
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ur14vGUL0faCzk1KJbU2UzTWqyY.roa
File: Ur14vGUL0faCzk1KJbU2UzTWqyY.roa (raw, json)
Hash identifier: ABfw4kcBETnjQL457F43SPgs3EiJ/diuEJhCouYaf8I=
Subject key identifier: 52:BD:78:BC:65:0B:D1:F6:82:CE:4D:4A:25:B5:36:53:34:D6:AB:26
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1704
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ur14vGUL0faCzk1KJbU2UzTWqyY.roa
Signing time: Tue 31 Mar 2026 08:02:57 +0000
ROA not before: Tue 31 Mar 2026 08:02:57 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.76.156.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5892 (0x1704)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:02:57 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=52BD78BC650BD1F682CE4D4A25B5365334D6AB26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:1c:97:91:54:fb:df:10:87:68:f3:eb:ef:5c:
90:10:9b:4c:ce:86:40:0d:c6:59:d6:74:60:3f:25:
53:e0:81:cd:97:95:b6:3d:35:80:0e:65:66:18:2a:
b0:02:7a:17:e2:a5:ca:37:ae:9e:22:c4:7d:fc:7e:
7c:58:c5:29:75:18:c1:eb:23:80:c7:61:a2:69:8f:
89:fb:b8:71:a1:1a:03:32:4c:50:31:b1:ce:b6:65:
61:9d:3c:f1:c2:9b:71:c5:e9:19:fd:1e:0f:33:a6:
66:49:6d:6d:bb:c8:ed:12:df:b8:77:c6:19:ea:ea:
21:d2:5f:e2:0a:6f:30:9e:c6:1d:7a:0c:a3:52:c0:
6a:e0:ad:2b:e8:d8:9d:c8:49:ff:d1:87:1d:e0:8b:
1f:e5:bb:27:6f:93:4d:a1:78:64:e0:6b:f0:0f:a5:
9d:7c:41:5c:a3:28:d7:c5:30:df:82:57:4b:40:76:
f8:f1:45:55:e0:a8:f4:05:73:1b:f1:dc:33:a7:78:
3b:74:ec:d4:d7:a9:13:93:69:c9:d1:39:47:9a:b1:
a6:5e:33:9b:6c:76:ec:7a:7a:c5:32:90:6f:fb:7a:
85:50:a5:ee:cb:9d:0b:a2:68:05:d0:31:11:35:a6:
a0:14:6e:0f:3f:af:76:ec:84:af:a3:52:17:33:c5:
b4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BD:78:BC:65:0B:D1:F6:82:CE:4D:4A:25:B5:36:53:34:D6:AB:26
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ur14vGUL0faCzk1KJbU2UzTWqyY.roa
sbgp-ipAddrBlock: critical
IPv4:
1.76.156.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:8f:d0:b1:70:2d:14:a6:d5:58:94:b0:ef:f4:4a:98:8c:59:
87:43:5f:82:e7:62:dd:f7:f9:bb:19:2b:4f:ef:27:a4:6d:e7:
e1:d4:88:d6:d8:12:2b:fe:e8:75:b6:36:32:11:bf:00:de:dd:
cd:45:4b:8f:b3:2c:51:58:b6:f8:ea:8e:10:41:43:a8:28:c4:
cd:a2:03:f7:d2:0e:c7:46:60:46:bf:3b:c6:6e:14:a1:15:e8:
50:5e:07:9e:61:93:5a:dc:4b:78:54:8b:50:f1:91:d4:95:ff:
86:22:d4:7e:be:a0:1f:a8:a6:0d:f4:b6:5c:4d:77:ab:e1:3c:
fd:71:88:e6:86:f7:51:72:b2:aa:4f:9a:c5:91:81:f9:e9:80:
00:aa:2b:dd:85:de:7b:84:e4:a7:ed:8b:b6:a1:36:db:5b:66:
81:99:82:e0:77:83:46:21:af:1f:6b:14:b1:fd:f5:2c:a5:31:
46:2f:e2:16:3b:07:1e:c3:ea:3e:f2:e7:80:e0:77:87:c1:db:
4b:ee:39:0c:10:7f:99:47:48:b6:88:56:d2:b5:40:71:84:c6:
35:50:9f:3e:a8:b8:7a:3d:90:66:9d:ab:34:96:b7:aa:3e:19:
86:75:20:1d:d0:f2:56:21:60:63:7c:6d:9b:d2:c9:37:b9:33:
cc:84:7c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:27 2026 by rpki-client