
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/kVvG1CTaqv20ddDtDiZoBOFggY4.roa
File: kVvG1CTaqv20ddDtDiZoBOFggY4.roa (raw, json)
Hash identifier: EhxRqqInOLvs9qYrp1vQW2fpo9cb4g7CBXte8IzU86c=
Subject key identifier: 91:5B:C6:D4:24:DA:AA:FD:B4:75:D0:ED:0E:26:68:04:E1:60:81:8E
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1595
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kVvG1CTaqv20ddDtDiZoBOFggY4.roa
Signing time: Tue 31 Mar 2026 07:59:55 +0000
ROA not before: Tue 31 Mar 2026 07:59:55 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 61.195.216.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5525 (0x1595)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:59:55 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=915BC6D424DAAAFDB475D0ED0E266804E160818E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:62:9a:05:72:b6:c3:af:d2:b7:ba:70:48:42:
b7:8b:b0:23:8d:5b:02:4e:4a:f2:a1:13:b6:85:88:
30:59:ef:cd:04:b5:52:8a:53:0b:03:c8:f0:24:76:
55:ab:a8:58:8f:c3:35:19:8b:a1:12:ee:2c:b8:05:
8b:e2:3f:9a:23:1d:0d:88:ff:e6:5f:8a:15:b5:2c:
c8:fb:5a:4b:90:69:b4:41:48:30:fa:d4:25:cb:5b:
ca:5f:8b:39:f5:89:b3:84:9f:11:70:57:b6:46:7b:
66:b3:31:0e:a3:a4:70:33:5f:39:e6:df:62:b9:a6:
9f:c4:c0:0e:63:74:c2:ba:d9:f8:cc:7e:6b:7a:07:
59:a1:3b:84:db:f6:1e:6b:24:a9:5c:85:e5:34:30:
56:e2:eb:4e:29:f2:36:bd:5a:1c:70:b3:ee:a1:85:
fc:a2:a8:10:23:e6:cc:8d:c2:81:e3:e6:96:81:ad:
30:72:c3:83:39:47:50:f5:9f:26:af:06:ef:e1:66:
66:46:76:7c:89:99:49:2a:72:31:b8:3e:7c:cf:e2:
fe:9b:f3:4a:5e:38:76:f9:37:08:be:ec:07:87:54:
b2:cc:a3:33:2a:39:1a:ab:d7:da:fd:81:fc:cf:54:
1b:c3:ec:71:ea:e1:8d:5a:16:51:b1:b2:3e:16:0a:
99:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5B:C6:D4:24:DA:AA:FD:B4:75:D0:ED:0E:26:68:04:E1:60:81:8E
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kVvG1CTaqv20ddDtDiZoBOFggY4.roa
sbgp-ipAddrBlock: critical
IPv4:
61.195.216.0/21
Signature Algorithm: sha256WithRSAEncryption
50:bb:ca:dd:b8:90:fe:e4:35:48:bf:31:62:a6:3a:68:be:2f:
dc:c4:cc:2c:a7:a9:24:74:20:a2:f0:07:3a:6f:7e:da:30:a5:
2a:20:1c:5a:3f:9f:5c:82:d4:ab:a6:08:67:a2:5c:eb:9c:ac:
ca:56:8e:f1:48:e3:e5:90:96:10:77:00:45:54:51:a2:7a:03:
5a:a3:9f:16:be:b7:96:40:39:6b:a5:df:21:74:26:5f:89:da:
25:0d:4d:bb:ec:6f:cb:c0:e6:b4:cf:a1:fb:70:1d:f4:2f:99:
55:7a:01:18:32:e6:5a:9a:5e:d4:19:b1:fa:f0:5d:70:8c:6a:
94:23:35:9d:b9:5e:30:7e:85:cd:ed:77:9f:b1:2c:39:f9:f0:
2f:b6:3d:94:ca:76:94:ec:52:33:fb:a4:df:d1:6b:3e:fe:a3:
24:b4:f9:ec:ef:b4:d9:40:a9:0b:9f:32:1e:e8:ce:6d:6e:8f:
2f:d8:44:3a:14:66:4e:0a:10:f2:97:4a:b5:1d:9a:d2:dc:23:
07:dc:5d:dc:95:f2:b9:80:76:67:c2:fa:50:11:8c:ca:42:96:
8f:f0:07:90:11:e3:49:fe:f5:f2:5a:a6:82:f4:9e:a9:cf:cf:
73:59:24:44:86:34:b3:0f:2d:46:48:53:7c:46:b2:74:a7:ff:
ef:54:2a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:07 2026 by rpki-client