
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/jiSnWutZRi87tCMMkWR3oxT3GHU.roa
File: jiSnWutZRi87tCMMkWR3oxT3GHU.roa (raw, json)
Hash identifier: QPaM2JY4hGt51dywwvaLWkr6Md6ZeeqRTKPY9LdpX5w=
Subject key identifier: 8E:24:A7:5A:EB:59:46:2F:3B:B4:23:0C:91:64:77:A3:14:F7:18:75
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 140C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jiSnWutZRi87tCMMkWR3oxT3GHU.roa
Signing time: Tue 31 Mar 2026 07:56:46 +0000
ROA not before: Tue 31 Mar 2026 07:56:46 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.68.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5132 (0x140c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:56:46 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=8E24A75AEB59462F3BB4230C916477A314F71875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:69:77:82:73:41:b5:13:51:72:58:a3:34:6c:
2c:1e:71:10:87:4a:5c:21:01:35:9b:22:90:f1:9e:
30:1a:ef:e2:24:7b:f5:4f:16:99:31:73:7c:0f:bf:
86:e4:e1:cc:04:9d:04:42:c2:80:49:04:8d:8e:3d:
14:be:1d:35:40:6b:a8:04:ae:01:06:92:7f:b4:29:
b6:0c:0a:cc:49:c2:12:93:0f:48:84:0e:a2:92:bf:
b6:81:fe:f8:ab:af:b2:f7:78:62:67:16:18:7b:d8:
c4:35:be:71:19:f9:60:be:7a:f1:1c:fd:da:01:16:
cb:39:c7:aa:89:1e:d9:04:6e:a2:ca:ae:b7:c5:33:
03:6e:d9:57:99:32:4e:2c:ff:7d:c9:3e:47:70:05:
f1:6f:4e:9b:03:1e:71:b6:02:99:1f:0c:f4:55:98:
55:12:61:44:b1:b4:e5:fe:8d:39:8f:7a:84:fa:82:
03:73:97:8e:fe:8d:da:52:39:08:2b:54:24:91:44:
06:86:be:5e:c7:4e:31:bc:40:bb:b6:c3:57:ef:64:
b7:46:34:60:f1:18:69:8a:4a:f9:bb:49:94:0e:d8:
1d:1e:a7:cc:13:99:1a:b9:f6:47:9c:cb:96:b5:d4:
99:a3:36:3c:17:51:85:da:e6:01:a4:46:d5:b9:e9:
58:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:24:A7:5A:EB:59:46:2F:3B:B4:23:0C:91:64:77:A3:14:F7:18:75
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jiSnWutZRi87tCMMkWR3oxT3GHU.roa
sbgp-ipAddrBlock: critical
IPv4:
1.79.68.0/23
Signature Algorithm: sha256WithRSAEncryption
21:cb:e6:bc:33:c3:a1:15:54:c4:c3:2a:90:7e:9c:11:41:a7:
5a:5c:38:0e:01:56:93:e7:fd:5d:1f:0f:75:f2:51:e4:2b:cf:
f7:17:a0:22:bf:ec:76:b8:50:3d:3a:9c:16:8d:80:a1:b4:bd:
4d:0e:d8:66:3b:e4:b9:ea:92:19:b6:96:42:9c:ad:cc:85:94:
dc:64:ac:1c:8e:14:5e:a5:aa:88:71:c0:d4:fb:db:72:64:dc:
cc:b7:a3:bb:df:ee:b2:9e:4c:66:1f:6f:e7:4b:db:bf:aa:0a:
e1:af:c2:75:6e:c5:35:01:81:d1:5c:3e:48:7b:e6:90:73:82:
a4:bf:97:61:a5:01:b8:a1:36:d8:d4:3f:1f:28:92:40:f8:73:
4a:a0:c2:00:83:4f:81:ad:dd:af:a2:4e:da:d0:6a:98:16:33:
37:37:7d:1e:d6:15:2b:51:3b:13:40:2c:ea:a6:9c:78:a7:10:
1f:6e:a2:11:ea:87:70:0e:fb:73:23:9b:40:01:24:b7:d2:b9:
60:4b:9e:d4:be:5f:65:1f:2e:39:de:33:e7:04:47:79:ae:8a:
84:a9:23:0b:7c:30:d0:70:39:b8:5c:ad:d0:b8:96:b4:fa:59:
19:42:07:44:2d:39:db:8b:3b:ab:6a:b3:77:d5:ff:31:f1:34:
f3:09:63:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:43 2026 by rpki-client