
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/RkII5dBOuxPLPSiRd7YawNP1kWY.roa
File: RkII5dBOuxPLPSiRd7YawNP1kWY.roa (raw, json)
Hash identifier: ZzkDyMU5BfPECoWEouISOedTEXrDEqxZNgkD+VqBjms=
Subject key identifier: 46:42:08:E5:D0:4E:BB:13:CB:3D:28:91:77:B6:1A:C0:D3:F5:91:66
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 16C7
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RkII5dBOuxPLPSiRd7YawNP1kWY.roa
Signing time: Tue 31 Mar 2026 08:02:29 +0000
ROA not before: Tue 31 Mar 2026 08:02:29 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 211.14.82.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5831 (0x16c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:02:29 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=464208E5D04EBB13CB3D289177B61AC0D3F59166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:de:87:0d:fe:17:a7:42:ae:41:f6:9c:95:cd:
fa:96:60:90:e4:f9:46:2c:79:12:e9:7e:bb:22:ab:
92:cc:6d:35:3e:89:e1:f0:00:3a:86:28:26:c9:0d:
39:90:1f:2d:6c:5e:74:7c:d1:c7:16:65:7c:31:57:
37:a3:34:7f:1c:d2:56:8d:ce:cb:c7:7b:54:21:b0:
fb:fc:8d:4d:c0:a1:3b:e9:83:fc:8b:1a:ac:2f:1f:
bd:0d:55:bd:dd:c8:7f:e3:d3:4e:98:78:7d:cc:b0:
18:f2:82:9f:84:d5:11:80:e5:a0:21:05:c7:d8:63:
99:fc:8c:c8:f3:02:63:ad:20:2c:86:85:50:82:a8:
ba:9f:02:f7:f8:63:fb:f1:f0:3f:76:c5:96:ff:5e:
c8:7f:2a:e9:18:38:6b:3b:a6:53:7a:f6:c0:9d:0b:
95:72:4b:ad:41:13:16:c5:d3:9a:a7:fd:3c:86:08:
1e:2c:d1:9b:3d:ed:75:f3:e2:24:e5:40:81:3d:8f:
46:6d:09:6d:d6:7e:62:fb:cb:54:65:4e:d5:60:60:
a3:5f:c9:33:48:20:ff:26:58:f6:e4:25:f3:1c:62:
72:31:51:d3:1e:ef:65:12:54:49:9a:b0:d3:69:48:
67:50:49:4c:e3:62:75:aa:00:26:9c:65:5f:d6:dc:
13:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:42:08:E5:D0:4E:BB:13:CB:3D:28:91:77:B6:1A:C0:D3:F5:91:66
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RkII5dBOuxPLPSiRd7YawNP1kWY.roa
sbgp-ipAddrBlock: critical
IPv4:
211.14.82.0/23
Signature Algorithm: sha256WithRSAEncryption
87:09:68:62:62:78:ef:42:05:f5:83:63:e9:d3:3e:89:11:be:
34:44:38:6a:51:b4:09:69:4c:5a:2b:b4:28:1c:7e:60:91:4e:
ec:94:d7:04:e3:72:35:3b:8e:69:32:dc:9c:a1:4c:6a:04:91:
1f:2e:22:60:8f:4e:65:d5:43:ac:e2:3b:77:e1:4c:09:25:53:
fd:c3:cf:62:dc:d7:dc:d4:6f:9e:5b:f1:d5:7d:a9:9f:69:1f:
39:fa:89:fb:0b:b4:ed:c1:48:7a:fc:55:e0:af:8b:a7:f5:41:
25:1b:31:75:fe:b5:cf:48:32:ec:08:67:24:d0:eb:76:ee:4a:
ca:a6:b3:c5:16:f0:43:a6:86:a6:d7:bd:f9:6b:d4:c3:64:ce:
67:98:da:0a:71:bb:af:26:a7:e9:28:17:af:e3:05:66:8f:ce:
86:79:f2:30:4b:22:77:e7:06:bc:bd:ae:f4:5c:80:50:d1:3d:
40:d1:f4:4f:29:c2:d8:60:8a:08:07:aa:b6:6e:87:a2:7f:ec:
8c:af:26:7e:de:c0:30:69:24:41:0f:92:17:d7:22:cb:40:e5:
80:d5:ba:4d:09:77:30:9a:67:ba:86:5a:a8:c1:1f:c4:bf:41:
09:87:cb:61:d4:22:f9:e6:52:f4:fd:a2:cb:53:9d:5d:55:f8:
68:d9:86:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:42:52 2026 by rpki-client