
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/YiyxLke105U6BleLAfA8eikx4pI.roa
File: YiyxLke105U6BleLAfA8eikx4pI.roa (raw, json)
Hash identifier: BYXls58+DuT1dYeJDWy2SbsZsxSMdZ5oHsExwNE3crg=
Subject key identifier: 62:2C:B1:2E:47:B5:D3:95:3A:06:57:8B:01:F0:3C:7A:29:31:E2:92
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 174F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YiyxLke105U6BleLAfA8eikx4pI.roa
Signing time: Tue 31 Mar 2026 08:03:34 +0000
ROA not before: Tue 31 Mar 2026 08:03:34 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 211.14.68.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5967 (0x174f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:03:34 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=622CB12E47B5D3953A06578B01F03C7A2931E292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ca:59:8a:1b:e9:fa:72:fc:5d:b1:f6:da:68:
e6:9a:0c:33:89:53:58:c6:bc:9d:f2:c0:0a:e8:6d:
a2:ac:82:5e:ae:a4:ee:40:67:b5:c6:30:51:e1:e7:
60:fd:fc:e7:8b:69:dc:ec:6a:6f:dd:ef:c1:86:8d:
18:63:dd:cf:c7:aa:51:17:ec:b5:8b:48:41:4e:d3:
9c:af:09:1f:e1:65:cc:24:74:22:86:83:fe:a0:21:
d5:77:f7:ac:03:c1:0f:5f:eb:d8:53:8d:56:7e:a4:
ef:8b:6f:da:30:91:2d:db:ae:69:90:01:a4:b9:1b:
a9:99:d7:75:9f:58:8e:73:63:07:b0:ae:7e:9f:f3:
35:f4:8d:3b:c0:9b:c6:fa:27:2a:13:9c:25:63:51:
f4:b7:88:bf:ad:47:9a:bf:89:f7:5e:62:11:c5:f4:
2a:84:98:df:95:23:aa:54:07:f5:28:a2:75:80:05:
7e:e8:49:3c:82:70:f6:51:33:4b:f8:96:be:23:81:
80:3b:46:16:01:8e:15:ad:34:71:ea:0b:24:1c:89:
70:c6:69:bd:c1:96:8b:bd:e7:1a:6e:3f:7c:26:e2:
41:ed:14:eb:73:7d:6a:79:3d:14:15:af:c0:2f:c4:
b6:02:9e:d0:98:8e:ec:b6:51:cb:98:56:a0:bc:04:
cc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2C:B1:2E:47:B5:D3:95:3A:06:57:8B:01:F0:3C:7A:29:31:E2:92
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YiyxLke105U6BleLAfA8eikx4pI.roa
sbgp-ipAddrBlock: critical
IPv4:
211.14.68.0/22
Signature Algorithm: sha256WithRSAEncryption
02:a2:43:6b:24:86:3e:6b:cc:a5:e2:7a:ee:8d:93:6f:b8:e0:
73:d8:03:22:4e:e6:80:8a:d6:c3:48:ce:65:45:4d:d4:76:3e:
31:c0:b2:1f:5a:cd:32:94:0e:b3:2f:6d:37:2f:1b:12:3d:f4:
c0:37:e7:d2:7c:ee:0d:07:21:5d:fb:3d:e2:6c:38:c8:0c:d5:
73:c5:56:d1:59:01:89:4b:f0:01:24:ed:c0:ca:0e:35:18:46:
c4:fa:ee:cc:dd:fa:8b:7a:4b:1a:1d:26:55:67:6d:f1:6f:05:
40:ff:59:c0:5e:78:e9:52:76:b0:cb:83:9b:de:d4:de:9b:72:
b9:b4:71:b4:b1:64:29:86:cf:af:0a:f6:14:32:3a:11:9b:75:
52:34:55:fc:14:3a:04:1e:2c:0b:9b:c7:a6:8d:de:90:2c:d6:
dc:8c:dc:0e:92:5e:0d:f6:d9:b6:4f:00:d7:1f:93:d5:47:3b:
f9:69:52:0e:d2:d5:ab:b1:fb:94:ff:2d:93:38:12:a5:a8:00:
e1:8a:ab:83:07:b1:2c:b0:af:2d:a7:d0:43:74:43:1b:dd:f4:
84:bb:d7:cf:36:aa:e4:25:b4:d6:ce:88:95:3f:c5:ac:2b:78:
9b:6d:70:e2:eb:6c:62:c5:64:b7:06:eb:ad:05:ca:49:c9:39:
81:bd:0d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:41 2026 by rpki-client