
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZxnXTaNT9Yp-ynZzIIbLzERt75E.roa
File: ZxnXTaNT9Yp-ynZzIIbLzERt75E.roa (raw, json)
Hash identifier: T6Jeppnhr6PQBVX7xT6rkUW0MyzZkdjRAV01V7Ri/EI=
Subject key identifier: 67:19:D7:4D:A3:53:F5:8A:7E:CA:76:73:20:86:CB:CC:44:6D:EF:91
Certificate issuer: /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial: A8
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZxnXTaNT9Yp-ynZzIIbLzERt75E.roa
Signing time: Tue 31 Mar 2026 07:55:17 +0000
ROA not before: Tue 31 Mar 2026 07:55:17 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 146.99.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168 (0xa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Validity
Not Before: Mar 31 07:55:17 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=6719D74DA353F58A7ECA76732086CBCC446DEF91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:31:26:69:4b:63:4d:05:e1:25:69:c2:10:7b:
f5:6d:3d:2c:cf:4e:2d:64:73:75:89:8c:68:6f:b8:
a9:28:1f:b9:2d:83:a9:2a:69:e8:91:f3:af:7c:28:
07:88:fd:03:5a:e5:44:62:33:40:8f:53:01:3e:a8:
ad:30:c4:c2:0a:82:c2:d4:a6:0f:2e:b3:95:69:b8:
93:d9:5b:f3:bf:77:99:df:6a:a3:78:20:4d:df:49:
8d:f5:4b:39:a9:79:ae:f5:e7:34:fa:b4:85:83:56:
f5:d8:d4:74:18:d9:07:64:8d:a5:56:95:83:b1:56:
d2:f5:39:dd:3f:d9:98:43:40:cd:47:a1:f4:77:12:
9f:c9:ff:97:19:7d:86:9c:ce:76:ad:75:4a:50:2e:
22:6a:e2:4c:18:52:f2:84:d2:1f:d8:73:17:3d:11:
4c:bd:2b:8c:02:02:e2:75:13:4b:73:37:cf:6d:c7:
d2:0e:28:f2:21:da:07:64:14:4e:26:fd:09:ba:c3:
91:7e:c0:7e:d3:74:7e:c3:0e:51:47:b0:21:7d:4b:
d6:0b:c1:4f:94:64:6d:f4:ef:60:7f:af:33:a6:e4:
34:d1:7d:d0:bb:34:df:db:fa:16:b6:f1:39:db:9f:
34:a1:01:13:98:f2:fa:17:a8:23:74:29:1e:5a:79:
eb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:19:D7:4D:A3:53:F5:8A:7E:CA:76:73:20:86:CB:CC:44:6D:EF:91
X509v3 Authority Key Identifier:
keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZxnXTaNT9Yp-ynZzIIbLzERt75E.roa
sbgp-ipAddrBlock: critical
IPv4:
146.99.0.0/17
Signature Algorithm: sha256WithRSAEncryption
17:7e:eb:1a:9f:e9:22:d7:02:02:d0:f8:2a:72:dd:49:11:ee:
a9:0c:c7:31:c3:a0:c6:30:7e:84:d2:2c:81:02:cc:1d:a7:86:
18:33:4a:90:2b:8d:d1:bc:64:d9:e5:bc:f9:5d:92:e6:53:41:
2e:4e:62:e8:06:43:b4:80:ee:63:c6:e9:72:16:98:b8:91:09:
94:4c:23:dd:c5:05:b1:1a:78:dd:2b:ff:64:44:4a:d8:0a:e2:
32:75:54:e8:94:13:d0:92:7d:46:96:b0:2f:b6:cc:12:e3:b4:
da:bf:e3:63:cb:17:be:84:3e:aa:42:3f:4b:3b:3e:a7:e5:00:
76:57:d7:91:af:1f:b0:72:18:2d:09:1e:4d:c6:8b:e4:bd:01:
7f:35:73:d2:f4:76:e2:7f:4a:b5:02:58:ae:45:77:73:57:17:
48:cf:fa:2d:6d:a4:b1:85:5f:af:59:2e:d9:a6:4e:58:42:aa:
9b:d4:9f:1f:a9:fe:06:0a:00:3f:12:f7:48:6b:25:ee:c3:f5:
89:bd:16:ff:44:5b:96:90:e1:11:f8:51:e6:83:74:dd:a7:01:
cd:46:5e:31:99:2b:a8:4c:e8:f2:46:5b:de:ad:07:24:8a:65:
4e:f7:1b:45:11:ae:e0:ca:4e:da:16:22:8e:ad:60:93:ce:a4:
35:41:5c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:24:08 2026 by rpki-client