
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/c0h7TPuQwrVBo2Y3YsyQIud3Kmg.roa
File: c0h7TPuQwrVBo2Y3YsyQIud3Kmg.roa (raw, json)
Hash identifier: qAhky2jyn9R9U9hF75otw/yxT6AG657wXPnQNr2G9pE=
Subject key identifier: 73:48:7B:4C:FB:90:C2:B5:41:A3:66:37:62:CC:90:22:E7:77:2A:68
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1557
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/c0h7TPuQwrVBo2Y3YsyQIud3Kmg.roa
Signing time: Tue 31 Mar 2026 07:59:28 +0000
ROA not before: Tue 31 Mar 2026 07:59:28 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5463 (0x1557)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:59:28 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=73487B4CFB90C2B541A3663762CC9022E7772A68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:89:ce:f7:8e:9e:d2:31:7b:02:a3:dd:53:7b:
a8:4d:ac:3c:d8:9f:a1:b9:c1:eb:e5:d5:dd:8d:06:
6c:6b:6f:c9:4d:71:72:2a:7d:c2:d5:62:61:07:be:
0d:03:50:17:d6:07:22:c9:95:b7:a4:82:a4:f0:33:
7f:ca:ca:3a:ce:09:51:a4:f2:49:a7:5a:e8:28:92:
4b:b0:7a:28:74:dc:32:5a:54:82:65:79:d8:12:61:
e8:66:96:1b:dc:60:90:72:5f:c7:e5:f4:6a:a5:ad:
1e:4d:36:b9:95:33:55:75:df:4d:0a:f3:3d:ba:07:
b1:a9:b2:58:fc:c9:6d:82:d7:69:8a:59:f8:08:45:
59:61:4c:01:33:b2:65:ed:69:a5:73:a9:92:7f:74:
6b:9a:5e:63:e3:d8:57:0b:62:ba:71:19:5e:d2:a2:
91:12:80:81:4e:a1:3e:28:0a:4c:8f:87:51:10:82:
87:99:f9:6a:cc:51:98:d9:f3:ec:36:b5:7f:f9:f4:
fd:71:32:40:3b:2e:e0:17:1c:bc:ad:1f:bb:95:0e:
89:69:fc:79:2f:f7:4c:22:3c:51:2d:5c:ef:93:6f:
c2:de:11:34:82:a4:2b:fe:b2:33:99:94:4b:b6:2c:
22:f8:86:87:0b:ee:d9:86:c0:79:46:d5:53:3a:3d:
cf:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:48:7B:4C:FB:90:C2:B5:41:A3:66:37:62:CC:90:22:E7:77:2A:68
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/c0h7TPuQwrVBo2Y3YsyQIud3Kmg.roa
sbgp-ipAddrBlock: critical
IPv4:
1.79.128.0/19
Signature Algorithm: sha256WithRSAEncryption
50:30:48:34:87:05:b7:99:00:43:36:e2:64:11:fc:a0:79:c0:
4f:21:6d:7d:12:eb:e3:2d:41:86:4f:ca:e0:be:a9:96:2f:58:
9f:1c:72:de:62:a2:43:d9:7f:e3:36:ee:1c:bb:8d:34:e5:09:
a3:6e:0f:8f:97:d5:72:73:1a:8b:7a:79:cb:18:72:49:75:d9:
bc:6e:d0:29:1c:8a:1d:4e:c1:6d:f0:c9:36:b5:f1:8f:3a:04:
e1:9a:ba:7b:6b:b3:d7:ce:3b:1f:65:46:a4:df:b9:a3:c8:63:
81:6a:a4:b5:2a:39:f9:7f:11:fa:50:14:b7:00:f4:92:99:9f:
bf:9e:33:ad:1d:eb:27:6c:97:9d:84:2e:a8:e7:5a:5c:87:48:
f4:1a:7d:f2:ed:d3:d0:00:55:3e:20:ba:b2:f1:04:04:89:5b:
90:f9:b8:14:bb:54:24:75:d2:97:d7:18:dd:ba:73:c2:30:0e:
00:d0:c1:1b:bb:de:88:6c:e2:65:06:89:d0:5b:6e:fd:72:12:
ce:bc:dc:32:f2:cb:eb:7b:f0:b1:9a:ce:d5:cb:30:a5:6a:53:
74:48:ce:75:87:8f:a1:c6:6c:9a:9c:72:b7:22:56:d7:36:8e:
1f:08:cb:32:de:dc:2b:9a:96:e8:df:e1:1e:39:23:06:01:8e:
8c:c3:29:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:30 2026 by rpki-client