
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/gSItXZQnHGLgp0b5B7KKsSa74vo.roa
File: gSItXZQnHGLgp0b5B7KKsSa74vo.roa (raw, json)
Hash identifier: idqib1YaT0X5v5pmfh4nH1mk9fHA4SgPNBXdHWjlPq0=
Subject key identifier: 81:22:2D:5D:94:27:1C:62:E0:A7:46:F9:07:B2:8A:B1:26:BB:E2:FA
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 152D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gSItXZQnHGLgp0b5B7KKsSa74vo.roa
Signing time: Tue 31 Mar 2026 07:59:06 +0000
ROA not before: Tue 31 Mar 2026 07:59:06 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 220.159.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5421 (0x152d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:59:06 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=81222D5D94271C62E0A746F907B28AB126BBE2FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:09:19:ac:aa:d4:1c:19:f4:30:1e:90:07:5d:
1d:3f:05:1f:24:ed:16:97:64:7e:49:1e:a8:80:9f:
09:bd:55:8a:9d:8a:18:94:b0:d8:20:fa:e4:d1:51:
ef:94:e9:60:4b:c1:e5:59:10:7f:81:3b:36:59:79:
d6:b6:41:71:c8:70:b3:12:b0:87:8b:cc:ab:13:61:
ee:2a:2e:32:16:f9:17:cc:87:5d:67:3d:e4:c7:d1:
ea:f3:6c:67:f3:25:17:84:2e:fa:b6:ec:1a:c3:57:
c4:a4:5c:2b:50:5d:1e:11:b7:36:e1:b6:24:bd:50:
81:64:30:a8:dc:29:11:85:87:01:f2:33:7f:a9:29:
ac:2c:18:7e:6b:bb:fc:af:5a:ed:ce:ea:92:b0:99:
8b:94:9d:92:26:58:8f:d4:79:4a:e7:84:40:2c:60:
c5:06:96:c0:d0:d5:bc:2a:0e:cc:fb:29:5c:dd:e5:
e4:eb:b6:09:70:54:aa:ad:28:96:76:8b:71:13:d2:
79:c7:ca:22:f2:68:c3:ea:4d:65:cd:59:48:b5:bb:
f6:31:38:92:22:9b:1f:99:c9:6f:e0:f8:1e:8d:af:
54:8b:ab:ac:86:85:b2:86:28:1a:25:1f:25:6c:85:
5e:77:a1:92:12:8d:37:a2:36:c0:6a:d2:23:ff:90:
16:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:22:2D:5D:94:27:1C:62:E0:A7:46:F9:07:B2:8A:B1:26:BB:E2:FA
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gSItXZQnHGLgp0b5B7KKsSa74vo.roa
sbgp-ipAddrBlock: critical
IPv4:
220.159.28.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:20:08:88:6a:9e:28:4b:0b:1d:3d:a8:4e:64:16:94:7a:0b:
9d:b4:dd:b6:bc:e4:3f:ff:6f:f1:8b:7b:d8:67:25:72:c6:ac:
56:8a:48:5b:b7:6a:e9:2b:6f:5b:f2:32:b5:8e:f0:3d:34:90:
3b:ae:24:42:c5:dc:bb:f5:28:8c:23:89:8d:a0:64:18:ec:5b:
7b:a2:6c:3c:16:7c:36:37:ad:88:cb:bd:8e:5e:68:78:c0:92:
5f:6a:99:40:7c:f6:cb:6b:1a:26:64:47:2e:9c:41:6e:c2:fd:
58:91:ea:c4:70:6e:c3:e9:7b:4a:cf:2e:30:82:df:f0:37:6e:
51:32:ea:8c:8a:7f:02:b3:cd:19:92:b7:23:65:b1:e3:b1:28:
3c:39:19:6a:04:b4:17:55:f9:c7:82:1a:82:dd:b1:c8:98:8d:
00:1c:4a:36:92:ca:b5:ca:69:43:7c:fb:67:49:15:b2:c7:64:
ef:5a:f8:99:ab:f4:2e:27:67:a9:22:1c:0e:58:a2:46:1c:50:
a0:a4:67:53:ce:d2:40:ab:f0:9d:c0:45:ee:14:60:51:ff:c6:
7c:a3:0d:70:50:96:b9:6b:f2:f6:91:e8:45:05:34:82:f3:28:
76:e3:72:9f:c6:9e:ab:af:2f:73:31:de:03:c9:a7:4f:ce:db:
40:e7:15:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:02 2026 by rpki-client