
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/eWp1UauUEpxM2ZTXEeaYX8QWNto.roa
File: eWp1UauUEpxM2ZTXEeaYX8QWNto.roa (raw, json)
Hash identifier: WJK3wAf4o61+kxMSITdGGn0Am4zXr1wBhb9cM064bDI=
Subject key identifier: 79:6A:75:51:AB:94:12:9C:4C:D9:94:D7:11:E6:98:5F:C4:16:36:DA
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 156F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/eWp1UauUEpxM2ZTXEeaYX8QWNto.roa
Signing time: Tue 31 Mar 2026 07:59:38 +0000
ROA not before: Tue 31 Mar 2026 07:59:38 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 219.114.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5487 (0x156f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:59:38 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=796A7551AB94129C4CD994D711E6985FC41636DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b8:c0:00:b4:27:06:f4:cd:c5:43:0f:8a:24:
71:54:bd:cd:05:67:e0:10:48:c6:3c:e3:39:cf:01:
f5:53:42:c7:be:01:d3:14:d1:64:9e:2e:f7:bf:19:
63:bb:13:80:25:e5:45:77:93:a1:17:db:43:40:55:
a2:16:76:32:7d:8d:ea:d3:36:85:fc:48:f8:a2:c3:
83:fa:fa:a9:68:38:de:32:82:21:f7:28:44:f9:32:
6f:a8:2e:2c:69:d1:06:05:15:69:41:a2:fb:65:57:
69:17:26:31:18:45:94:5b:5c:9d:05:5c:54:16:d0:
d6:01:4b:41:05:11:48:b4:45:23:e2:cb:a8:dd:33:
c1:ec:3f:d4:96:b6:80:5f:25:e7:1c:50:23:6e:b0:
b2:1b:49:83:9f:af:5f:92:a6:b6:cf:1e:f6:13:7d:
77:28:a8:27:26:7c:87:aa:b3:31:00:60:cb:1d:f1:
ba:1c:20:dd:2d:a4:92:ea:24:1c:cc:0e:db:fe:9b:
5c:4d:7c:f9:7c:12:28:b6:ac:61:e5:8f:e2:d8:89:
9b:0e:b2:95:64:4f:ec:0b:67:f9:de:42:06:e5:08:
e4:e3:6b:1b:2e:1d:ef:7d:97:b7:22:94:93:06:c0:
e6:76:1d:5c:d8:44:ac:f3:8f:33:c9:bf:24:d7:2f:
0b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:6A:75:51:AB:94:12:9C:4C:D9:94:D7:11:E6:98:5F:C4:16:36:DA
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/eWp1UauUEpxM2ZTXEeaYX8QWNto.roa
sbgp-ipAddrBlock: critical
IPv4:
219.114.188.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:c2:a1:13:f4:71:dd:ff:00:89:fa:02:81:9a:1d:26:f3:79:
9c:80:a8:8a:23:1b:48:c6:9e:c0:ad:15:3d:56:03:b6:1d:ea:
7e:3f:18:42:33:a4:8d:00:c9:0f:8e:83:c7:f0:5f:80:8e:b9:
68:53:a2:2b:32:b8:33:47:7f:26:b9:50:8e:49:7b:18:24:e6:
31:9d:0d:d1:a5:40:4e:fd:28:48:79:dc:c2:8e:8a:2c:2b:b1:
80:a9:f9:2a:b7:16:fb:be:2c:02:f6:53:f0:2c:76:77:9d:cd:
2f:40:1a:38:c1:1d:03:d3:c0:aa:1d:40:1b:a1:c6:83:64:2b:
53:af:ef:53:fc:6c:9d:0c:d8:e1:88:79:54:81:fa:b6:f3:9f:
a7:05:84:c6:d2:c0:a3:24:2f:db:bd:34:c9:ca:5f:1d:96:6d:
47:bc:60:ef:0e:ba:01:a0:16:ce:35:61:3c:bd:2f:e7:85:13:
57:a9:5f:8c:70:5d:1a:d4:e5:a1:c7:32:bd:02:16:7e:b1:12:
79:09:a9:15:de:01:8a:d5:e0:46:b1:56:5d:48:bd:7c:ed:b7:
0a:0b:de:db:fd:78:5e:9a:ae:16:b0:ee:87:a0:fb:c9:6c:6b:
cc:62:40:b2:76:30:f1:b6:e3:c9:75:31:37:b0:fe:8a:c3:8d:
b2:13:33:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:13 2026 by rpki-client