
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/cGl936hF3BpTzAROsRL3jAPkCug.roa
File: cGl936hF3BpTzAROsRL3jAPkCug.roa (raw, json)
Hash identifier: y6b5RURP3R+L+Qcsci6EkOU4FmwH0SANYrriS9rPItQ=
Subject key identifier: 70:69:7D:DF:A8:45:DC:1A:53:CC:04:4E:B1:12:F7:8C:03:E4:0A:E8
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1857
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cGl936hF3BpTzAROsRL3jAPkCug.roa
Signing time: Tue 31 Mar 2026 08:05:48 +0000
ROA not before: Tue 31 Mar 2026 08:05:48 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.75.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6231 (0x1857)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:05:48 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=70697DDFA845DC1A53CC044EB112F78C03E40AE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:83:98:47:7f:4e:88:b6:2d:e6:14:83:81:4a:
4c:c9:1e:7a:17:06:f4:ed:77:99:69:b8:58:dd:8a:
82:be:97:a3:09:25:2c:c6:6d:d3:c8:77:da:81:76:
a4:55:8d:f5:5a:1d:2d:8c:8d:dc:e0:5e:49:c9:d2:
95:ba:b6:b0:70:20:4a:71:bb:b4:f9:99:54:d1:a5:
ad:59:71:45:43:a4:67:89:e1:ba:d7:9f:51:5e:ff:
91:be:fb:53:58:ad:18:7a:a5:80:65:f0:b4:1c:f2:
c6:08:70:20:0d:84:ba:ef:b0:7f:28:c6:54:33:c3:
f4:c9:84:b6:ae:78:42:99:1f:01:c8:31:a3:83:f9:
d7:0e:68:82:12:16:e6:6e:3a:cc:ef:44:12:01:8b:
ad:5d:a0:d9:d6:8b:1e:b6:80:3a:b9:f6:92:0f:aa:
2f:fe:41:05:41:cf:f4:56:29:db:a5:b8:59:b2:8e:
78:15:5c:b4:34:31:bf:51:00:4b:88:af:d3:19:67:
58:68:23:e2:c5:94:b7:5d:db:78:f4:e4:8b:8a:4f:
c7:01:b1:f9:1f:46:09:c3:15:65:17:f4:2d:60:bc:
d6:ef:ac:bd:cd:fe:ec:e0:37:42:29:23:17:b4:28:
a3:14:af:b0:a4:0a:57:73:d9:67:8a:14:fc:d8:0c:
05:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:69:7D:DF:A8:45:DC:1A:53:CC:04:4E:B1:12:F7:8C:03:E4:0A:E8
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cGl936hF3BpTzAROsRL3jAPkCug.roa
sbgp-ipAddrBlock: critical
IPv4:
1.75.151.0/24
Signature Algorithm: sha256WithRSAEncryption
82:6a:b8:cf:20:a9:34:4a:53:45:40:37:f7:77:70:c9:4d:8c:
d3:67:bc:f4:16:30:9e:b4:d7:c6:1a:99:22:9b:76:ea:2e:91:
f4:e6:69:2b:e3:b4:65:45:62:e8:4d:53:52:12:cf:43:0b:7f:
1a:ac:16:d1:25:bc:e3:96:25:ba:ba:2a:81:71:10:a9:f5:f0:
05:73:5c:69:f3:a9:d9:ae:66:9b:0f:f2:b4:37:63:4c:7f:c6:
54:de:cc:97:3a:57:5a:dc:35:72:b6:f8:9a:e6:02:c2:0a:2f:
5e:80:11:6f:cc:ef:43:ff:b0:f7:91:24:42:72:19:24:95:60:
97:6c:4b:5d:18:6f:9b:1d:7a:2e:10:19:c8:96:46:92:cb:c5:
69:a7:87:2f:7a:d0:da:ba:1b:06:f3:e3:66:57:d2:8d:1a:c8:
f6:1b:9b:e5:8d:ae:18:bc:0a:40:5a:5f:25:b8:ff:75:c3:55:
ba:fa:ca:48:f8:9e:bd:a8:f0:cd:b5:14:38:a4:dd:a6:21:91:
f5:f0:e3:1a:b9:7f:9c:56:a0:92:11:b4:44:99:99:f5:79:fd:
70:28:b1:99:e5:35:c0:4c:c4:86:3d:2c:6d:e5:d6:d4:c9:c0:
ec:da:77:1f:97:49:9b:1c:71:42:b2:5e:dc:a8:cc:e9:e5:a6:
a3:ad:1e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:40 2026 by rpki-client