
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/lI1NHw94IiYbZypGfyHdcoKtcxU.roa
File: lI1NHw94IiYbZypGfyHdcoKtcxU.roa (raw, json)
Hash identifier: ekTJPYd0z9oTCtZd6U5oaizg5Cmg28wV55qkSbznaxs=
Subject key identifier: 94:8D:4D:1F:0F:78:22:26:1B:67:2A:46:7F:21:DD:72:82:AD:73:15
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 179B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/lI1NHw94IiYbZypGfyHdcoKtcxU.roa
Signing time: Tue 31 Mar 2026 08:04:10 +0000
ROA not before: Tue 31 Mar 2026 08:04:10 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.48.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6043 (0x179b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:04:10 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=948D4D1F0F7822261B672A467F21DD7282AD7315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d7:9a:ff:60:8b:47:45:a3:75:e8:65:78:40:
d3:c4:b0:fa:fe:8c:95:16:2a:9d:40:9e:bb:98:df:
34:f6:60:bf:e9:cd:15:34:1a:0c:ee:72:5b:29:71:
a9:0c:89:43:41:60:54:3a:ab:83:88:b3:b9:ec:25:
39:02:a0:95:2e:8b:ff:3b:95:ce:42:4b:7b:f4:e7:
81:3f:b4:b4:6f:dd:20:a9:62:78:c9:cf:6f:b0:ca:
0a:d4:a8:4d:14:bf:02:d6:ea:8f:6c:35:98:e8:91:
ac:d3:88:b0:fb:82:20:03:10:a5:3e:0b:fa:dc:b3:
e9:82:7e:37:4e:a0:bf:1e:fa:16:be:b0:82:f2:a0:
c1:cb:b4:1d:36:21:25:41:5f:16:3a:c2:72:4c:1b:
ac:b9:e2:41:60:f2:99:4a:58:d9:3d:0d:38:5f:f0:
c8:28:19:87:bf:19:d1:df:1d:9a:6b:e6:97:d0:ec:
dd:74:c4:93:3b:f7:71:01:f2:29:55:bc:37:0b:94:
41:84:b4:88:ba:5e:f2:9f:17:d7:4d:aa:0d:da:55:
18:90:fc:8a:f6:58:30:2a:f4:1e:ac:a0:2d:2b:5c:
34:db:70:59:cd:f8:e3:0b:ea:6c:a0:6f:9b:cb:ed:
c3:da:31:df:91:45:7e:fd:ac:88:4d:ca:1d:76:d4:
69:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8D:4D:1F:0F:78:22:26:1B:67:2A:46:7F:21:DD:72:82:AD:73:15
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/lI1NHw94IiYbZypGfyHdcoKtcxU.roa
sbgp-ipAddrBlock: critical
IPv4:
1.79.48.0/21
Signature Algorithm: sha256WithRSAEncryption
5f:4a:66:28:9c:ef:22:9c:81:5a:d8:27:43:94:f0:70:21:d3:
67:a9:82:67:88:cb:b1:2b:b3:46:b1:f9:d0:de:3d:0f:db:83:
aa:f3:8e:79:36:21:57:83:cb:0b:15:6f:c8:b9:3e:51:2a:e5:
13:a9:56:7a:9f:8c:c9:24:8b:e4:a6:9d:ab:1d:7a:0f:19:c6:
64:6b:69:ec:03:c9:16:d0:96:3b:1c:bf:61:f1:80:20:2f:cc:
c6:4c:f0:68:57:b6:f7:b9:85:c3:03:24:49:b8:94:48:c8:ac:
dd:c0:45:c8:54:8d:20:29:04:26:7e:10:cf:6e:32:a6:ac:ae:
5a:18:81:d7:1b:2b:38:dc:1d:89:81:b8:c0:22:67:2c:cf:36:
86:67:5f:56:7f:26:4f:c9:9c:1f:c6:bd:47:37:04:d1:ec:ae:
59:92:6c:13:77:77:7e:c0:18:87:e9:48:78:d5:b9:92:3c:49:
ed:df:78:4f:1c:a3:f3:1e:2e:e0:53:57:68:30:8f:8f:66:d7:
b3:06:c1:9f:02:8e:90:cc:4d:94:dd:5a:97:e4:84:0b:c0:e3:
0d:87:bc:2e:32:53:f7:a7:5c:e8:c3:a1:a1:49:07:07:d7:a2:
4b:80:82:7a:66:1d:69:26:26:dc:9a:1e:e7:0d:5d:57:bf:cb:
6e:d3:ca:85
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICF5swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODA0MTBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk0OEQ0RDFGMEY3ODIy
MjYxQjY3MkE0NjdGMjFERDcyODJBRDczMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDU15r/YItHRaN16GV4QNPEsPr+jJUWKp1AnruY3zT2YL/pzRU0
GgzuclspcakMiUNBYFQ6q4OIs7nsJTkCoJUui/87lc5CS3v054E/tLRv3SCpYnjJ
z2+wygrUqE0UvwLW6o9sNZjokazTiLD7giADEKU+C/rcs+mCfjdOoL8e+ha+sILy
oMHLtB02ISVBXxY6wnJMG6y54kFg8plKWNk9DThf8MgoGYe/GdHfHZpr5pfQ7N10
xJM793EB8ilVvDcLlEGEtIi6XvKfF9dNqg3aVRiQ/Ir2WDAq9B6soC0rXDTbcFnN
+OML6mygb5vL7cPaMd+RRX79rIhNyh121GlvAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUlI1NHw94IiYbZypGfyHdcoKtcxUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L2xJMU5Idzk0SWlZYlp5cEdmeUhkY29LdGN4VS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMBTzAwDQYJKoZIhvcNAQELBQADggEB
AF9KZiic7yKcgVrYJ0OU8HAh02epgmeIy7Ers0ax+dDePQ/bg6rzjnk2IVeDywsV
b8i5PlEq5ROpVnqfjMkki+Smnasdeg8ZxmRraewDyRbQljscv2HxgCAvzMZM8GhX
tve5hcMDJEm4lEjIrN3ARchUjSApBCZ+EM9uMqasrloYgdcbKzjcHYmBuMAiZyzP
NoZnX1Z/Jk/JnB/GvUc3BNHsrlmSbBN3d37AGIfpSHjVuZI8Se3feE8co/MeLuBT
V2gwj49m17MGwZ8CjpDMTZTdWpfkhAvA4w2HvC4yU/enXOjDoaFJBwfXokuAgnpm
HWkmJtyaHucNXVe/y27TyoU=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:38 2026 by rpki-client