
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/bDwXdAUWpfZN_q7eE8YzOf-mYis.roa
File: bDwXdAUWpfZN_q7eE8YzOf-mYis.roa (raw, json)
Hash identifier: GQTknZ5iSwORPca9PIhBK1W21L1QRlBPlu5wigoMsGU=
Subject key identifier: 6C:3C:17:74:05:16:A5:F6:4D:FE:AE:DE:13:C6:33:39:FF:A6:62:2B
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1808
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bDwXdAUWpfZN_q7eE8YzOf-mYis.roa
Signing time: Tue 31 Mar 2026 08:05:05 +0000
ROA not before: Tue 31 Mar 2026 08:05:05 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.75.188.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6152 (0x1808)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:05:05 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=6C3C17740516A5F64DFEAEDE13C63339FFA6622B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d2:3a:13:0b:2b:c9:5b:38:84:08:95:9a:03:
62:b1:2d:d4:3f:a4:72:d2:5a:06:06:55:f2:25:b5:
31:5f:0d:ec:ba:f2:58:53:bd:9f:6b:4d:31:e7:71:
cf:69:51:51:8e:8c:00:c4:c4:31:df:ad:73:e3:04:
8a:fa:1e:e1:6e:d9:af:1c:3d:42:e1:8a:a1:d7:60:
a8:d7:d1:81:4b:ea:10:c6:a7:c1:83:06:8f:21:a1:
7a:08:b6:39:cd:48:86:fc:29:6d:e2:b3:b4:c3:56:
61:e2:31:61:16:aa:2c:85:43:00:8e:05:95:24:87:
2d:ea:3a:81:fa:b2:b6:f4:7b:8e:d6:b2:5e:a3:4a:
29:f3:1c:72:86:ec:60:b3:d8:d3:90:23:67:ad:a0:
08:22:b5:59:31:91:5c:ed:ef:f4:2c:9c:28:4b:19:
2c:47:e2:17:3b:5e:5a:0f:a9:ef:94:d6:87:98:d8:
86:f5:81:2f:20:0f:14:02:01:9f:9c:ba:6e:c7:1c:
d8:57:8e:ef:15:01:73:a7:ed:9e:e2:b9:3e:b9:b2:
75:68:5b:d8:90:09:38:71:18:db:b0:ba:5e:0b:b8:
ca:61:2b:5c:0c:3a:d5:a2:fb:63:55:d5:7f:3c:06:
b3:e0:bd:48:05:24:f2:76:ef:d3:a7:43:3f:52:36:
5c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:3C:17:74:05:16:A5:F6:4D:FE:AE:DE:13:C6:33:39:FF:A6:62:2B
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bDwXdAUWpfZN_q7eE8YzOf-mYis.roa
sbgp-ipAddrBlock: critical
IPv4:
1.75.188.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:bf:d6:1e:50:f9:03:fa:20:d1:d8:9a:5b:50:41:c2:3f:f3:
40:8b:35:2a:cd:10:f8:cd:c3:64:08:e4:47:67:ed:e5:00:64:
f4:e4:69:3e:c6:ee:66:f8:67:dc:9d:7c:58:bf:25:b5:6d:73:
4a:52:33:fe:5a:c5:f0:b3:ed:5b:d9:ae:1e:1c:f8:f8:0c:df:
af:57:37:64:bc:32:e8:48:27:8f:8a:85:37:47:ca:93:d0:2b:
82:f5:40:99:55:0e:1a:77:d5:c5:94:67:5b:a6:97:9c:76:56:
11:a4:fd:13:ff:7b:1a:b0:c3:7b:0c:a2:61:a9:7c:b5:18:4a:
18:8f:95:00:fe:a9:01:84:e2:f3:ee:55:ac:43:81:ac:2f:6d:
17:f3:1c:93:28:24:8a:1e:0c:e1:ca:aa:be:50:34:a6:b9:54:
23:17:8b:5b:80:58:8a:84:ce:e4:09:75:c3:33:5a:1b:63:76:
1a:2b:cd:ff:ec:71:b8:73:27:49:03:54:c4:02:ab:2c:34:d9:
36:5d:e2:36:1c:ab:90:18:54:41:1e:b2:5f:4a:16:6d:30:b1:
56:28:95:73:73:cb:46:cf:74:e1:d9:51:f1:34:87:97:b5:ee:
dc:31:b5:7a:18:a2:f2:4e:a5:7c:e0:d9:2f:c4:14:f6:f7:e7:
92:f3:25:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:58 2026 by rpki-client