
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/W4AehZgVmnvYHFsECbxXDzZAM7w.roa
File: W4AehZgVmnvYHFsECbxXDzZAM7w.roa (raw, json)
Hash identifier: h1HGmI2qBWYHslbSigk4tn3w5ST5kVBcc5tFzJ1Fv00=
Subject key identifier: 5B:80:1E:85:98:15:9A:7B:D8:1C:5B:04:09:BC:57:0F:36:40:33:BC
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 17C6
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/W4AehZgVmnvYHFsECbxXDzZAM7w.roa
Signing time: Tue 31 Mar 2026 08:04:32 +0000
ROA not before: Tue 31 Mar 2026 08:04:32 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 211.14.112.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6086 (0x17c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:04:32 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=5B801E8598159A7BD81C5B0409BC570F364033BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f5:7c:10:14:d5:4f:6d:61:81:3f:5c:20:48:
e2:63:be:b9:ea:a5:17:e1:a2:1d:a3:4c:b9:aa:92:
36:26:73:82:ae:14:f6:02:83:b3:13:15:43:06:7f:
f4:4b:db:e3:0b:33:03:21:08:7e:04:36:d4:3c:54:
48:aa:66:c3:59:8e:70:83:39:57:2b:2b:cc:5c:cd:
3b:a9:ff:63:5d:92:98:a0:ed:c1:eb:22:e7:c7:8c:
59:30:31:b6:a7:14:59:4f:2d:46:07:60:c7:c0:5b:
76:82:b4:72:78:af:9a:ea:20:f7:4d:4c:bd:68:16:
13:98:04:e9:d8:8c:12:a7:72:b9:72:63:70:46:a8:
18:67:5a:78:17:78:cd:5f:19:04:03:eb:20:7b:75:
69:fc:6e:9f:3a:a7:cb:1d:11:a0:12:ec:ae:8c:cf:
53:2d:bc:02:43:45:24:26:4b:29:55:6e:2b:3b:82:
83:b8:41:92:a4:9c:31:c1:f5:65:b6:25:63:f5:2c:
2d:51:6f:8f:9d:be:d9:59:ec:d1:0c:12:3a:e7:8c:
cc:9e:d2:7f:f6:f4:6f:09:c5:45:e3:85:d3:03:55:
c4:97:3f:36:4c:44:08:ab:92:c6:ba:e6:30:ee:fa:
5f:ec:c8:5a:e5:e1:35:44:da:d6:b8:5a:56:9f:aa:
f3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:80:1E:85:98:15:9A:7B:D8:1C:5B:04:09:BC:57:0F:36:40:33:BC
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/W4AehZgVmnvYHFsECbxXDzZAM7w.roa
sbgp-ipAddrBlock: critical
IPv4:
211.14.112.0/23
Signature Algorithm: sha256WithRSAEncryption
18:77:f9:db:27:58:c0:c1:49:6f:a9:97:45:02:c8:17:de:b0:
9a:f3:71:25:8d:d3:c7:36:0a:36:ad:23:24:ba:2b:d9:a5:6b:
c9:19:d2:2e:cc:f2:8a:63:51:7b:f6:80:24:75:9a:fc:ae:28:
04:e2:e0:0d:db:3c:65:c1:db:56:2f:53:63:87:20:c0:45:9c:
1b:3b:ce:8f:1f:ab:ae:20:71:0d:0e:5b:94:7d:5f:e2:76:fc:
2e:af:85:32:13:e0:4f:76:0c:dc:2e:74:e8:3a:1b:df:af:b5:
d6:67:9f:c4:6e:c2:c0:0e:ed:9d:06:16:42:12:90:f1:a9:eb:
1b:5c:7c:56:44:0e:a7:a5:a0:1c:a6:86:dd:18:5f:5c:b5:bb:
f7:4d:5e:19:5f:2c:9d:6c:4c:a5:2e:6c:9d:84:8b:05:9c:50:
65:54:73:bd:5d:b2:ce:29:9f:43:6d:fa:20:6c:3f:30:b1:2b:
26:a0:36:7c:2e:a7:a0:eb:bc:c4:11:ae:c8:ad:25:d1:42:34:
02:4c:76:a3:32:c6:e3:01:e8:4e:8a:bc:ed:5d:68:21:95:a2:
3f:fc:c4:e4:79:be:4a:d1:83:a8:44:c4:e0:9a:a9:f8:7b:c9:
50:fa:8a:c5:d6:53:79:7d:4f:01:60:b9:55:0b:79:34:be:0c:
f2:17:64:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:56 2026 by rpki-client