
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IhpFHCjgANR6bDP6YLlLVWv2z4c.roa
File: IhpFHCjgANR6bDP6YLlLVWv2z4c.roa (raw, json)
Hash identifier: V5kmWMb01A+4+zGSd/ZBRd08kTRPXOhjxlRxsYurr6E=
Subject key identifier: 22:1A:45:1C:28:E0:00:D4:7A:6C:33:FA:60:B9:4B:55:6B:F6:CF:87
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1531
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IhpFHCjgANR6bDP6YLlLVWv2z4c.roa
Signing time: Tue 31 Mar 2026 07:59:09 +0000
ROA not before: Tue 31 Mar 2026 07:59:09 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.74.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5425 (0x1531)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:59:09 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=221A451C28E000D47A6C33FA60B94B556BF6CF87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:41:d8:ba:3c:a1:99:a5:66:cc:d5:46:7b:f4:
14:e3:05:c6:48:df:e2:30:c2:22:df:49:a1:61:47:
7b:43:91:fc:dd:a5:a7:97:6c:2b:c0:25:02:81:7d:
bb:b3:c3:9e:16:23:0d:63:b8:cd:78:5c:dd:8a:58:
e4:2a:4f:ee:a0:8b:54:c5:49:a6:a2:e0:1d:dd:40:
cb:ba:87:cf:ee:26:d4:88:0c:d7:6f:f0:84:4f:f2:
86:ea:72:84:0b:79:8a:25:0d:27:2c:8e:a3:91:c8:
b9:9c:30:de:2d:30:e8:b3:82:2a:40:3a:50:84:28:
42:9e:e4:be:1d:77:23:3f:9b:00:ba:97:8a:ba:67:
97:c0:13:d4:4a:ef:e2:25:99:8b:43:59:b5:36:93:
a4:6d:9e:d1:a0:c7:3c:e8:c8:2f:6e:41:e2:6b:f4:
66:5e:ad:27:81:5c:d8:43:4d:f3:3f:3a:34:ff:c7:
77:a0:99:e9:c3:77:f8:df:4c:08:00:1e:31:a5:ab:
02:1b:db:21:77:18:c5:98:63:f6:a0:3d:39:d4:72:
19:28:29:c0:11:8d:0c:27:86:38:51:4e:da:82:af:
24:d8:1e:0e:b0:5e:5d:b0:9e:13:c7:fb:4c:ec:a0:
b9:9f:5c:89:76:ed:5f:c5:35:b1:2c:27:e7:2b:3e:
a9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1A:45:1C:28:E0:00:D4:7A:6C:33:FA:60:B9:4B:55:6B:F6:CF:87
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IhpFHCjgANR6bDP6YLlLVWv2z4c.roa
sbgp-ipAddrBlock: critical
IPv4:
1.74.240.0/20
Signature Algorithm: sha256WithRSAEncryption
3f:e8:c0:26:30:21:bb:6b:27:ff:69:aa:3f:5a:57:aa:5c:90:
de:96:4e:16:df:4c:a2:24:a9:f5:39:54:6c:03:d3:99:89:61:
d6:db:ab:9a:91:95:83:6a:af:32:f7:19:dd:8a:54:9e:88:90:
75:39:9a:f1:dd:fd:7e:ea:0e:0e:d1:6b:ca:cf:ed:e9:66:1a:
98:9d:07:4a:22:e9:46:b3:70:11:bb:88:f8:16:84:34:1a:d4:
d7:44:c5:11:04:02:03:a6:2f:c6:0c:94:d4:f2:3f:63:a0:28:
f6:1b:7c:c2:e4:49:9e:66:03:6f:25:f4:10:d9:2c:29:1a:2d:
27:50:d3:07:0c:1a:27:11:c8:8f:31:eb:2e:9f:2c:3c:77:02:
e7:6e:6b:35:89:3d:36:a4:27:15:9c:42:59:22:de:bd:9b:e0:
bc:83:20:4c:86:43:fb:a1:9d:67:57:6f:96:29:b6:35:6a:c9:
86:a3:64:39:c2:6e:8c:69:ce:6d:fc:9c:f5:8f:14:92:9e:1a:
ab:56:a7:cf:69:3a:22:ac:65:52:c6:1e:e5:24:2a:9e:2c:77:
61:c2:11:53:5e:68:65:28:69:2b:4b:fb:d1:eb:35:bc:32:59:
e6:46:42:8e:88:24:53:30:4b:4c:bf:be:a7:13:8f:1e:2a:c2:
de:96:4c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:31 2026 by rpki-client