
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/VTbeRcW7p7HFLvkqh583UWiz0IU.roa
File: VTbeRcW7p7HFLvkqh583UWiz0IU.roa (raw, json)
Hash identifier: jD2zwomAh1fVnehxr4RBmVDlXEmXJ7u0zBwRiCpHPcU=
Subject key identifier: 55:36:DE:45:C5:BB:A7:B1:C5:2E:F9:2A:87:9F:37:51:68:B3:D0:85
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 140B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VTbeRcW7p7HFLvkqh583UWiz0IU.roa
Signing time: Tue 31 Mar 2026 07:56:46 +0000
ROA not before: Tue 31 Mar 2026 07:56:46 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5131 (0x140b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:56:46 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=5536DE45C5BBA7B1C52EF92A879F375168B3D085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:39:c1:3d:5a:e5:64:99:32:d5:5a:ed:a8:3e:
d1:6d:63:0f:f7:04:be:d3:c4:23:a1:27:48:03:28:
4d:dc:de:80:76:94:8a:dd:a7:43:7c:43:37:96:18:
3d:9b:52:c7:1d:ce:c2:9a:78:53:b6:d4:3c:1f:30:
e8:5c:5e:e8:0a:06:27:a6:e6:d2:f0:3e:2f:8d:ea:
32:8d:14:e9:43:0c:03:12:7a:22:c4:d3:68:d6:b0:
a4:7b:4c:e0:18:82:45:2e:8e:39:0f:0e:14:ba:ae:
9e:92:de:a0:99:9a:fb:e8:96:6e:87:ca:de:31:a3:
4b:2a:b0:39:17:24:59:03:56:a5:8b:0c:07:a9:14:
6a:a4:96:9c:0d:6f:8c:bd:4b:e0:c3:10:90:56:28:
59:34:cb:f6:4a:80:d7:66:4f:03:70:b7:7d:73:6f:
de:22:67:43:51:f6:4e:8a:50:e5:04:4c:30:25:be:
27:67:e0:46:8f:fa:b0:00:70:89:97:d1:c2:d0:67:
16:73:f8:94:b5:7d:e0:59:99:d5:e7:68:a4:ac:fe:
de:6f:4a:fc:a3:be:4b:ee:bd:26:64:c1:32:52:ef:
d6:c3:3c:d4:18:79:01:47:78:b5:78:d0:d6:9a:35:
45:25:23:9b:9d:6c:94:2a:a5:46:c6:fb:ac:42:85:
e3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:36:DE:45:C5:BB:A7:B1:C5:2E:F9:2A:87:9F:37:51:68:B3:D0:85
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VTbeRcW7p7HFLvkqh583UWiz0IU.roa
sbgp-ipAddrBlock: critical
IPv4:
1.79.4.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:f4:6d:c6:a3:75:ab:0c:ab:82:b8:13:59:4a:a4:0c:1e:0b:
85:cf:28:cb:1d:c9:59:17:97:b4:c7:dc:9d:ac:44:95:5e:71:
38:d7:ee:a7:4c:5f:16:2c:d2:46:9e:90:8d:4d:e1:a1:d3:ba:
6a:9c:75:10:50:5b:2d:a0:90:77:93:64:cb:55:19:b3:40:a8:
bd:4a:42:fc:7b:fb:c4:cc:8a:f4:52:0a:74:d3:40:e8:27:9a:
b1:3d:7e:c4:4e:30:3b:63:1b:06:e2:dd:04:66:e3:9e:51:a0:
7c:50:65:2b:f0:3c:e5:44:90:e7:5f:57:3d:36:1f:c6:71:6b:
3e:22:09:43:df:31:22:3b:b7:81:25:8d:d0:6f:d0:e6:a7:77:
73:f7:77:82:4c:35:a1:76:8b:f0:93:35:6b:a6:58:20:28:79:
8d:db:72:8c:f7:c8:84:c7:4a:87:79:be:bf:33:c6:2e:5e:41:
7b:5c:4e:cc:c0:9c:91:79:24:66:3b:e1:fc:c7:05:fd:c6:12:
99:2d:15:4d:0a:4e:1d:9e:54:44:34:ea:f0:a1:fe:2c:fe:78:
19:d7:8b:36:79:31:d0:51:f5:11:74:30:5a:92:cc:06:98:77:
ae:40:cc:c0:1d:a5:7e:4a:1f:fa:c8:fb:29:43:31:0b:d8:b0:
05:30:e8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:37 2026 by rpki-client