
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/dZCehxGIwYB9viqg778bBYy7TnY.roa
File: dZCehxGIwYB9viqg778bBYy7TnY.roa (raw, json)
Hash identifier: LOUJz0KNeI1cT2n+gEhscFGxMvGV8C0YHfX/qkpjN1Q=
Subject key identifier: 75:90:9E:87:11:88:C1:80:7D:BE:2A:A0:EF:BF:1B:05:8C:BB:4E:76
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 178C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dZCehxGIwYB9viqg778bBYy7TnY.roa
Signing time: Tue 31 Mar 2026 08:04:06 +0000
ROA not before: Tue 31 Mar 2026 08:04:06 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.168.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6028 (0x178c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:04:06 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=75909E871188C1807DBE2AA0EFBF1B058CBB4E76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c7:c1:de:ca:41:07:95:be:50:d2:04:77:27:
ae:23:96:dd:51:f3:6f:48:74:c6:4b:59:fa:a2:b5:
f2:e9:db:e4:01:48:72:a3:b8:b3:0b:f3:8f:0a:d1:
f4:9b:42:e0:fd:03:78:0b:44:d6:0b:eb:3e:20:6b:
81:89:eb:51:c3:dc:23:f5:97:7c:75:9f:34:cb:4e:
3a:b5:af:d2:bd:0a:a3:5e:41:4b:fc:ad:e4:81:a4:
73:2d:88:f3:4a:14:11:6e:f2:20:ad:9b:e5:84:60:
fc:41:4e:0b:c9:e7:38:ee:63:f3:90:f6:cd:6a:78:
39:a8:1d:22:ed:74:aa:07:09:5b:03:1b:91:fd:fa:
2f:63:9c:64:45:86:ee:11:90:79:53:78:3c:2e:65:
34:21:db:e6:45:a4:e6:d1:ca:60:e2:22:4c:ef:26:
e1:e9:dc:71:61:9e:a1:de:a1:e5:2a:b1:4d:67:a9:
c0:56:c0:74:03:64:fe:91:b3:3c:9a:0b:d3:22:4c:
ba:57:b1:9e:03:cd:46:26:76:97:a2:df:2a:03:64:
de:ee:31:3e:ff:94:ba:ae:88:4a:f8:75:2e:1d:ca:
2f:35:70:ba:cd:eb:97:1e:ad:02:5c:6b:7a:c4:3f:
43:d4:b5:a7:2f:45:43:81:08:cd:88:2d:6d:53:d4:
77:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:90:9E:87:11:88:C1:80:7D:BE:2A:A0:EF:BF:1B:05:8C:BB:4E:76
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dZCehxGIwYB9viqg778bBYy7TnY.roa
sbgp-ipAddrBlock: critical
IPv4:
1.79.168.0/23
Signature Algorithm: sha256WithRSAEncryption
25:3a:70:66:77:91:7c:73:d9:8e:ad:25:d9:e7:0f:e4:61:4a:
61:5e:74:8b:38:06:c1:12:71:08:ab:4a:f3:79:a6:8d:50:51:
b8:0b:b7:6b:0a:a3:30:65:14:ad:de:e3:f9:43:bb:73:14:58:
8e:30:7c:6b:b4:1d:b6:3d:a2:95:1a:22:17:ab:b2:1f:93:cc:
6a:fb:c7:50:b2:ab:25:eb:f1:1e:9d:e3:c2:2c:ca:16:52:3e:
c0:9f:80:bd:0e:e1:e1:aa:92:8c:27:5e:b9:49:92:12:01:9b:
6e:17:74:61:4b:b7:31:3e:74:bb:f4:35:99:47:34:3d:21:4a:
26:e4:c1:a4:e5:e0:89:1e:50:81:49:aa:01:85:be:d9:17:04:
8e:c8:3d:8c:0a:ab:be:2e:ca:3c:4a:89:5f:a2:78:9d:06:7e:
91:51:5e:f7:11:af:6a:cd:34:db:2f:e8:e0:75:8e:78:03:7f:
e4:98:dd:14:00:aa:fd:9b:bb:49:bb:be:7f:58:25:a9:66:47:
0f:e2:d3:c8:02:e8:b5:2f:4e:a9:90:cc:0c:0b:2e:5a:ee:b6:
ed:0b:da:d9:60:ac:f5:73:df:66:84:ae:97:9c:1c:97:d6:94:
82:67:20:72:51:ae:95:4f:e1:f4:25:7b:0e:dc:79:60:68:a1:
f3:ca:07:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:18 2026 by rpki-client