
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/NvL062VGNpktA8KBcVq8mJwo2zE.roa
File: NvL062VGNpktA8KBcVq8mJwo2zE.roa (raw, json)
Hash identifier: iNuYJ4qGPqJIEzafoTGfNDyPA++SdMYzkPHcqHt/Pm0=
Subject key identifier: 36:F2:F4:EB:65:46:36:99:2D:03:C2:81:71:5A:BC:98:9C:28:DB:31
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1442
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NvL062VGNpktA8KBcVq8mJwo2zE.roa
Signing time: Tue 31 Mar 2026 07:57:12 +0000
ROA not before: Tue 31 Mar 2026 07:57:12 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.78.32.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5186 (0x1442)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:57:12 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=36F2F4EB654636992D03C281715ABC989C28DB31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7b:df:b7:3c:5e:8e:b7:65:83:98:8a:0e:bd:
3d:2d:cc:19:ce:90:74:47:bf:06:16:4d:01:f7:28:
56:6e:1f:86:6b:b1:b1:2a:7e:e8:fc:cc:77:59:92:
15:4f:70:34:f6:b7:c2:23:fa:82:38:d8:05:6b:d8:
20:1f:5a:e5:a9:a2:49:eb:1e:e5:b2:9f:12:f8:b2:
75:e2:dc:5c:69:56:54:3d:33:3b:38:9e:6a:1e:66:
a0:01:a7:61:25:b3:ce:60:59:33:1a:8d:84:9c:ac:
cc:fd:b3:43:30:07:14:88:61:a8:99:3d:53:2e:e1:
e5:e4:a0:26:34:dd:ed:34:60:f6:7a:e5:d2:34:9b:
2a:6a:10:be:5c:d3:e7:b2:a7:55:4c:e4:6c:29:f0:
65:e5:ee:33:6a:16:f1:ae:2e:84:d7:e9:e6:c3:67:
cd:cb:52:1e:df:ab:dc:19:ef:e7:9f:c7:3d:d9:65:
c2:dc:36:8e:b9:f4:49:01:08:ff:aa:ca:04:9d:11:
45:ba:24:b4:cd:a0:71:4a:79:9f:ec:da:90:58:17:
46:5a:79:81:f7:8d:64:cb:be:82:f6:90:0e:b0:d2:
ee:bc:e7:3f:83:d5:23:f8:28:d7:c0:77:e7:72:9e:
78:33:7c:9c:35:fe:06:a3:38:38:a8:c9:bb:a9:a8:
ac:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F2:F4:EB:65:46:36:99:2D:03:C2:81:71:5A:BC:98:9C:28:DB:31
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NvL062VGNpktA8KBcVq8mJwo2zE.roa
sbgp-ipAddrBlock: critical
IPv4:
1.78.32.0/23
Signature Algorithm: sha256WithRSAEncryption
92:6a:3d:46:c4:0e:33:96:7e:65:62:10:ba:82:25:2d:f6:b0:
fe:d9:f6:ec:a7:f1:98:9c:a7:b1:4b:8b:8f:c6:f4:a0:c4:9d:
e0:e0:83:20:0a:c7:ac:7d:d8:a1:8a:ce:e0:b8:4e:bf:77:ce:
86:59:cb:c1:96:58:5f:b9:87:5c:32:f2:ba:b2:aa:75:59:1d:
26:27:2a:4d:18:31:45:1c:0b:e1:ec:40:02:a1:b7:e7:7e:ba:
ad:cc:ad:1a:c2:7b:5a:33:35:11:00:63:47:be:6f:e7:df:76:
a5:5e:30:c0:90:d4:9b:10:9f:9b:64:e2:97:c7:c1:11:64:3d:
45:e1:e5:85:15:59:ec:a5:28:41:9c:7d:73:4a:19:a1:ad:92:
36:d7:f9:87:cd:3b:00:2c:4c:38:e2:8d:0c:57:5b:7f:6c:42:
bd:3c:4b:94:ec:c4:d7:4f:42:c4:8c:44:9f:22:c6:84:8a:23:
3d:8e:20:28:29:ea:08:86:bf:f0:49:31:d8:56:4f:b9:ee:57:
ae:12:e4:2f:70:5a:c7:93:d3:65:6e:83:1c:86:fc:b8:15:dd:
bc:ba:31:e7:28:1b:52:84:e5:41:7c:4b:4b:cc:45:bc:28:ef:
08:5b:4f:04:6f:62:08:ad:81:89:ad:5d:0c:83:6c:b8:cb:d6:
0a:d1:ad:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:56 2026 by rpki-client