
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/b8bBelxamY5LdvfzACziVlnMcEc.roa
File: b8bBelxamY5LdvfzACziVlnMcEc.roa (raw, json)
Hash identifier: SF0QxTT+ld71ALvtsMEHYa28tv89faYelzsSmPL4tyM=
Subject key identifier: 6F:C6:C1:7A:5C:5A:99:8E:4B:76:F7:F3:00:2C:E2:56:59:CC:70:47
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1790
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/b8bBelxamY5LdvfzACziVlnMcEc.roa
Signing time: Tue 31 Mar 2026 08:04:07 +0000
ROA not before: Tue 31 Mar 2026 08:04:07 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 211.14.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6032 (0x1790)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:04:07 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=6FC6C17A5C5A998E4B76F7F3002CE25659CC7047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:8e:2e:83:7f:84:96:00:4b:74:f0:6a:9a:24:
3c:4e:b9:77:83:9f:20:f4:fc:fe:ed:51:53:9f:6d:
32:9f:c9:de:ee:00:51:0f:e5:0d:f3:57:8e:ab:37:
ae:fa:b5:bd:bb:3e:f4:90:7b:3b:4b:c2:7a:d4:85:
6d:1a:ed:43:fb:72:e3:51:88:29:0a:c6:04:d6:f3:
c8:f2:18:3b:0f:ae:b9:8b:eb:9c:e4:52:6a:10:a3:
9b:ee:35:68:c0:27:df:36:b8:2d:39:e5:cd:26:2b:
3d:d9:b2:c9:9d:b6:32:ae:4e:db:db:7a:a7:6e:0d:
a1:08:64:f1:b2:15:c7:6a:bf:c1:f3:c2:32:c9:1f:
b2:47:9d:c0:3b:ec:b3:19:62:6a:66:84:b3:1f:80:
ba:56:d3:26:9c:93:84:35:f3:be:19:0c:19:18:a1:
6f:8e:c3:0a:65:e4:27:b4:fc:ba:e5:1e:74:00:a8:
18:ae:55:23:5c:74:d9:bf:47:6f:5e:91:39:6a:a2:
02:aa:3b:e2:c7:6e:f5:78:67:f3:88:9c:e2:ee:c5:
73:58:f4:9d:6c:b2:66:89:37:b3:4d:40:bd:7a:da:
b5:fe:6f:81:48:a0:6a:54:fd:b7:e9:81:c1:43:3b:
93:2d:1a:9d:6c:09:91:dc:52:51:88:8f:1f:26:53:
c0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C6:C1:7A:5C:5A:99:8E:4B:76:F7:F3:00:2C:E2:56:59:CC:70:47
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/b8bBelxamY5LdvfzACziVlnMcEc.roa
sbgp-ipAddrBlock: critical
IPv4:
211.14.78.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:74:87:24:af:93:d9:6d:9d:d0:13:da:0b:09:ad:16:ac:a1:
a3:d0:8e:17:f3:13:cd:04:7f:11:a4:7c:59:86:01:9f:54:1f:
3c:2d:48:11:6f:85:b9:fb:69:cf:0a:96:a9:e9:3c:ad:94:76:
9d:44:68:60:98:2b:c8:c7:30:a3:4d:35:20:d7:23:a9:c1:bb:
87:de:fc:c2:62:2f:91:03:93:1e:72:8f:45:97:b8:de:77:bb:
77:fc:d2:59:6e:80:3a:d5:51:02:41:5b:f1:fe:0f:79:f1:4a:
f2:3f:90:c3:a7:47:ea:e2:6b:2c:c7:90:73:46:a0:21:a4:47:
d0:64:77:a6:d1:13:a9:8e:26:8b:94:1a:26:72:3e:33:92:01:
93:60:ab:b6:7c:58:8d:90:23:47:54:77:84:55:b1:23:b6:eb:
a5:33:7a:8a:bd:91:e3:12:92:77:b7:dc:3a:03:40:7b:f8:16:
a7:6c:5a:1a:0f:2c:6d:1c:4f:83:e9:1e:70:5e:70:ba:ba:c8:
0d:d1:92:9b:1e:53:1e:78:d3:50:d9:a7:15:0b:95:ed:c2:0d:
10:34:be:6c:5e:f1:5d:d5:88:b9:4a:76:5c:4a:91:60:79:ac:
f1:b9:ab:d5:4c:9b:7f:50:11:90:51:9c:07:73:67:40:ca:fd:
0f:61:14:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:03 2026 by rpki-client