
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_xTSsr1dajo2nLxTb81bBvclzPA.roa
File: _xTSsr1dajo2nLxTb81bBvclzPA.roa (raw, json)
Hash identifier: G4bJ230fQIV+KxtllJLp0+7tYMOTU1KKS08kafp3On8=
Subject key identifier: FF:14:D2:B2:BD:5D:6A:3A:36:9C:BC:53:6F:CD:5B:06:F7:25:CC:F0
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1454
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_xTSsr1dajo2nLxTb81bBvclzPA.roa
Signing time: Tue 31 Mar 2026 07:57:21 +0000
ROA not before: Tue 31 Mar 2026 07:57:21 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.70.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5204 (0x1454)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:57:21 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=FF14D2B2BD5D6A3A369CBC536FCD5B06F725CCF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2e:2a:7a:6f:27:41:0c:97:fa:3a:71:6a:06:
a3:55:5b:09:e8:79:21:7f:3a:36:61:e3:63:80:dd:
d3:77:a8:8e:91:48:53:b6:ac:e4:02:98:3d:61:41:
54:bf:b1:04:cd:26:8f:e0:31:3d:94:27:01:59:22:
7d:b0:e3:7d:71:80:cb:52:63:f3:6c:79:9f:93:2f:
63:2d:7d:6d:d8:e8:a2:b7:b2:e2:93:be:c4:e2:cf:
b5:ed:42:07:a8:f4:f5:45:99:9f:fc:83:c4:64:b5:
b6:08:e2:97:b7:25:bd:65:04:00:fb:1e:0a:49:7f:
b1:d1:cc:41:a9:ee:ff:7b:e9:6e:51:da:b3:e1:c0:
3e:3d:7e:ff:97:e8:09:2b:34:be:e4:05:d4:6f:ec:
38:79:5c:99:7e:82:47:a0:04:d9:f5:73:ee:76:75:
a0:d3:c6:06:24:e0:09:b7:40:55:5c:b1:6e:cf:e7:
be:5b:90:12:25:00:d8:c2:29:f8:43:d0:54:32:e5:
8b:68:6c:bf:7c:7a:8c:fe:47:68:11:b0:8d:83:f9:
38:f9:6e:f3:c4:8c:39:56:c1:6b:c2:48:96:46:3f:
42:40:59:37:bb:35:40:4e:a9:fe:9d:e6:3a:11:e7:
46:58:24:b2:c5:f2:0b:61:f2:41:37:ec:18:76:c0:
ed:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:14:D2:B2:BD:5D:6A:3A:36:9C:BC:53:6F:CD:5B:06:F7:25:CC:F0
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_xTSsr1dajo2nLxTb81bBvclzPA.roa
sbgp-ipAddrBlock: critical
IPv4:
1.79.70.0/23
Signature Algorithm: sha256WithRSAEncryption
94:c1:0b:12:fd:a6:e8:68:01:9f:01:1c:ea:87:89:4b:c6:9c:
20:97:dc:2d:f7:c6:8d:52:54:1c:c9:fb:09:d1:5e:40:2d:fc:
d6:f7:73:59:98:21:bc:44:61:47:39:4c:d8:f9:52:c4:18:03:
b8:b4:c7:ee:2c:e0:8a:17:15:84:52:ff:44:e5:a4:ea:a1:2f:
04:2e:6a:06:42:26:8d:26:b6:2d:b8:24:a8:5a:00:82:de:5f:
bd:1a:81:00:31:8b:fb:bd:74:3e:9b:4f:62:99:5d:f1:91:f2:
8b:3b:a3:7c:b9:1f:bc:09:13:25:f7:5a:da:95:c1:2a:0f:cb:
f3:10:33:4e:f9:7b:cc:d5:6a:61:e7:ca:ee:9f:6a:bc:dc:02:
a0:73:b2:bf:af:5a:f1:2c:56:4c:18:bc:d1:c2:72:b0:01:5a:
fa:b0:e3:53:7b:5b:11:4d:27:1b:20:fd:5b:9e:ee:c9:f3:97:
5d:d1:20:43:7d:d5:f3:b7:c9:17:26:d4:58:26:4d:69:fb:b5:
84:8b:e4:49:84:55:03:80:81:d3:15:1e:de:f4:2a:15:2f:2b:
78:6d:ec:e3:f8:fc:03:51:e2:d1:0d:31:31:4a:1f:ca:a9:d6:
37:ec:95:e7:9d:04:92:a2:46:9a:bf:90:3f:74:36:e3:cc:d6:
bf:51:e9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:32 2026 by rpki-client