86:1c:7a:6e:7b:bf:29:81:a6:e1:85:0b:37:41:7a:47:f3:
b0:fc:16:d5:3a:6c:2f:1f:60:a9:d3:2b:2a:75:44:3d:1a:d4:
1a:30:c0:f0:73:de:54:93:6f:96:8e:74:14:a9:04:5a:7e:c6:
88:36:39:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:24 2026 by rpki-client