
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/SyTUFfM9tysGuS7PKzi_S2cjlZs.roa
File: SyTUFfM9tysGuS7PKzi_S2cjlZs.roa (raw, json)
Hash identifier: +DXMV2OhBcwYrwO3MOIxRVDUF42lc4mpe+6QmAXTsa8=
Subject key identifier: 4B:24:D4:15:F3:3D:B7:2B:06:B9:2E:CF:2B:38:BF:4B:67:23:95:9B
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 146F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SyTUFfM9tysGuS7PKzi_S2cjlZs.roa
Signing time: Tue 31 Mar 2026 07:57:32 +0000
ROA not before: Tue 31 Mar 2026 07:57:32 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5231 (0x146f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:57:32 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=4B24D415F33DB72B06B92ECF2B38BF4B6723959B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ac:38:90:bf:a0:1b:e5:5b:8e:86:b1:8d:4d:
d3:8e:9d:9a:ab:41:e5:05:dd:8e:40:c8:88:9f:3a:
a6:e1:05:0d:39:df:53:21:9e:69:50:ee:2a:14:f6:
9a:1d:db:bc:26:37:de:4e:0c:cd:41:4e:1e:a2:7d:
32:57:ee:f7:70:ee:a9:0a:f9:d3:66:8d:f3:71:a5:
6d:7d:11:7e:25:72:1e:6b:e5:08:3b:2b:f3:ca:a7:
b6:d7:e1:23:35:26:23:89:6c:9b:0b:a2:6d:81:fd:
3f:c5:6c:f3:39:d6:e3:c4:e6:f4:cb:81:e7:01:c5:
81:95:ca:38:52:7d:f2:d4:72:13:09:7b:e6:7f:f0:
2e:f9:4c:87:2e:f9:6a:71:50:8a:f1:f5:db:b0:ec:
aa:66:28:d2:15:86:9e:39:ed:91:11:8c:3c:35:8e:
b7:d8:ff:1d:c7:d8:ea:b4:0e:f2:29:35:a2:82:2d:
1a:1a:42:60:65:d6:3f:65:53:17:55:ff:98:ce:a1:
64:d0:83:d0:ab:bb:36:62:1d:b4:82:18:ed:3f:2a:
36:ed:54:72:40:59:e7:71:ca:26:60:54:17:65:cf:
ff:49:38:d3:b5:c2:32:f7:80:2c:56:61:2a:9c:ac:
cd:28:da:34:fa:9c:41:a1:7c:61:c9:d6:05:bd:1e:
87:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:24:D4:15:F3:3D:B7:2B:06:B9:2E:CF:2B:38:BF:4B:67:23:95:9B
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SyTUFfM9tysGuS7PKzi_S2cjlZs.roa
sbgp-ipAddrBlock: critical
IPv4:
1.79.30.0/24
Signature Algorithm: sha256WithRSAEncryption
31:f6:37:21:af:6f:e2:3c:bf:6a:a5:cd:19:e3:22:c0:de:ce:
80:5f:25:18:75:8f:df:37:75:5c:ab:0d:c0:76:61:8c:d3:d6:
2f:2b:f5:61:ed:65:e9:f3:cd:4b:13:69:c3:31:50:fd:27:61:
6e:78:7f:f7:d5:c8:60:a1:32:8b:c2:ed:da:a8:53:21:89:b5:
d1:09:b2:71:ac:80:b5:be:af:62:27:af:bd:0f:35:c7:59:6b:
67:6e:e2:3a:d7:13:fe:49:a9:c4:92:05:30:d0:56:d5:7e:6b:
c5:49:94:50:10:7f:e8:41:ad:06:7b:74:fb:7f:f6:46:b3:60:
71:5d:0c:09:23:29:40:0c:fd:41:db:23:39:55:b4:50:76:3e:
7e:4f:49:8d:81:01:03:c4:2e:25:1b:ee:eb:eb:83:77:e9:9e:
ab:5e:6a:9e:00:c1:04:8e:c4:e2:80:76:f6:89:18:d9:e4:29:
01:2b:05:5d:d5:9d:a1:92:20:17:be:13:de:93:e5:a6:07:f1:
d6:1a:0c:90:25:57:43:9b:3a:ad:46:f0:33:dd:0c:cc:82:e5:
54:62:2f:09:8b:cf:e5:df:62:45:64:98:6e:fc:c8:6e:0d:ac:
80:63:4b:a3:96:47:6e:f1:f3:0b:3f:a9:2e:0e:00:e3:c2:58:
44:d7:78:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:23:26 2026 by rpki-client