
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/iQ2XZ7JBOn_I4DcrwCdjFGcEZ-Y.roa
File: iQ2XZ7JBOn_I4DcrwCdjFGcEZ-Y.roa (raw, json)
Hash identifier: /++ikx0EFuPJOSrOIG23Aiz8SWTXIT+g+XyTIazZyuA=
Subject key identifier: 89:0D:97:67:B2:41:3A:7F:C8:E0:37:2B:C0:27:63:14:67:04:67:E6
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1416
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/iQ2XZ7JBOn_I4DcrwCdjFGcEZ-Y.roa
Signing time: Tue 31 Mar 2026 07:56:50 +0000
ROA not before: Tue 31 Mar 2026 07:56:50 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5142 (0x1416)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:56:50 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=890D9767B2413A7FC8E0372BC0276314670467E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:81:34:b1:95:e8:51:fd:7c:49:fc:d9:b9:e6:
8f:79:42:78:98:02:b0:8c:fb:c0:8b:da:d2:79:97:
cf:4f:fe:9e:67:d5:9b:e0:75:5c:6b:6e:a6:36:ac:
fb:2d:7a:42:09:48:b9:72:04:2f:16:00:b3:87:31:
5f:b8:24:c2:50:75:0b:14:89:2c:8f:27:ec:0c:08:
46:e1:b3:0e:27:db:23:c6:df:d6:4f:56:20:29:60:
d0:9b:0e:f8:b1:1a:6c:bb:33:05:4b:09:04:37:ff:
65:c5:71:e5:5d:d1:15:81:ca:ac:ed:ac:e9:7b:a2:
2d:43:0a:9f:b2:10:c1:11:73:24:98:0b:7e:f9:f6:
b3:ef:d9:fe:b1:42:7e:7f:f6:77:91:62:ce:6e:16:
3e:71:3d:83:2e:42:d4:88:f9:77:f9:32:0b:ab:1f:
61:d8:d1:e4:d0:5f:c7:54:cd:2d:9a:47:3a:89:e5:
12:29:8b:5e:15:aa:e3:64:5d:ac:8f:88:66:a9:bf:
75:23:33:1d:f0:d1:1d:dd:a1:8b:c1:75:4a:a1:2c:
48:74:61:7d:a7:39:0c:25:80:bf:54:cd:b1:d9:f9:
5d:f0:e9:32:bf:b0:0a:7a:3a:96:a7:df:7b:94:05:
a2:88:96:19:2f:4e:33:cb:2f:1f:eb:8c:d0:6f:03:
f2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0D:97:67:B2:41:3A:7F:C8:E0:37:2B:C0:27:63:14:67:04:67:E6
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/iQ2XZ7JBOn_I4DcrwCdjFGcEZ-Y.roa
sbgp-ipAddrBlock: critical
IPv4:
1.79.83.0/24
Signature Algorithm: sha256WithRSAEncryption
df:44:22:ae:2e:31:14:ec:63:53:34:0a:1c:4f:d7:4a:52:b2:
e5:c9:e9:4d:00:cc:de:d3:3b:d5:d4:59:c5:07:c0:98:fe:ed:
a6:21:7a:25:85:40:25:d9:fc:81:eb:19:46:cb:f9:2d:ac:2c:
44:fe:3b:d5:6b:f6:4f:c3:08:98:3e:0e:87:8e:87:eb:5f:fd:
10:54:0f:b9:ab:4a:f0:ef:bb:a6:c2:a8:17:df:7c:2c:7b:f9:
66:38:56:e8:d3:e0:47:4f:46:8f:aa:23:b1:41:dd:b6:b6:53:
80:d3:e7:9f:ac:8d:ce:aa:35:91:3c:5a:4b:51:c0:0a:a2:94:
40:c8:ae:6d:04:1b:ef:e4:0e:8a:f3:7b:7b:ba:5b:c2:09:d9:
4c:02:77:cc:a3:c3:21:2e:51:e1:53:ac:01:a7:11:c6:14:37:
77:99:12:65:24:ab:29:a9:ca:e0:81:76:8f:ff:4f:20:27:cd:
04:bf:17:d2:47:0a:32:f8:9f:35:60:22:ad:1f:e1:51:d4:e6:
99:39:e0:c8:90:95:34:29:fd:12:97:16:fa:9a:5b:09:09:6a:
3b:f6:71:c0:fc:33:fa:1a:e8:eb:e4:35:9b:7b:37:f9:09:27:
aa:fa:2a:44:aa:16:3c:27:1a:dc:c1:4c:97:02:10:b2:be:19:
c2:d7:fb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:54 2026 by rpki-client