
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Tt1W7Hi_9DzLAt3dg_ARXsrSd-g.roa
File: Tt1W7Hi_9DzLAt3dg_ARXsrSd-g.roa (raw, json)
Hash identifier: CQ/XEcWUezsxe3xmqfYteErJ9Kp39qOHfW1xfe76da8=
Subject key identifier: 4E:DD:56:EC:78:BF:F4:3C:CB:02:DD:DD:83:F0:11:5E:CA:D2:77:E8
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 13B5
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Tt1W7Hi_9DzLAt3dg_ARXsrSd-g.roa
Signing time: Tue 31 Mar 2026 07:56:09 +0000
ROA not before: Tue 31 Mar 2026 07:56:09 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.72.6.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5045 (0x13b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:56:09 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=4EDD56EC78BFF43CCB02DDDD83F0115ECAD277E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:fe:56:aa:fb:46:28:bb:28:09:4d:0e:68:a9:
33:a9:49:71:16:74:2a:a6:67:ba:d4:40:ad:08:1e:
ae:b2:38:d7:7a:d8:1b:a4:2d:66:93:40:3a:0b:02:
a7:6d:8a:6d:b4:e3:0b:c3:51:e0:5c:6b:4c:59:c9:
76:15:20:fd:8f:82:02:19:47:7f:86:00:2e:c4:4b:
34:89:bb:94:4b:c1:2d:15:09:68:7f:2c:a8:76:55:
2a:c5:a2:3d:68:1e:7d:09:cb:a3:3e:dc:4e:be:a3:
53:6b:ac:8c:81:63:b5:4f:4a:b1:bb:e8:13:c9:54:
79:27:e0:a4:ad:e5:81:5c:14:c6:aa:13:da:5f:10:
8f:b1:ed:15:00:a0:b5:0c:b0:3a:ba:1d:12:60:88:
52:4d:62:23:b9:08:bd:f1:cb:6c:01:fb:86:94:7e:
5d:a5:24:f1:6d:4d:8d:09:ae:c4:70:4a:de:a2:23:
6f:f4:b5:ea:e6:9d:aa:9a:35:03:f2:4c:9b:72:82:
3d:ba:47:1a:72:4b:1d:1a:e5:d1:bf:0e:91:9c:90:
76:df:c6:ec:cd:b2:ff:67:ba:8c:13:85:54:8a:14:
9a:b3:10:94:c8:a9:4c:37:56:17:37:fa:68:af:4c:
66:a9:a1:b2:ed:a4:fe:82:16:e1:66:4d:ad:41:7a:
fb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DD:56:EC:78:BF:F4:3C:CB:02:DD:DD:83:F0:11:5E:CA:D2:77:E8
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Tt1W7Hi_9DzLAt3dg_ARXsrSd-g.roa
sbgp-ipAddrBlock: critical
IPv4:
1.72.6.0/23
Signature Algorithm: sha256WithRSAEncryption
90:ed:bf:02:5f:a8:67:c8:92:e2:94:2e:43:d7:2b:14:3b:87:
e8:10:c2:d3:0a:94:0b:b4:5e:10:7a:b1:f3:23:24:05:b5:92:
57:18:4f:72:52:90:65:15:1b:7c:83:91:3d:28:e9:73:eb:3d:
57:db:52:e2:44:8b:46:54:61:da:72:c5:71:2d:0e:47:53:fc:
58:55:a5:6c:ec:4d:5f:3b:74:f0:f3:25:de:ba:bd:8e:c5:63:
fb:a3:56:6a:ec:5d:11:a8:df:7a:4a:55:1c:5e:0f:97:94:be:
4a:ea:38:01:cb:36:a4:ca:14:2c:20:ca:ea:5c:d4:26:a6:64:
e3:49:99:96:e8:a9:6e:95:8e:2e:c5:64:18:2b:c0:7d:7a:80:
6e:44:95:d5:4e:24:10:eb:f7:94:20:45:8f:d7:2e:0c:11:0a:
de:fd:e4:27:34:3d:2d:e5:38:b1:de:16:b2:3a:bf:5c:4b:c4:
ba:54:3b:b4:d0:ed:e8:7b:f6:72:9b:82:77:e0:2e:96:f2:19:
0e:c2:89:f3:47:d2:d5:c9:90:2f:76:ac:ec:78:f5:a9:c6:b1:
1f:d7:4c:64:be:4e:c9:9f:dd:0a:c7:20:7b:a7:a0:98:64:69:
8b:a5:f1:02:37:15:f7:6d:45:bb:99:4f:a0:26:0d:1a:0a:5e:
f7:c2:4f:97
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICE7UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
NzU2MDlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDRFREQ1NkVDNzhCRkY0
M0NDQjAyRERERDgzRjAxMTVFQ0FEMjc3RTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDx/laq+0YouygJTQ5oqTOpSXEWdCqmZ7rUQK0IHq6yONd62Buk
LWaTQDoLAqdtim204wvDUeBca0xZyXYVIP2PggIZR3+GAC7ESzSJu5RLwS0VCWh/
LKh2VSrFoj1oHn0Jy6M+3E6+o1NrrIyBY7VPSrG76BPJVHkn4KSt5YFcFMaqE9pf
EI+x7RUAoLUMsDq6HRJgiFJNYiO5CL3xy2wB+4aUfl2lJPFtTY0JrsRwSt6iI2/0
termnaqaNQPyTJtygj26RxpySx0a5dG/DpGckHbfxuzNsv9nuowThVSKFJqzEJTI
qUw3Vhc3+mivTGapobLtpP6CFuFmTa1BevslAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUTt1W7Hi/9DzLAt3dg/ARXsrSd+gwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L1R0MVc3SGlfOUR6TEF0M2RnX0FSWHNyU2QtZy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEBSAYwDQYJKoZIhvcNAQELBQADggEB
AJDtvwJfqGfIkuKULkPXKxQ7h+gQwtMKlAu0XhB6sfMjJAW1klcYT3JSkGUVG3yD
kT0o6XPrPVfbUuJEi0ZUYdpyxXEtDkdT/FhVpWzsTV87dPDzJd66vY7FY/ujVmrs
XRGo33pKVRxeD5eUvkrqOAHLNqTKFCwgyupc1CamZONJmZboqW6Vji7FZBgrwH16
gG5EldVOJBDr95QgRY/XLgwRCt795Cc0PS3lOLHeFrI6v1xLxLpUO7TQ7eh79nKb
gnfgLpbyGQ7CifNH0tXJkC92rOx49anGsR/XTGS+Tsmf3QrHIHunoJhkaYul8QI3
FfdtRbuZT6AmDRoKXvfCT5c=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:40 2026 by rpki-client