
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/JY4p_Xa3GPPmd_bfINEaxJRwDyE.roa
File: JY4p_Xa3GPPmd_bfINEaxJRwDyE.roa (raw, json)
Hash identifier: FQyUDW6JM/ARDvJQImFgErnhlPYCOsjvRlk6Tp+JSuo=
Subject key identifier: 25:8E:29:FD:76:B7:18:F3:E6:77:F6:DF:20:D1:1A:C4:94:70:0F:21
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1722
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JY4p_Xa3GPPmd_bfINEaxJRwDyE.roa
Signing time: Tue 31 Mar 2026 08:03:13 +0000
ROA not before: Tue 31 Mar 2026 08:03:13 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 27.230.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5922 (0x1722)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:03:13 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=258E29FD76B718F3E677F6DF20D11AC494700F21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f6:c4:54:c6:d3:3e:96:50:fb:87:f9:49:af:
0d:6e:b0:e2:70:57:9d:1d:c0:cf:18:86:b5:fa:5e:
a4:6f:d7:6b:e5:c9:a5:db:5c:9e:38:36:66:26:ff:
00:f0:4b:b1:00:72:e0:a8:3e:82:c5:72:df:f0:fa:
05:97:73:08:8a:f9:1d:0d:ac:2f:09:d3:0b:51:d9:
c2:94:b9:05:c0:e3:6f:9d:48:82:75:3b:19:05:55:
42:ee:84:ff:c5:63:27:6f:33:84:83:66:00:7a:5c:
9a:1f:b3:35:ce:d5:07:12:1f:3b:e4:c8:33:54:65:
68:23:b1:c3:c5:49:64:1a:09:2b:9d:09:14:99:15:
24:b6:7e:10:78:58:73:58:4e:2b:66:8d:4c:86:ee:
e5:e9:b3:f4:bf:0c:0f:2c:a2:85:d5:f0:a1:13:ea:
01:eb:ef:c0:61:1b:79:93:2b:39:4b:f7:a4:66:c1:
57:b7:eb:9c:a5:d5:61:e7:94:67:7a:05:65:40:de:
d3:81:ee:6e:08:57:39:9c:d2:c4:41:0d:30:f1:08:
c4:6f:87:33:ed:74:9e:72:70:e5:63:48:e2:e3:6b:
45:fd:ec:9e:a5:ff:f0:b0:58:ba:fa:d5:c7:89:ac:
bd:17:b5:9a:4d:11:72:85:8f:a0:db:5b:10:3a:ba:
e6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8E:29:FD:76:B7:18:F3:E6:77:F6:DF:20:D1:1A:C4:94:70:0F:21
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JY4p_Xa3GPPmd_bfINEaxJRwDyE.roa
sbgp-ipAddrBlock: critical
IPv4:
27.230.104.0/22
Signature Algorithm: sha256WithRSAEncryption
24:5e:6a:d8:ca:9b:75:55:f1:71:07:40:26:4c:23:b6:e0:66:
68:86:0b:48:28:0a:66:79:4a:e4:e7:fe:53:67:1c:fa:69:9b:
37:c2:1d:af:3a:be:0a:ff:e1:93:cd:cd:be:8c:6b:6d:fa:b7:
5d:d7:33:5c:ae:22:c8:29:ca:5a:3b:d5:3f:dd:07:23:ee:23:
bb:b7:66:82:08:1e:6b:89:35:88:6e:a8:35:7d:d8:a9:9e:c1:
ee:b1:78:03:8a:4a:b7:2d:b4:2f:0b:3d:38:f3:53:5b:4c:0c:
b4:10:56:2b:10:28:7c:5a:12:40:6a:a6:b9:c6:0f:6d:d9:a9:
16:6e:67:05:ba:69:6f:f1:57:40:da:52:8c:bf:7c:39:1a:9a:
22:c5:23:81:37:17:e6:f2:e0:aa:0f:a3:27:b5:33:43:11:5d:
ef:d8:86:84:ee:2f:27:e7:a1:cb:65:56:ee:62:f5:d5:5b:fa:
7c:25:f2:b6:42:cd:3b:f7:a8:18:2b:b6:a6:20:05:26:38:c7:
0b:19:cf:73:67:0c:fa:a0:70:1e:61:3a:f3:ef:e2:7f:a8:24:
fb:4e:cb:ec:f5:34:3b:8c:5c:f8:ae:ea:a3:5b:96:a0:0f:46:
5b:5b:fe:1d:4e:7d:b3:a2:1d:46:43:ed:38:4b:1c:a9:4d:a4:
63:6f:61:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:12 2026 by rpki-client