
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/jF47TWCZ3ncb-Kj6nvbdbCYuzhE.roa
File: jF47TWCZ3ncb-Kj6nvbdbCYuzhE.roa (raw, json)
Hash identifier: 5kM1BAnTjWphShKIOB0pbAEs/XV7ksK2qqJNAj3qSOI=
Subject key identifier: 8C:5E:3B:4D:60:99:DE:77:1B:F8:A8:FA:9E:F6:DD:6C:26:2E:CE:11
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 13A1
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jF47TWCZ3ncb-Kj6nvbdbCYuzhE.roa
Signing time: Tue 31 Mar 2026 07:55:58 +0000
ROA not before: Tue 31 Mar 2026 07:55:58 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.66.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5025 (0x13a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:55:58 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=8C5E3B4D6099DE771BF8A8FA9EF6DD6C262ECE11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:eb:41:09:69:bc:0e:01:f2:f9:81:3a:0c:d8:
02:c1:b1:b2:79:ca:fc:fb:2b:43:99:1b:95:34:d9:
9a:b2:b4:38:45:7e:ed:32:18:d2:37:4d:10:2a:ff:
d8:45:5b:f5:56:f9:7b:31:46:56:ac:7b:c3:e4:2a:
a3:5a:47:c6:b0:f5:e8:2c:a7:14:f2:39:ba:c0:b1:
ed:01:a7:7b:9f:e7:22:bc:e6:22:c1:08:81:d8:0e:
3f:7f:12:a9:fd:06:ca:b4:ff:11:6b:96:ff:89:43:
2e:eb:ad:ff:2f:db:14:47:3a:36:c2:6a:37:0a:cf:
eb:4f:ff:e7:75:fd:66:c7:84:34:dc:79:09:23:29:
cd:5a:e7:16:99:60:92:d1:8f:24:74:79:86:04:c1:
8e:ae:6e:69:94:ba:8b:74:d6:f2:4c:f6:7c:1b:95:
00:97:6d:62:85:af:0a:c4:cb:29:fb:c6:6a:63:24:
b1:f7:ad:53:ae:c4:7d:d6:fd:13:b0:79:78:77:cb:
61:f5:e3:5f:a4:67:93:ef:e7:dd:e5:f8:a9:ff:ed:
d8:4b:cf:2e:35:45:1f:24:2f:08:4d:14:cb:8e:c9:
17:39:a5:04:4b:c9:f0:8e:8d:8b:a5:a8:17:67:0d:
bb:a5:2c:b9:72:04:f4:7e:94:57:8d:82:0f:31:be:
a9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5E:3B:4D:60:99:DE:77:1B:F8:A8:FA:9E:F6:DD:6C:26:2E:CE:11
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jF47TWCZ3ncb-Kj6nvbdbCYuzhE.roa
sbgp-ipAddrBlock: critical
IPv4:
1.66.105.0/24
Signature Algorithm: sha256WithRSAEncryption
07:ce:d1:38:d9:5e:af:26:67:e7:1b:be:cf:89:09:4c:fd:5a:
2d:a1:92:71:9e:c4:e1:8d:be:b2:6c:32:78:4c:6e:d5:bb:22:
72:11:72:e4:df:e1:71:e1:ec:17:d5:49:0c:a9:49:8b:e6:48:
cf:ad:79:43:73:e3:db:12:18:92:9b:a7:b1:2f:94:b1:06:c2:
53:31:47:6e:08:09:37:4d:35:69:48:11:ff:b3:c7:83:2b:a9:
5c:45:e4:24:3a:31:72:72:8f:7b:c3:a8:1d:50:fe:23:31:85:
4a:58:20:bd:01:38:f5:30:18:c9:4a:0d:cf:ae:f4:3d:17:ee:
80:fd:6e:8e:82:00:5e:28:53:3a:44:3b:25:b6:81:24:ef:d3:
b8:00:73:ae:8e:c0:f8:66:b5:4e:ae:80:97:c8:5e:3b:bf:d6:
d1:0f:2e:af:de:d5:60:67:c1:ea:0a:29:c9:c1:f8:3b:35:8f:
77:84:b8:88:d7:ce:60:f0:ab:e7:11:90:e0:b1:91:57:c7:b2:
e3:3a:8f:23:a5:9f:e7:8e:01:35:e0:6a:83:ec:24:e5:f1:0d:
fc:95:72:4b:13:8e:e0:a8:cc:72:82:81:33:03:6f:d1:79:26:
37:0f:40:47:96:31:01:96:65:26:6b:f0:58:06:9d:ce:0d:d5:
8a:89:29:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:52 2026 by rpki-client