
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/kjdMtodtcIfg8o-3cUJ0c2-OPCM.roa
File: kjdMtodtcIfg8o-3cUJ0c2-OPCM.roa (raw, json)
Hash identifier: 2lB7uaP97X/FkhQFlVGbRAqx+9eCXe5xkfT6C6gScpg=
Subject key identifier: 92:37:4C:B6:87:6D:70:87:E0:F2:8F:B7:71:42:74:73:6F:8E:3C:23
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 139C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kjdMtodtcIfg8o-3cUJ0c2-OPCM.roa
Signing time: Tue 31 Mar 2026 07:55:56 +0000
ROA not before: Tue 31 Mar 2026 07:55:56 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.75.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5020 (0x139c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:55:56 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=92374CB6876D7087E0F28FB7714274736F8E3C23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c6:21:82:5f:34:71:6d:a5:fe:d3:7c:dd:c2:
04:e6:e1:a0:9f:86:bb:3d:be:96:a9:53:82:30:1a:
25:f6:2c:f8:c7:67:e4:3f:de:32:b4:7f:0c:2e:ed:
f0:1c:7d:90:05:d0:0c:09:a6:f8:5a:31:07:7d:38:
3a:22:f1:c6:63:8c:72:f7:f0:f4:ae:ab:5a:15:9c:
c9:fd:af:7e:d7:bf:4e:ab:49:b0:5e:e2:ba:95:c3:
71:51:40:da:bb:7c:c2:ac:d5:6a:4f:61:7b:a0:b1:
05:76:8d:3f:e1:b8:08:ac:c8:c7:f8:41:60:c1:3c:
24:57:7a:4a:27:98:84:a0:3d:9e:ba:85:7f:0c:00:
47:ed:46:f1:2c:91:70:6d:b4:f5:3c:e7:01:71:60:
a0:2a:b6:99:b0:2f:ec:32:c4:15:06:5e:a5:c1:56:
c1:1c:4e:b2:e8:ea:df:7a:49:dd:32:4c:48:8a:ba:
1d:f5:71:bf:d5:be:4a:05:cf:5b:f5:ca:ac:24:f7:
ab:3b:8d:6f:91:b4:e5:e3:e4:d8:14:35:c5:5d:c6:
39:37:97:ab:f9:75:1a:a1:00:b0:c0:3f:3f:c3:75:
01:e7:91:e9:a3:ee:c1:03:7d:1b:f7:4a:69:ef:c5:
90:8e:95:98:64:f9:20:9d:d2:45:36:3d:e1:c5:6d:
62:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:37:4C:B6:87:6D:70:87:E0:F2:8F:B7:71:42:74:73:6F:8E:3C:23
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kjdMtodtcIfg8o-3cUJ0c2-OPCM.roa
sbgp-ipAddrBlock: critical
IPv4:
1.75.14.0/24
Signature Algorithm: sha256WithRSAEncryption
93:13:a3:49:98:a0:77:8d:e4:66:70:90:e7:2f:7a:09:88:40:
41:19:12:61:fd:4a:ea:e1:31:c0:d4:db:f0:1d:5c:e4:e2:fc:
e1:4f:77:89:ae:33:d2:92:d6:05:42:bd:6b:b8:a4:c0:b8:aa:
42:d1:97:2d:ad:27:1b:d0:04:72:f7:93:25:e6:11:e7:9f:85:
78:0f:d9:6e:57:a2:49:4c:ba:ce:b2:d0:af:d0:d6:bf:e9:e9:
9d:7d:75:56:2a:0a:55:b1:13:87:11:43:8c:ed:da:47:29:c6:
1d:9d:4a:1d:41:4f:27:73:3a:f2:ba:c3:24:9a:8e:cc:fc:4a:
12:45:5e:8c:aa:8b:31:df:01:56:d5:92:32:46:5b:23:65:41:
05:79:04:d1:5b:27:5c:e0:ca:41:74:39:ba:cd:4e:1a:bd:8c:
32:8c:ff:7f:2f:c7:77:16:d9:5b:f3:8d:8b:b0:ec:61:03:67:
e9:c8:b9:26:fc:2a:02:72:05:fb:c5:f9:c5:1d:56:ec:d9:0f:
ec:88:eb:7f:9a:29:e8:32:b2:7d:57:df:03:7c:e0:0f:09:f5:
5b:ec:81:be:83:95:14:4d:fd:d1:30:80:9d:f4:1f:25:7d:12:
2f:86:0c:8a:b9:b3:83:d3:30:6d:37:e4:97:47:19:c4:db:82:
48:db:ec:fb
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICE5wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
NzU1NTZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDkyMzc0Q0I2ODc2RDcw
ODdFMEYyOEZCNzcxNDI3NDczNkY4RTNDMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCuxiGCXzRxbaX+03zdwgTm4aCfhrs9vpapU4IwGiX2LPjHZ+Q/
3jK0fwwu7fAcfZAF0AwJpvhaMQd9ODoi8cZjjHL38PSuq1oVnMn9r37Xv06rSbBe
4rqVw3FRQNq7fMKs1WpPYXugsQV2jT/huAisyMf4QWDBPCRXekonmISgPZ66hX8M
AEftRvEskXBttPU85wFxYKAqtpmwL+wyxBUGXqXBVsEcTrLo6t96Sd0yTEiKuh31
cb/VvkoFz1v1yqwk96s7jW+RtOXj5NgUNcVdxjk3l6v5dRqhALDAPz/DdQHnkemj
7sEDfRv3SmnvxZCOlZhk+SCd0kU2PeHFbWL1AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUkjdMtodtcIfg8o+3cUJ0c2+OPCMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L2tqZE10b2R0Y0lmZzhvLTNjVUowYzItT1BDTS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAABSw4wDQYJKoZIhvcNAQELBQADggEB
AJMTo0mYoHeN5GZwkOcvegmIQEEZEmH9SurhMcDU2/AdXOTi/OFPd4muM9KS1gVC
vWu4pMC4qkLRly2tJxvQBHL3kyXmEeefhXgP2W5XoklMus6y0K/Q1r/p6Z19dVYq
ClWxE4cRQ4zt2kcpxh2dSh1BTydzOvK6wySajsz8ShJFXoyqizHfAVbVkjJGWyNl
QQV5BNFbJ1zgykF0ObrNThq9jDKM/38vx3cW2VvzjYuw7GEDZ+nIuSb8KgJyBfvF
+cUdVuzZD+yI63+aKegysn1X3wN84A8J9Vvsgb6DlRRN/dEwgJ30HyV9Ei+GDIq5
s4PTMG035JdHGcTbgkjb7Ps=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:34 2026 by rpki-client