
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/awoG8T_0ZadAzgAMZP0_6JWnGVg.roa
File: awoG8T_0ZadAzgAMZP0_6JWnGVg.roa (raw, json)
Hash identifier: 8g1U9PdDdtkATLffAFc/M9RHPTCYe4MPAifvL9aNiSU=
Subject key identifier: 6B:0A:06:F1:3F:F4:65:A7:40:CE:00:0C:64:FD:3F:E8:95:A7:19:58
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1561
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/awoG8T_0ZadAzgAMZP0_6JWnGVg.roa
Signing time: Tue 31 Mar 2026 07:59:32 +0000
ROA not before: Tue 31 Mar 2026 07:59:32 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 220.210.0.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5473 (0x1561)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:59:32 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=6B0A06F13FF465A740CE000C64FD3FE895A71958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:90:4a:35:ab:1b:0d:a7:f5:d5:1a:62:95:e9:
24:ad:4a:fd:7f:d0:d4:6e:45:6d:49:9d:ca:0b:89:
ed:0e:f1:d3:db:69:2b:9d:d4:d2:2e:c5:a6:4b:80:
04:02:40:fe:20:12:6b:c2:a5:85:44:84:ea:1d:0f:
a7:4c:7a:ff:ec:50:80:3d:94:98:70:cf:6f:84:47:
f7:08:86:4d:25:7c:46:29:0f:cb:2c:25:77:39:66:
18:05:1d:1f:39:de:35:83:5a:cb:65:25:cf:0a:15:
66:8c:09:25:4e:5e:bd:92:94:33:61:b3:22:a4:31:
65:c0:67:5c:0c:75:46:39:ad:16:47:66:cc:e8:c6:
66:7c:e1:ee:d7:17:6c:50:ad:60:bc:df:b8:10:80:
81:e2:92:e9:67:ab:fc:ca:69:2e:ee:59:43:2d:58:
09:fa:99:d1:02:29:15:b3:69:76:fa:85:da:82:57:
c9:40:f4:00:9e:56:9c:a6:aa:64:97:36:3f:db:5f:
b5:cb:5d:9e:f7:88:bb:d0:2e:42:c4:e9:54:02:17:
65:e2:92:c4:9e:8d:e2:2e:8f:eb:76:e8:dc:69:53:
03:77:82:6d:0c:0b:6d:73:8a:76:27:7e:43:20:7f:
1e:bd:a2:88:cf:e4:00:d2:09:d9:ea:1c:c1:61:4b:
e7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0A:06:F1:3F:F4:65:A7:40:CE:00:0C:64:FD:3F:E8:95:A7:19:58
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/awoG8T_0ZadAzgAMZP0_6JWnGVg.roa
sbgp-ipAddrBlock: critical
IPv4:
220.210.0.0/20
Signature Algorithm: sha256WithRSAEncryption
dd:68:73:47:6a:8e:95:7e:fc:5c:02:15:13:29:53:4f:81:1b:
82:ea:4b:31:0c:a8:65:77:ca:f1:b6:6f:e3:f1:2b:e1:83:89:
1e:97:55:e2:3d:85:74:5f:d5:76:7c:c4:3b:50:1b:1e:c1:74:
ac:26:33:69:d2:04:95:22:91:ba:bc:f0:ea:bf:56:4f:09:09:
e3:30:02:9e:4f:a4:50:57:1d:c6:88:1a:bf:9f:59:be:b1:eb:
b6:10:82:aa:f6:5c:2d:8b:0a:9b:50:3d:1a:f0:e2:db:66:39:
1a:d8:ea:f5:40:2e:1f:d2:71:52:46:02:b5:02:39:2d:2c:a4:
1c:a3:39:33:e4:41:89:5c:b1:05:b4:99:ae:e6:3b:41:20:7d:
fd:9a:af:d2:e2:1a:e1:67:90:a4:3d:14:d0:b4:b6:ec:18:41:
e1:7e:5d:3d:96:3f:24:53:71:63:05:67:67:fe:d0:c5:56:b2:
74:a9:2b:13:51:03:b7:b5:8c:04:7e:d7:e1:54:1b:af:fa:4b:
09:e0:d7:d8:64:df:39:fe:b0:d4:0e:a8:66:ec:a3:41:c6:01:
db:bf:40:10:b2:d0:e1:65:96:c3:7a:8d:7d:bf:d4:76:2e:f4:
ef:1a:10:9e:8e:94:98:15:f5:bd:22:13:4c:cb:a9:00:05:cc:
d8:1d:49:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:46 2026 by rpki-client