
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/hrpR_jUQcG5eop7iMLNGf8rPhas.roa
File: hrpR_jUQcG5eop7iMLNGf8rPhas.roa (raw, json)
Hash identifier: GTBRXRaFfZKdwibJZxROGnVhl60HUK8O/uW3u719vC8=
Subject key identifier: 86:BA:51:FE:35:10:70:6E:5E:A2:9E:E2:30:B3:46:7F:CA:CF:85:AB
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 17BC
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hrpR_jUQcG5eop7iMLNGf8rPhas.roa
Signing time: Tue 31 Mar 2026 08:04:27 +0000
ROA not before: Tue 31 Mar 2026 08:04:27 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.128.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6076 (0x17bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:04:27 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=86BA51FE3510706E5EA29EE230B3467FCACF85AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:90:3d:72:1b:be:b3:23:ae:38:e4:15:e8:a4:
05:55:b8:0f:f9:af:56:bf:6b:c7:bd:cb:17:89:3d:
19:d6:19:df:d0:42:06:03:9b:9d:43:95:36:a2:c3:
fa:16:63:a2:39:ff:a0:00:29:0a:b0:9d:42:78:27:
85:42:d2:3c:42:c1:25:ce:28:79:85:17:08:44:ef:
38:29:0c:81:55:8d:05:d4:e6:22:10:b7:5d:2a:c9:
c6:6d:db:ae:e3:6f:a0:ff:b4:2c:41:fe:9c:b3:34:
af:0e:a1:d8:f0:df:42:68:0e:4d:b0:38:8c:3e:cc:
fb:1f:b4:2a:7c:f0:bf:46:09:b2:64:6f:f0:7f:1e:
59:60:8d:60:a6:d0:3c:1c:ca:44:55:ab:77:b5:da:
da:93:d6:21:17:fe:44:82:50:c7:32:0d:60:53:9c:
3f:3b:b4:57:cb:bc:50:9d:15:30:4b:b7:a6:4d:9e:
6e:19:24:04:71:81:f6:33:ce:5d:77:d0:b8:0d:1e:
1b:7c:8c:54:98:46:7e:ee:db:6b:c1:01:68:54:65:
27:5e:6a:39:e9:05:82:f8:ae:d9:38:3c:51:58:1f:
82:6d:b6:e4:08:1a:ba:58:e0:78:2a:0f:83:ec:4a:
56:35:c5:7a:82:af:08:a8:6d:bb:77:13:0f:42:d4:
66:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BA:51:FE:35:10:70:6E:5E:A2:9E:E2:30:B3:46:7F:CA:CF:85:AB
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hrpR_jUQcG5eop7iMLNGf8rPhas.roa
sbgp-ipAddrBlock: critical
IPv4:
1.79.128.0/20
Signature Algorithm: sha256WithRSAEncryption
5e:c5:e9:8f:e1:28:4f:36:31:f8:c8:ff:84:07:22:97:e7:bb:
2e:2a:3c:f9:8f:5b:b7:e2:45:00:cf:ba:da:7e:af:cb:45:29:
25:8c:32:79:1b:d0:2f:a4:90:75:e1:e2:02:6c:5b:77:88:6b:
18:69:a2:d1:7a:a6:a0:eb:c6:82:75:ad:02:96:0c:7f:86:f0:
ab:fb:a1:9e:48:34:f6:ff:dd:c7:af:12:05:2e:67:8e:3a:11:
10:f7:67:b0:7c:27:51:49:29:1c:2d:03:2d:55:4e:dc:1a:9b:
23:26:e0:42:dd:35:18:3f:f0:ca:4d:cf:3e:27:14:58:77:c4:
56:52:25:15:51:c3:e2:07:9c:e7:12:c1:18:6c:24:87:d6:65:
0e:08:d1:d1:c8:49:d3:5c:52:6d:65:40:3d:56:59:78:3e:9d:
54:5c:61:16:8f:15:0d:48:aa:96:30:51:75:67:1f:1f:5f:e5:
b9:aa:e9:63:35:fe:6e:23:46:92:0c:0b:43:5c:bc:91:a5:48:
a9:c5:3a:28:16:d6:d6:76:e0:d9:a0:70:2f:ff:4d:07:c9:3e:
5c:2c:6b:56:c4:6d:ea:7e:28:3c:fe:bb:d3:73:be:bb:31:06:
53:c1:e2:4a:a7:08:41:9f:1c:b8:7a:96:c0:58:ff:da:55:7e:
58:96:b6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:16 2026 by rpki-client