
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Uf2wVBpWBgVDGgr2ENEF0rs2x30.roa
File: Uf2wVBpWBgVDGgr2ENEF0rs2x30.roa (raw, json)
Hash identifier: n/baLxego/aKwJwsLgTfP2VcpT5nfWKT07B/v7NyDF4=
Subject key identifier: 51:FD:B0:54:1A:56:06:05:43:1A:0A:F6:10:D1:05:D2:BB:36:C7:7D
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 180A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Uf2wVBpWBgVDGgr2ENEF0rs2x30.roa
Signing time: Tue 31 Mar 2026 08:05:07 +0000
ROA not before: Tue 31 Mar 2026 08:05:07 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.76.24.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6154 (0x180a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:05:07 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=51FDB0541A560605431A0AF610D105D2BB36C77D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ff:5d:34:58:68:95:77:fa:ff:0b:10:0b:de:
25:59:77:ad:c6:a3:b8:a4:82:de:69:9c:7b:12:57:
b7:2b:d6:ff:a3:f2:e5:d7:c4:47:b8:22:7c:9f:f8:
e5:19:8e:82:e2:71:24:e9:10:5a:2c:f0:4d:42:9a:
dd:d4:d6:5e:de:99:e5:6a:59:ce:d8:08:e9:5f:d2:
b4:d8:bc:a7:8f:3d:e8:e0:53:59:23:6d:3c:18:4d:
9e:de:6e:8e:5d:04:c5:b6:17:15:fb:52:49:05:42:
ed:6d:b9:5e:89:8e:fd:16:7e:80:fd:02:ad:23:f1:
8d:d3:28:00:ab:7f:74:0f:7b:1b:26:5d:9c:39:f4:
d6:e1:5d:5c:20:d4:5e:53:4e:87:3f:5c:20:9b:f6:
36:5d:47:70:4f:8b:29:2f:13:33:89:11:25:b3:d4:
eb:45:30:34:91:5e:f2:a3:d7:9d:59:f3:54:c9:c5:
31:3b:13:30:10:3d:3c:c3:04:0e:57:73:1a:e3:12:
78:1a:d6:70:81:a7:3a:14:70:d3:e9:75:2a:45:70:
f7:19:27:04:1a:bd:43:34:4c:1d:33:03:37:32:e4:
a5:55:79:4f:5f:4e:de:a2:c0:7e:d1:2f:f5:c7:38:
28:b9:0f:44:35:cb:8d:a5:e2:4d:0d:9e:4c:57:04:
29:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FD:B0:54:1A:56:06:05:43:1A:0A:F6:10:D1:05:D2:BB:36:C7:7D
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Uf2wVBpWBgVDGgr2ENEF0rs2x30.roa
sbgp-ipAddrBlock: critical
IPv4:
1.76.24.0/21
Signature Algorithm: sha256WithRSAEncryption
47:d4:0c:4a:82:e9:32:58:f9:7c:8a:e7:3e:70:74:69:5f:4f:
94:16:56:fe:f3:cb:d3:87:41:12:bf:1a:f1:eb:78:4d:bb:46:
e0:14:1f:47:76:54:24:cb:22:ca:2d:bb:dc:b5:07:00:91:5c:
37:42:92:d9:a2:7b:75:e8:7a:6b:32:22:16:4c:ef:43:26:26:
f8:7d:ec:bc:43:96:eb:71:cd:f0:7f:7d:7b:68:51:9c:8e:65:
88:a9:0d:7f:5d:44:af:5e:f0:78:33:51:a9:4d:f7:c6:03:1a:
54:af:b2:eb:14:72:f6:5e:d2:bd:55:8a:df:72:14:98:cc:e0:
f8:ab:59:83:3c:4f:cb:67:b6:ca:85:3d:fa:ab:d9:21:b3:3d:
3c:d5:ee:3d:ac:50:c9:48:e3:04:eb:a8:91:51:5e:5f:2b:a9:
5e:31:25:97:fe:c3:16:a8:63:10:b5:4f:7c:31:a3:10:3c:64:
72:41:c8:1c:14:ff:19:6a:ab:53:77:d8:c4:55:0d:9b:b0:b1:
42:60:79:61:1c:89:56:f7:a0:d0:54:33:d8:8b:60:78:53:b0:
f0:de:ef:d8:4e:13:76:0e:de:3d:20:70:9c:30:d9:f3:e0:c2:
61:87:0c:73:b2:94:6a:0c:65:27:0e:4e:ea:49:09:58:36:2e:
d3:0d:33:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:36 2026 by rpki-client