
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/dfSdzB_up11_7pXphpQL5DqmRc4.roa
File: dfSdzB_up11_7pXphpQL5DqmRc4.roa (raw, json)
Hash identifier: aQ6fsD0j9AnSs/GYCQ5e9yOeT/QUlNPtYCgWcOiTJrQ=
Subject key identifier: 75:F4:9D:CC:1F:EE:A7:5D:7F:EE:95:E9:86:94:0B:E4:3A:A6:45:CE
Certificate issuer: /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial: AA
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dfSdzB_up11_7pXphpQL5DqmRc4.roa
Signing time: Tue 31 Mar 2026 07:55:17 +0000
ROA not before: Tue 31 Mar 2026 07:55:17 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 157.112.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170 (0xaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Validity
Not Before: Mar 31 07:55:17 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=75F49DCC1FEEA75D7FEE95E986940BE43AA645CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d0:f8:97:4c:a5:ab:6a:84:e0:99:fb:77:9e:
45:2e:37:43:71:f0:19:66:a7:96:1c:36:c6:e4:0b:
03:bd:d0:bf:77:a0:8b:7a:f0:12:62:da:83:0a:cb:
8a:70:92:14:29:b3:e8:c7:ae:f0:d0:72:6f:1d:af:
7b:32:a2:82:60:56:8a:27:38:87:f6:0d:60:9c:40:
46:2a:22:aa:b9:5e:78:c1:a7:b8:f9:30:5b:64:32:
42:fd:a8:f2:09:7c:b3:a6:55:c4:26:c5:4f:32:48:
66:42:a6:15:e6:a9:77:43:7c:d3:37:92:46:3e:19:
0e:0e:77:d9:ce:66:3a:50:a1:d9:a1:5a:e9:30:5a:
fc:21:e5:7a:72:81:9b:d9:58:0c:fc:c9:ab:ec:6e:
57:a1:bf:fe:07:57:b2:86:22:af:c9:46:59:22:f6:
80:70:f6:bd:8f:54:19:5c:e3:68:b3:1d:1e:cd:b3:
67:b3:88:e6:04:b4:79:a3:22:2c:2e:41:67:68:3b:
9d:8d:89:20:c5:73:92:51:80:d5:e0:f0:31:d3:f1:
ba:98:45:59:35:63:36:65:8c:dc:f7:c0:56:8d:e6:
de:43:f4:54:1b:09:d9:c4:33:d1:7a:a9:70:91:66:
fe:c6:6e:10:0c:c6:57:39:13:ab:44:ef:47:97:4f:
7a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F4:9D:CC:1F:EE:A7:5D:7F:EE:95:E9:86:94:0B:E4:3A:A6:45:CE
X509v3 Authority Key Identifier:
keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dfSdzB_up11_7pXphpQL5DqmRc4.roa
sbgp-ipAddrBlock: critical
IPv4:
157.112.32.0/19
Signature Algorithm: sha256WithRSAEncryption
83:95:53:ae:d3:e9:38:9f:f2:7c:8c:f2:8a:37:40:79:f9:c1:
c1:f4:0c:7c:52:52:52:cd:42:8b:b9:a3:af:2f:80:cc:74:59:
a4:f3:1c:02:5d:79:86:a4:56:33:25:61:d0:49:8c:b0:00:a4:
58:16:41:10:63:a2:71:9a:26:05:d5:8f:d5:cc:5a:23:85:62:
46:9a:f7:29:df:a0:ef:ba:e4:43:66:a4:6a:f6:dc:72:69:07:
f2:58:65:57:05:0f:ca:4f:ab:28:e6:08:08:9d:ae:5a:c9:dd:
d7:1c:a1:74:2c:4b:14:10:72:b2:d3:43:a6:88:a1:96:5e:a8:
d8:c4:c2:69:71:a9:a8:8a:06:41:2a:87:bd:1d:2f:99:42:49:
0a:85:9e:83:17:de:a2:ee:b9:84:38:6b:c2:00:4f:72:6d:70:
a9:2a:71:c0:2f:98:7d:9b:86:31:df:a8:23:81:11:df:86:e7:
94:48:ac:56:8f:d0:a6:06:f5:82:1b:1e:a2:54:60:03:7a:7c:
78:d4:2f:81:b0:b1:ca:cd:a0:30:5e:71:b0:6b:6c:35:4a:98:
a8:4f:1e:57:b8:c3:90:17:26:f4:b5:a4:67:51:ef:a1:e8:c5:
43:1d:6c:24:89:47:e0:e9:23:1e:b5:d8:2d:6e:b9:f2:7a:a7:
8a:be:89:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:23:42 2026 by rpki-client