
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/hyg4qvrnbNk4Nbi1b1PJQlMkub8.roa
File: hyg4qvrnbNk4Nbi1b1PJQlMkub8.roa (raw, json)
Hash identifier: Cx248QJ1522V7/02oJr/5SRy8rGrKh9DD4J6x6X2Ymc=
Subject key identifier: 87:28:38:AA:FA:E7:6C:D9:38:35:B8:B5:6F:53:C9:42:53:24:B9:BF
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 16D7
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hyg4qvrnbNk4Nbi1b1PJQlMkub8.roa
Signing time: Tue 31 Mar 2026 08:02:37 +0000
ROA not before: Tue 31 Mar 2026 08:02:37 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.76.74.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5847 (0x16d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:02:37 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=872838AAFAE76CD93835B8B56F53C9425324B9BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:39:c2:5a:a3:2d:03:68:ff:a0:59:2a:b8:7f:
44:13:29:ad:ff:26:9a:eb:0f:7f:bc:91:a4:6f:40:
29:38:e3:fb:51:b5:d7:61:a9:0d:25:0c:83:b6:e9:
ae:36:ee:87:13:b5:54:18:c1:53:cb:53:49:db:db:
8a:c3:ff:6c:2b:42:73:16:c7:1f:9a:78:e4:0d:28:
d7:a0:0b:ec:e4:59:3d:1d:d4:d3:7f:a2:be:cb:c1:
8e:f9:da:69:41:53:fb:1c:72:9a:32:2b:00:0f:44:
33:06:f2:e1:16:c8:72:43:6b:4b:5f:f6:2b:9f:07:
f4:ab:6d:51:4a:1c:f7:1a:a9:6a:fb:70:37:a2:4d:
1c:dd:28:0e:92:74:e2:4e:16:61:00:b4:9a:3d:39:
14:d5:91:58:58:ec:15:0f:3d:75:1c:88:d6:0b:c3:
db:70:0e:aa:f8:b9:8a:86:98:e9:6b:d5:89:65:6a:
48:f9:36:44:fe:e4:b1:28:9e:a6:54:f0:68:99:f1:
1e:c2:15:fc:ab:2f:2d:3a:00:c3:d0:ed:e7:f7:1f:
fd:51:9b:4a:f7:c6:cb:d1:9b:e1:89:fc:e1:11:5c:
93:3e:7e:3a:12:31:ef:ec:66:43:ca:73:b5:fe:ef:
6b:13:c3:81:05:47:00:47:85:fb:ff:eb:99:93:a0:
f7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:28:38:AA:FA:E7:6C:D9:38:35:B8:B5:6F:53:C9:42:53:24:B9:BF
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hyg4qvrnbNk4Nbi1b1PJQlMkub8.roa
sbgp-ipAddrBlock: critical
IPv4:
1.76.74.0/23
Signature Algorithm: sha256WithRSAEncryption
79:b0:0e:a2:0b:9a:b2:85:05:dc:31:a0:97:17:e1:1f:6d:4f:
06:7b:6c:b3:b1:d0:85:99:2f:82:06:20:8f:e0:8b:aa:c1:5a:
6d:7a:91:87:c8:ec:a1:7f:8e:3b:ab:d2:89:4e:82:1b:1b:b8:
0f:08:74:4c:b3:e9:b5:7a:55:c8:20:2a:d4:4c:6e:02:70:cf:
44:a4:3a:57:5b:96:5b:93:1e:1f:6b:50:a5:c3:6a:11:e2:14:
97:5e:25:bb:4d:d3:8e:35:3b:54:a1:76:a8:9e:fc:c2:ad:f6:
e6:29:e4:87:8d:71:e3:09:da:57:65:34:88:50:89:27:4e:70:
d4:51:d6:88:d5:0e:2f:77:3a:26:41:fb:9e:67:d4:05:16:a4:
4b:89:78:49:c8:91:ea:b4:26:95:eb:5d:ce:aa:d3:8a:73:db:
39:14:1c:2b:f4:f2:ca:d0:ad:4b:02:fb:46:60:75:ca:4c:cc:
db:18:1f:61:1e:d5:ac:04:35:e3:b7:9c:c8:bd:d4:47:b4:73:
6b:0f:04:2b:ee:48:b6:9e:a9:f3:d5:88:c3:1e:23:a2:c2:5f:
8c:52:7c:51:73:c1:29:28:3c:4c:e0:d8:db:9b:46:66:ee:26:
50:63:67:0d:f8:0a:0c:55:1f:9f:d8:eb:d3:0a:9a:5c:4d:f7:
3d:56:7f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:14 2026 by rpki-client