
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Z5574I3cQkY0yWNZydE6ITFhMNw.roa
File: Z5574I3cQkY0yWNZydE6ITFhMNw.roa (raw, json)
Hash identifier: TGegRLlp6ZQ1wEo38vFGOcei+mdh+GcbibBHu4H0108=
Subject key identifier: 67:9E:7B:E0:8D:DC:42:46:34:C9:63:59:C9:D1:3A:21:31:61:30:DC
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 17EA
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Z5574I3cQkY0yWNZydE6ITFhMNw.roa
Signing time: Tue 31 Mar 2026 08:04:47 +0000
ROA not before: Tue 31 Mar 2026 08:04:47 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.72.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6122 (0x17ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:04:47 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=679E7BE08DDC424634C96359C9D13A21316130DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:77:75:e2:25:18:92:8f:7d:ea:86:41:8b:17:
55:96:19:49:75:49:19:87:f1:4f:cb:c1:4a:93:25:
5d:83:25:88:35:c7:0f:89:42:bd:d0:11:b7:3d:1b:
72:f5:f0:02:c7:9e:6f:83:c2:a8:1c:e3:58:4b:26:
af:8c:55:fa:ed:86:a0:e4:94:26:c9:e7:a2:09:95:
bc:fc:f9:fa:bb:24:71:f7:17:94:6f:6a:4a:a5:6f:
e6:5a:2d:15:54:0d:1c:e8:74:76:7c:ba:87:0e:dc:
fd:ac:3e:2e:22:0d:88:57:1c:b1:15:d8:cd:b0:4f:
cc:96:6e:3d:0b:23:66:0d:38:c9:d5:dc:34:d0:21:
dc:9b:4d:96:c2:bc:0c:2d:40:53:a9:a0:fd:55:f0:
54:7c:89:f7:28:55:f3:b7:ce:c4:91:5c:d6:ff:48:
ba:0c:cc:cf:65:88:b5:2b:df:06:13:5d:89:8a:12:
2e:64:74:51:18:87:19:76:d2:e0:f5:94:52:06:89:
3b:79:09:ec:a1:7d:c9:5b:20:85:e5:02:83:38:cf:
1c:e8:f9:f8:76:59:89:3d:2a:5c:79:54:fe:ee:81:
53:5a:13:3b:86:75:52:89:19:68:4c:45:79:80:1c:
e3:2f:96:5e:0b:4a:d6:f2:eb:c1:b4:ec:1f:ea:89:
a8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9E:7B:E0:8D:DC:42:46:34:C9:63:59:C9:D1:3A:21:31:61:30:DC
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Z5574I3cQkY0yWNZydE6ITFhMNw.roa
sbgp-ipAddrBlock: critical
IPv4:
1.72.14.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:90:6b:d4:2f:09:fb:13:df:bd:a1:50:11:2f:41:79:fe:fa:
21:b3:44:29:83:af:cc:c7:9b:59:75:b5:c7:7d:3f:ea:6f:38:
9b:88:fb:e6:af:21:ac:4f:84:0c:24:78:d3:9f:e0:fd:cb:7a:
ff:fa:25:61:7c:dd:42:59:c2:f7:61:44:78:81:72:ea:53:b1:
da:e4:06:b5:f8:a7:2e:ca:87:b3:b4:af:49:44:35:c8:bc:ec:
16:85:08:80:c8:2e:4e:4f:d1:a8:8a:54:dc:89:c1:5e:4c:9d:
84:2c:0c:2b:15:4c:26:5a:89:0a:19:82:8e:89:7e:32:b8:a5:
60:2f:0f:f3:f8:e7:56:51:5c:f9:50:1e:c2:85:22:8d:97:31:
f1:83:1b:76:3e:ac:3e:dd:bf:ff:90:bf:4c:48:a1:2b:31:20:
24:bc:7f:83:38:31:5e:19:28:97:35:73:38:b6:bd:5f:f3:59:
1c:4d:08:4d:98:41:92:69:38:86:d0:61:c1:13:85:de:dd:40:
f7:0d:61:69:56:f2:51:fe:fe:dd:ec:6f:b5:85:62:7b:ef:ec:
ef:c7:03:24:d3:0b:c0:7c:06:06:3a:a0:e0:24:54:5b:f5:e7:
23:97:51:cc:ea:e5:5b:3e:d6:c2:f7:88:80:05:f7:ca:b6:dd:
63:cc:45:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:36 2026 by rpki-client