
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/l977eaVV-6NXRK8T7G3jd08mNJQ.roa
File: l977eaVV-6NXRK8T7G3jd08mNJQ.roa (raw, json)
Hash identifier: 9awO66R/tuERY1fC/XsJP0rkjPRo4l4z35sKzm7TG0o=
Subject key identifier: 97:DE:FB:79:A5:55:FB:A3:57:44:AF:13:EC:6D:E3:77:4F:26:34:94
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 161A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/l977eaVV-6NXRK8T7G3jd08mNJQ.roa
Signing time: Tue 31 Mar 2026 08:01:08 +0000
ROA not before: Tue 31 Mar 2026 08:01:08 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.73.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5658 (0x161a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:01:08 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=97DEFB79A555FBA35744AF13EC6DE3774F263494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:02:5b:83:8b:65:6b:bd:5a:1c:5f:42:8a:85:
6b:99:4e:d6:db:7e:b1:77:0f:94:38:8b:83:74:c4:
e2:bb:a0:9d:76:eb:f5:7b:3e:38:53:37:0a:8c:41:
84:ba:8b:79:98:f7:56:6d:43:2f:b2:f1:6b:f0:33:
df:3f:93:6b:f2:55:4b:82:b0:66:0a:67:f4:bc:0e:
ff:28:4f:c1:b3:f9:04:d7:a4:11:8b:2e:91:97:3c:
b4:76:88:7d:06:3f:f4:d3:f2:f1:c1:b4:65:dc:0c:
53:68:85:63:2e:a2:51:fd:e2:71:1d:df:4e:25:32:
70:fd:a7:9c:5d:08:4a:00:43:74:fa:fd:ae:6d:e1:
a5:97:55:2e:7c:a5:92:28:6c:a2:25:cf:b7:ff:81:
88:75:b8:04:b2:e3:90:75:bf:61:bf:9e:bb:1c:83:
c7:35:26:40:2b:27:99:0d:34:ff:da:36:a3:cc:12:
f7:47:77:44:01:f2:f5:cc:38:0f:d3:38:b8:fb:66:
cd:a9:9b:39:47:0d:85:38:1b:02:9c:f9:0d:a6:e6:
7b:d2:10:6a:30:64:b0:d3:7c:65:bf:de:dc:45:35:
6b:94:a6:57:bd:3a:31:be:57:30:0c:90:2d:42:ab:
b3:f6:3f:d9:73:70:72:54:97:ae:5e:81:6d:ae:88:
ca:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DE:FB:79:A5:55:FB:A3:57:44:AF:13:EC:6D:E3:77:4F:26:34:94
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/l977eaVV-6NXRK8T7G3jd08mNJQ.roa
sbgp-ipAddrBlock: critical
IPv4:
1.73.75.0/24
Signature Algorithm: sha256WithRSAEncryption
da:67:61:fb:a5:cb:b7:34:51:00:01:a5:f0:4b:4d:c5:9a:34:
0d:4a:ce:44:1a:bd:0c:ee:40:20:e9:f8:b7:dd:52:0e:7b:2f:
8c:d2:26:d8:8a:43:6a:d1:c2:d2:3b:79:05:ba:d1:d9:3c:c3:
08:e4:55:14:91:05:04:39:c2:ff:eb:50:aa:2c:1c:e7:09:98:
ec:15:92:8b:bc:d2:5e:18:71:a3:63:d5:f1:dc:9a:79:0e:d7:
d5:df:3f:43:60:f6:89:b1:f6:98:80:47:73:e7:b8:61:96:b0:
1c:93:0d:4e:ed:80:3e:bd:86:ab:21:7c:92:20:0e:cf:0c:01:
92:e1:00:65:12:d2:5b:d2:7c:64:98:3d:ca:88:1c:83:26:9b:
7f:64:06:c3:14:b8:b8:fd:9c:73:68:58:71:fe:98:c3:2d:b2:
b1:3b:d2:97:08:ba:64:e4:20:aa:2b:fc:f9:ef:8e:d5:e4:54:
91:f0:c5:4f:64:c1:d6:d7:f7:4a:af:4d:13:f9:b5:76:9f:bb:
c1:f5:5f:96:f2:e5:d9:a1:d7:51:a4:b1:fb:e7:3e:e2:58:89:
a0:dd:36:36:c8:b0:17:fb:a1:42:9a:fe:b3:4f:61:a1:aa:c7:
f9:e0:ea:24:5a:d1:6e:b8:41:96:22:ad:37:77:10:46:b1:e8:
cb:4a:a5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:08 2026 by rpki-client