
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/i3sovfpnRk7LKInVmo4IFb0RbAE.roa
File: i3sovfpnRk7LKInVmo4IFb0RbAE.roa (raw, json)
Hash identifier: HMgJa/XjVGAohNfTgf8FqGu9U2rt5+HfqWsMTa9Q+xg=
Subject key identifier: 8B:7B:28:BD:FA:67:46:4E:CB:28:89:D5:9A:8E:08:15:BD:11:6C:01
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1393
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/i3sovfpnRk7LKInVmo4IFb0RbAE.roa
Signing time: Tue 31 Mar 2026 07:55:52 +0000
ROA not before: Tue 31 Mar 2026 07:55:52 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.75.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5011 (0x1393)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:55:52 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=8B7B28BDFA67464ECB2889D59A8E0815BD116C01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6a:2f:7c:23:bb:72:3b:b9:e6:fb:fe:d9:6a:
80:2f:b3:04:3e:3f:59:2d:07:3d:0e:d7:34:86:60:
14:d7:21:0e:47:97:f3:94:6b:3e:6a:94:84:ac:15:
74:f6:5f:69:78:9e:50:61:54:27:48:aa:bd:a8:f5:
02:12:c9:4c:af:b4:a0:8e:f8:94:dc:7e:d2:60:a8:
9d:5e:cf:80:10:ba:25:6e:4c:47:8c:07:c9:1e:d1:
d0:69:f0:27:01:d6:e1:6e:f4:98:44:ab:14:ea:d0:
07:30:4a:d6:26:09:94:ce:9f:d1:cb:64:af:1f:1c:
22:d7:84:c3:55:00:f3:ec:7e:a6:77:5a:1b:69:6e:
78:17:a2:16:23:8b:b9:e0:7a:0a:94:d5:91:54:ed:
68:7c:fa:dd:ca:eb:6a:76:d1:ad:d9:80:4f:d3:fc:
e1:04:e1:d4:9e:85:0b:70:fb:8c:21:73:b0:7c:67:
f3:78:16:6d:2b:e3:c2:7d:9b:55:07:01:71:cd:24:
6c:2d:5a:58:a1:30:6e:12:56:38:75:3c:e2:05:07:
96:df:e2:1f:b6:06:a6:15:cc:d9:a2:67:a5:c6:77:
27:1e:84:76:34:b8:75:12:35:34:72:6d:0a:80:77:
91:1b:82:13:5b:4e:08:a0:40:08:a2:68:3d:b3:85:
df:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7B:28:BD:FA:67:46:4E:CB:28:89:D5:9A:8E:08:15:BD:11:6C:01
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/i3sovfpnRk7LKInVmo4IFb0RbAE.roa
sbgp-ipAddrBlock: critical
IPv4:
1.75.8.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:99:af:52:c1:5d:a1:1e:73:ee:62:9d:c1:63:ee:53:75:93:
f3:52:15:ed:77:e0:40:76:f1:ec:c0:a6:68:71:93:59:61:c3:
23:13:b2:0e:f0:35:d0:fc:a3:7f:65:1e:57:fe:ab:a6:13:8e:
7d:1c:b4:dc:c7:5e:ea:a1:d6:ef:bc:69:c2:48:21:45:01:c0:
b4:f4:25:01:a6:2e:35:9d:45:0c:7d:44:e0:5e:da:b2:65:d0:
32:96:df:56:be:b8:26:f3:3d:23:d9:ef:36:2a:cb:a2:e4:80:
a7:e9:d6:be:a6:0d:79:64:81:7b:e3:57:9c:1a:33:56:c2:cc:
69:7b:b4:0d:b3:e0:48:af:67:c3:31:9b:19:1f:b8:76:9d:74:
66:1b:91:2f:df:8d:4f:87:a6:d7:36:32:02:a3:1a:e5:87:80:
cc:7c:36:1e:6a:51:d2:aa:f3:fb:0c:95:4c:6c:4d:3a:19:66:
3d:ca:24:fc:c9:4e:6c:f5:3c:3b:71:3f:29:97:44:9d:a1:e2:
bb:93:a9:be:0d:0e:83:6d:9e:fb:3c:b8:c6:f7:a1:f0:fa:93:
4f:6a:c2:e2:7f:84:35:6c:52:d3:c9:02:d7:d8:7c:39:0e:61:
1c:1c:9b:68:b4:15:43:53:57:1a:85:80:cf:21:97:9f:53:3a:
72:91:ae:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:06 2026 by rpki-client