
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/n2JOVLhCnJuUt274B9WK1DTSMRo.roa
File: n2JOVLhCnJuUt274B9WK1DTSMRo.roa (raw, json)
Hash identifier: tgoPI61SeIdnnco2LDukh+cBf2ycLconvHDmZLO4p98=
Subject key identifier: 9F:62:4E:54:B8:42:9C:9B:94:B7:6E:F8:07:D5:8A:D4:34:D2:31:1A
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 173E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/n2JOVLhCnJuUt274B9WK1DTSMRo.roa
Signing time: Tue 31 Mar 2026 08:03:26 +0000
ROA not before: Tue 31 Mar 2026 08:03:26 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.67.234.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5950 (0x173e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:03:26 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=9F624E54B8429C9B94B76EF807D58AD434D2311A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d9:df:60:28:29:d1:c3:65:fa:07:c7:4e:35:
33:16:57:e8:b9:40:4a:07:2f:df:ea:da:9c:f6:62:
90:6e:66:b2:26:2c:ae:53:a0:32:1c:01:e4:2a:c6:
88:c9:5e:68:f7:56:dd:dc:63:98:55:43:a6:cd:fc:
f4:8a:00:d9:9c:be:cb:49:6f:1c:04:9d:b6:76:08:
0f:7c:58:e5:9c:a8:fc:ca:26:13:dc:aa:37:ca:af:
27:6a:ee:2a:ad:69:5b:20:42:3d:9f:fa:b6:da:7b:
9e:73:c9:2e:1e:66:63:c5:ac:9e:26:61:a3:31:e6:
df:e7:34:3b:70:8e:fa:d4:45:0a:ea:dd:02:e8:0a:
5c:82:2b:b0:75:ad:b1:0f:a0:e2:9f:1b:e3:1e:5c:
00:bb:0c:c4:f6:d9:df:46:a0:0c:cf:04:cf:6b:3c:
5d:f5:e6:44:ed:e6:2b:bb:c8:85:0d:0e:9a:b1:a6:
f0:b4:68:01:e3:50:c5:47:1d:f3:da:f3:8b:d5:50:
98:b7:54:e2:76:86:15:76:e5:23:c0:8f:77:f5:1f:
0e:86:29:fc:b0:b0:23:87:49:6e:50:6a:0f:e4:14:
70:ee:31:93:79:3e:46:1c:2f:98:4b:d4:53:ef:39:
c0:11:7d:da:f4:e9:78:8b:64:4a:cf:08:8f:98:26:
19:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:62:4E:54:B8:42:9C:9B:94:B7:6E:F8:07:D5:8A:D4:34:D2:31:1A
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/n2JOVLhCnJuUt274B9WK1DTSMRo.roa
sbgp-ipAddrBlock: critical
IPv4:
1.67.234.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:56:bc:aa:19:fe:a3:92:97:0b:32:71:d1:03:6d:87:7b:0c:
6d:a6:d4:75:6e:c0:00:79:42:0e:fc:6f:5e:99:e5:da:fe:ad:
48:a8:a6:22:ee:2a:bf:fe:77:d3:c5:75:ff:b8:b6:2c:57:c3:
51:f1:36:7e:56:bd:08:38:28:b8:1d:e4:2c:ee:ca:7e:f2:fe:
d0:b8:8a:38:f7:16:2f:3d:ba:6e:36:05:5d:3a:22:65:a6:c7:
ef:af:20:8b:54:ee:d9:fa:9f:c5:d2:b3:a2:25:53:79:d1:95:
e2:ba:38:34:fe:4e:d7:a3:f8:3c:5f:d1:92:35:bd:3a:d2:9b:
8a:06:78:5a:c4:aa:12:52:ed:42:6d:98:35:ad:5f:bf:fa:e9:
66:09:9f:bf:e3:66:52:d4:62:0e:76:f2:e9:57:d1:1d:5b:95:
c4:c0:a5:a6:23:4d:e5:16:7b:be:f4:87:aa:ff:53:bc:7a:3f:
d4:25:da:2c:51:e0:bd:2a:b3:aa:ca:da:38:02:20:20:9e:71:
42:78:95:19:90:1d:fa:7b:e1:f9:f7:c4:ed:c1:a6:e7:49:21:
18:c4:e7:29:d8:50:b1:d6:64:ed:1e:d3:28:96:03:06:7b:49:
bf:77:17:02:ed:ec:6d:0c:7a:63:08:51:00:06:18:bf:e7:f4:
36:a9:9a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:09 2026 by rpki-client