
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/SWTd1gYH781nPMuOHSCOpoR-s-o.roa
File: SWTd1gYH781nPMuOHSCOpoR-s-o.roa (raw, json)
Hash identifier: k0TA0N9vli1VLCTPE7qD8/0+qc9V/oBHOOdFxdA1LGU=
Subject key identifier: 49:64:DD:D6:06:07:EF:CD:67:3C:CB:8E:1D:20:8E:A6:84:7E:B3:EA
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 153C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SWTd1gYH781nPMuOHSCOpoR-s-o.roa
Signing time: Tue 31 Mar 2026 07:59:14 +0000
ROA not before: Tue 31 Mar 2026 07:59:14 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 211.14.118.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5436 (0x153c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:59:14 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=4964DDD60607EFCD673CCB8E1D208EA6847EB3EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1b:0f:8b:b7:4c:29:f5:45:7f:77:a6:d1:f9:
40:c3:a2:2e:b1:aa:07:ea:12:2a:62:3e:49:64:3a:
af:1e:24:40:5e:98:54:5c:ae:86:ed:5e:0c:e8:21:
72:d9:85:b1:7d:03:3c:a4:7e:8d:a2:05:8e:b6:f3:
a3:cd:a2:9f:08:d7:b7:96:ed:00:1b:9c:85:89:99:
cf:df:e6:d8:dd:c2:d5:36:c3:46:20:be:48:35:c5:
3c:6a:f2:89:bc:99:13:68:70:7b:3b:59:f4:05:50:
52:33:f6:5d:17:e5:63:93:c3:e7:2a:f3:4d:09:8f:
08:b7:f0:15:be:07:64:0c:e9:c9:d4:0f:0b:bf:bb:
61:9c:e8:f3:5c:5e:90:e9:47:68:36:b5:9e:ab:f8:
99:9f:77:51:e0:e6:30:e2:87:68:c6:8c:6e:53:24:
e2:d1:16:6f:90:ca:83:75:7e:a9:75:33:9f:af:d0:
a6:db:52:92:db:b0:01:80:83:83:eb:bc:3d:60:19:
05:6a:4f:db:ca:8c:22:5a:dc:93:91:ff:b5:1a:9f:
fd:bf:03:00:99:c1:03:c7:34:ee:81:17:4e:b6:bc:
6a:d0:00:46:df:2f:1e:e7:f1:d4:ba:8e:52:2b:47:
19:09:46:b5:c5:90:74:ac:d8:8e:e5:78:7b:f7:0b:
05:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:64:DD:D6:06:07:EF:CD:67:3C:CB:8E:1D:20:8E:A6:84:7E:B3:EA
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SWTd1gYH781nPMuOHSCOpoR-s-o.roa
sbgp-ipAddrBlock: critical
IPv4:
211.14.118.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:b1:a2:46:63:80:ea:1c:89:f6:d3:af:a8:ff:fe:82:d6:57:
97:9d:fa:0e:c0:6e:07:14:94:9e:1b:65:bd:d4:f0:c5:ef:49:
78:f5:78:83:f4:bc:7a:75:e2:e1:36:26:31:b3:ea:7e:fa:7f:
54:9b:97:ca:46:30:f9:bc:2e:af:c0:42:2b:2b:07:d4:20:1f:
0c:77:2d:52:22:be:e6:6d:36:7f:d7:5a:5c:16:88:e5:3a:aa:
ca:d8:4e:a1:3f:86:9b:34:36:0c:30:0c:7b:c2:8b:cc:e6:ab:
20:ce:32:e1:98:dc:3c:46:7e:bb:aa:6f:ef:fa:1a:6f:a2:a5:
01:75:0d:fc:e2:76:a6:a9:b1:15:f4:dd:b6:b4:d1:f1:2c:2e:
c1:e2:a3:00:75:2d:45:44:b0:e0:b4:c7:54:7d:50:13:32:3b:
2c:2b:25:da:6b:54:e6:99:52:08:c3:a8:bd:09:af:c3:b9:67:
eb:d6:8a:c7:34:9f:2e:d3:2a:83:60:30:11:8e:b2:ce:96:30:
f5:63:9e:55:20:cd:d4:8d:a8:40:e7:6e:57:23:63:da:ca:e0:
98:07:c7:f3:3f:d7:2e:8d:20:74:7e:95:a4:88:6e:35:24:fb:
bc:89:f5:66:87:40:50:2a:27:1e:32:76:04:60:cc:ab:ea:94:
b8:f0:6b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:58 2026 by rpki-client