
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/RQ9cHqSh2MuehWqXtDp-QYl-QUk.roa
File: RQ9cHqSh2MuehWqXtDp-QYl-QUk.roa (raw, json)
Hash identifier: CmOOLaPStVA7IbKI7pAmStt6WlaGm76Ps8rBW2ORow0=
Subject key identifier: 45:0F:5C:1E:A4:A1:D8:CB:9E:85:6A:97:B4:3A:7E:41:89:7E:41:49
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 182D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RQ9cHqSh2MuehWqXtDp-QYl-QUk.roa
Signing time: Tue 31 Mar 2026 08:05:25 +0000
ROA not before: Tue 31 Mar 2026 08:05:25 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.75.96.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6189 (0x182d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:05:25 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=450F5C1EA4A1D8CB9E856A97B43A7E41897E4149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2a:69:6f:58:9b:da:d7:13:df:9d:76:9a:b2:
99:c9:71:b9:9e:8d:5f:33:00:ba:fa:9a:98:2f:f8:
47:88:95:31:db:cd:65:ff:f6:83:ea:82:35:00:72:
56:8a:60:69:fc:ab:b9:e1:fc:d3:f1:02:37:e9:11:
fd:56:79:c5:ae:5e:d2:a3:96:a9:ac:c8:37:46:eb:
0d:51:ec:be:33:62:fd:db:32:d7:f9:3c:17:a4:f8:
ba:cf:e9:67:bf:89:da:0f:0d:5d:f0:56:26:3d:d7:
02:66:5e:b0:39:4b:19:cd:e2:b2:05:b2:1c:4e:12:
8a:76:92:00:ab:13:e1:e9:24:c4:10:63:7b:b1:3f:
f3:79:b3:88:da:1d:a4:23:10:1f:84:87:69:62:b2:
a1:20:66:c6:b7:16:50:11:7c:be:87:03:28:a1:b9:
a9:cb:43:c7:37:42:ce:6c:7f:9f:79:35:20:d6:d7:
74:35:9e:4f:24:0e:ac:dd:2d:96:e7:34:24:d3:5a:
12:da:d9:a5:88:be:49:68:63:d9:1d:8c:2e:06:ad:
c7:a0:e1:8e:d7:5c:6a:b9:ab:88:94:9e:d6:89:00:
89:33:62:21:fe:05:a2:9f:ea:b6:d7:a2:9c:5d:33:
77:bc:bb:ae:c8:e3:33:9a:a9:82:33:78:a8:8e:d2:
d8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:0F:5C:1E:A4:A1:D8:CB:9E:85:6A:97:B4:3A:7E:41:89:7E:41:49
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RQ9cHqSh2MuehWqXtDp-QYl-QUk.roa
sbgp-ipAddrBlock: critical
IPv4:
1.75.96.0/20
Signature Algorithm: sha256WithRSAEncryption
b9:91:bc:12:39:83:5c:a3:e4:4b:90:c9:a0:3a:c9:7e:5b:2a:
f8:2f:b3:e9:3d:3d:7b:46:eb:1d:8b:c3:50:6b:c5:3b:99:43:
8b:f6:31:33:65:c7:59:02:76:12:10:ed:0a:38:b9:a8:2e:9e:
ab:94:c0:23:69:ca:eb:8f:f7:be:67:5e:e6:45:3d:58:83:1c:
2d:40:d8:0b:f3:e6:96:7b:86:ee:87:2f:d9:cc:44:70:39:0f:
3d:e3:51:88:63:41:ff:f6:34:86:15:48:1c:b7:e3:65:4f:be:
39:a8:24:05:eb:6b:03:9b:95:b0:15:b6:a0:a9:3a:20:8a:6a:
26:50:a9:80:0e:1a:60:74:36:ad:3d:76:0a:c7:d6:ca:a0:c7:
bc:39:c4:c7:62:1a:da:0c:e2:af:08:27:43:95:15:75:02:56:
2e:90:32:fd:e1:92:b9:b1:0a:28:67:40:01:24:21:33:b5:b9:
06:c8:09:a8:ea:7c:3d:44:07:5e:81:c5:d6:a9:6a:8c:82:06:
5e:93:1e:9e:20:c2:b3:43:7d:d8:af:90:9f:68:15:9e:8a:69:
57:bb:90:95:31:d2:62:ef:a2:bd:2a:1e:bf:b8:43:8b:0f:68:
51:5a:72:6b:3e:58:eb:5c:c5:58:3c:2b:a8:4e:98:a3:1b:87:
ea:31:6a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:39 2026 by rpki-client