
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/JixpAa-HN70Q2MZWQReXqIlwpzE.roa
File: JixpAa-HN70Q2MZWQReXqIlwpzE.roa (raw, json)
Hash identifier: PZEWNZrR4grCT1MzqqNnk8MD+nh35XSI+Li3mmh/bjo=
Subject key identifier: 26:2C:69:01:AF:87:37:BD:10:D8:C6:56:41:17:97:A8:89:70:A7:31
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 13AD
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JixpAa-HN70Q2MZWQReXqIlwpzE.roa
Signing time: Tue 31 Mar 2026 07:56:04 +0000
ROA not before: Tue 31 Mar 2026 07:56:04 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.72.4.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5037 (0x13ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:56:04 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=262C6901AF8737BD10D8C656411797A88970A731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4a:6e:fb:9b:d1:4f:70:15:8b:89:ac:f0:0e:
17:bc:ab:8f:b4:ff:32:0c:f9:49:28:80:84:12:2b:
3b:40:b2:72:de:33:99:eb:d9:2e:05:3d:14:45:92:
23:ad:77:ea:4d:42:08:ea:16:1a:73:11:34:e4:f1:
6c:52:00:d2:bb:32:6b:3e:2c:88:3c:d1:f5:b7:f4:
ef:7a:18:f3:ab:46:89:3d:f5:ac:89:40:39:ac:5b:
de:bc:a8:ce:9a:90:fe:3b:c8:7e:26:64:d6:c7:51:
c7:8b:1c:b6:4d:5b:39:cb:10:48:90:35:33:fa:b7:
21:23:81:02:c0:c0:88:21:a9:f6:1d:3d:56:fd:e7:
19:5b:51:23:aa:8b:bd:ff:c3:e8:76:7e:df:25:97:
1b:7d:1d:33:68:e0:8c:25:55:8b:1a:5e:eb:38:db:
ec:0e:fd:27:33:81:33:e1:eb:89:ca:a7:29:24:72:
61:33:d4:36:37:d8:21:e4:ce:d3:bb:1a:f7:fc:77:
a1:f1:0d:4d:2a:36:79:86:8b:e2:71:e2:c9:26:f0:
f0:82:b5:93:6b:13:2d:35:25:ad:6d:1a:cc:df:ec:
f9:cb:dc:86:66:c2:39:aa:dd:db:4e:8a:ee:18:da:
42:0b:fd:d6:46:d0:01:d5:a6:b0:72:0d:e9:a4:be:
08:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2C:69:01:AF:87:37:BD:10:D8:C6:56:41:17:97:A8:89:70:A7:31
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JixpAa-HN70Q2MZWQReXqIlwpzE.roa
sbgp-ipAddrBlock: critical
IPv4:
1.72.4.0/23
Signature Algorithm: sha256WithRSAEncryption
26:41:bc:86:be:ec:78:0d:04:7f:30:c7:8d:cf:80:16:76:a6:
99:92:83:d1:cd:4f:c4:83:96:27:6a:55:f9:46:cd:b4:c8:5a:
e0:85:93:b1:2a:d8:37:07:ce:85:bf:c7:91:e9:79:dd:74:a0:
40:7b:a6:5b:63:84:3b:c0:2e:69:6f:4f:dd:e1:82:ed:19:a3:
b8:05:ca:aa:20:b6:88:25:6e:ab:e1:d4:96:d4:c2:46:2a:48:
1d:cc:22:83:af:32:26:a7:95:b8:8a:ec:97:eb:29:90:2e:83:
89:45:08:60:ef:b5:a7:c0:03:ad:df:2a:0a:00:37:80:26:2d:
a2:ec:ac:9e:88:ef:08:76:b6:00:79:55:44:05:e6:66:03:b8:
21:78:0f:2a:e2:54:83:cf:a0:2b:1c:e1:24:e1:a4:1f:b9:fe:
bb:b3:f9:63:ef:cb:ac:46:c5:56:9b:d9:dd:ee:55:ca:8c:8c:
af:32:77:c1:35:f6:2c:41:85:b1:bc:e3:ab:8c:ef:28:fd:9b:
7a:8e:a3:32:ea:69:91:66:a6:f2:74:fe:02:a7:7d:05:18:39:
cc:ae:9c:f0:92:12:1f:e3:c6:a5:b2:c5:60:40:f1:83:54:9b:
af:04:20:d1:e2:c2:64:fd:2b:83:1b:fd:a2:81:81:05:ca:d3:
cc:41:7f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:51 2026 by rpki-client