
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/mKbtDg34fLt9ETQXVF0iYS3naxU.roa
File: mKbtDg34fLt9ETQXVF0iYS3naxU.roa (raw, json)
Hash identifier: janXlG9W4CRLGHV3knNQXfOACr0h0XCC/wekCw72EXE=
Subject key identifier: 98:A6:ED:0E:0D:F8:7C:BB:7D:11:34:17:54:5D:22:61:2D:E7:6B:15
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1368
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mKbtDg34fLt9ETQXVF0iYS3naxU.roa
Signing time: Tue 31 Mar 2026 07:55:30 +0000
ROA not before: Tue 31 Mar 2026 07:55:30 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.75.152.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4968 (0x1368)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:55:30 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=98A6ED0E0DF87CBB7D113417545D22612DE76B15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4c:6d:fb:9e:1b:71:c8:76:2e:f4:9a:b5:2a:
19:ba:ab:aa:6c:cf:c5:5b:02:a3:fc:4a:0c:55:f3:
14:5d:ee:e3:58:37:92:c6:64:99:94:3f:69:2d:8d:
29:14:49:b9:57:b3:40:b4:b4:7f:35:93:4b:3a:54:
fd:b2:dd:3d:b0:ad:73:cb:1a:ef:5f:1a:f7:fd:18:
4e:24:20:d4:61:b5:15:01:de:92:af:4a:44:62:bd:
1d:71:06:70:ae:91:8a:af:57:32:7e:34:a5:25:c9:
af:37:8f:21:8b:a9:14:2e:0d:a6:a2:4b:25:79:8d:
5a:72:8a:c0:76:ba:df:8e:3a:2a:ac:51:95:95:d7:
22:3b:19:0a:4a:2f:19:1e:07:89:0c:dd:72:03:19:
db:2e:b1:f0:c7:32:4b:be:a4:9b:36:7f:e0:0e:13:
6d:18:36:49:a8:1b:b9:cd:f4:43:2e:e6:49:02:f5:
60:c6:c4:5e:4b:2f:6d:d2:5c:b4:4b:70:38:fb:c8:
34:2b:83:12:2c:b5:97:9b:df:0f:3d:24:bf:ba:ff:
8b:d6:fc:fa:54:37:bc:0e:8a:e0:b3:ee:58:df:2f:
33:18:02:e4:7c:7b:79:ee:8b:19:b7:f3:da:0c:d0:
91:da:55:43:81:e6:86:ff:78:19:55:a7:19:a7:db:
de:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A6:ED:0E:0D:F8:7C:BB:7D:11:34:17:54:5D:22:61:2D:E7:6B:15
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mKbtDg34fLt9ETQXVF0iYS3naxU.roa
sbgp-ipAddrBlock: critical
IPv4:
1.75.152.0/21
Signature Algorithm: sha256WithRSAEncryption
d0:a8:55:cf:87:3b:a0:bc:4d:2b:60:bf:c0:16:48:5f:54:ba:
40:61:07:31:83:a4:96:d3:1e:ea:d0:50:f6:dd:b0:89:62:3c:
70:10:f8:c4:6a:cf:eb:9d:bc:28:df:27:c6:b9:0b:eb:aa:42:
cc:48:b0:4f:04:dc:26:91:f4:96:bc:a2:0e:cc:da:ca:9d:0e:
df:d4:cb:a1:7c:fc:a8:cc:c6:b1:e4:58:df:15:d1:22:10:84:
15:d5:fd:94:a3:59:a0:30:66:d6:de:c6:2f:c2:a8:c4:90:0e:
15:4c:35:c5:af:fa:47:2e:b0:05:06:e2:76:a7:29:34:89:d7:
72:e2:41:da:c2:75:fe:c9:3a:0a:58:5c:c5:0e:b3:cb:ae:6d:
5e:c7:4a:89:c4:4a:eb:29:e1:ff:fc:5a:19:5a:1b:d4:e4:cd:
40:13:f5:e0:a0:87:3e:9e:68:3a:9e:5c:9a:15:32:c4:78:8b:
77:c9:3e:dc:fe:3b:14:9b:41:f4:6b:ce:3c:a9:26:23:80:ff:
0f:ee:df:df:9d:ec:58:05:b4:c1:79:6f:99:66:17:f4:1e:5f:
58:a5:58:fd:db:58:bf:c8:84:02:6a:04:27:bb:33:dd:e5:c2:
b4:46:50:38:15:16:45:e7:02:8b:74:88:21:ef:09:e4:98:d4:
ed:37:4e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:37 2026 by rpki-client