
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/njLCPRdcIPniYMZzVsgreL-d9rQ.roa
File: njLCPRdcIPniYMZzVsgreL-d9rQ.roa (raw, json)
Hash identifier: x8tNy7ATy9PiKqeAv18bdUbRG5uhlEi0VUtYUVk4APw=
Subject key identifier: 9E:32:C2:3D:17:5C:20:F9:E2:60:C6:73:56:C8:2B:78:BF:9D:F6:B4
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1784
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/njLCPRdcIPniYMZzVsgreL-d9rQ.roa
Signing time: Tue 31 Mar 2026 08:03:59 +0000
ROA not before: Tue 31 Mar 2026 08:03:59 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 220.159.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6020 (0x1784)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:03:59 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=9E32C23D175C20F9E260C67356C82B78BF9DF6B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8b:34:94:80:74:95:38:d5:00:fe:1e:a4:bd:
17:f4:70:60:39:57:2f:0b:9c:9a:6a:88:0b:f8:55:
12:56:95:10:50:8b:bc:e6:29:67:20:d4:33:a6:98:
51:c4:c1:29:f2:63:c8:7e:5a:65:a0:1e:0c:5c:d1:
9d:3f:05:07:06:36:7a:6f:af:b4:77:37:3a:0b:77:
24:f2:01:b7:19:fd:6b:74:9e:17:58:69:5b:ec:c5:
c1:0e:6b:a3:3c:c0:61:37:09:08:56:28:b2:b0:ba:
0d:84:e1:de:95:e8:f2:a6:a9:26:4b:55:2b:d9:4e:
4e:28:33:b3:bf:4b:6d:0a:0a:53:35:00:61:f3:39:
c9:f3:46:5a:88:82:6f:fd:49:38:1f:5f:55:c0:a9:
28:aa:11:f4:ad:3e:7c:b0:36:67:e7:d1:ce:1e:31:
75:8e:18:cc:af:1e:18:f8:82:d0:a0:9e:71:67:87:
1f:bb:32:b2:e2:39:32:fc:6c:e9:8d:85:52:bc:f3:
23:49:56:4a:fe:14:b1:8f:3a:99:9f:8a:68:13:af:
55:6e:a0:a7:16:3d:23:38:c1:ba:db:1b:99:77:8c:
45:05:86:ed:56:c1:e3:17:a9:85:6f:29:8a:73:12:
7e:ec:c7:90:ec:c8:a4:93:5d:a7:b1:11:ac:7e:d5:
c7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:32:C2:3D:17:5C:20:F9:E2:60:C6:73:56:C8:2B:78:BF:9D:F6:B4
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/njLCPRdcIPniYMZzVsgreL-d9rQ.roa
sbgp-ipAddrBlock: critical
IPv4:
220.159.220.0/22
Signature Algorithm: sha256WithRSAEncryption
01:be:ea:23:63:01:1a:bc:a9:16:21:c8:ba:f8:04:67:62:e4:
cf:c9:ca:ef:ed:28:43:6b:2e:9e:24:33:a9:23:db:23:3c:88:
17:df:75:6c:b0:60:33:c4:50:90:46:c8:62:54:5a:5b:ec:3f:
52:61:8c:6d:a0:f7:04:9e:61:76:ae:a5:5b:10:60:f0:6f:7a:
b2:03:7d:74:d6:55:34:0a:34:bc:d1:41:c7:2d:bb:58:fc:9a:
e9:1b:e4:30:89:d6:b9:c9:13:7d:18:36:62:ca:58:c0:ec:ed:
ca:c0:f7:76:40:00:92:dd:a9:2b:6e:ca:db:cc:bb:19:d5:eb:
5c:57:aa:41:87:25:2c:fd:28:06:cb:e9:ed:7c:c2:aa:28:a6:
c8:b0:0b:aa:58:46:b7:08:95:71:37:28:15:8e:b4:41:aa:28:
d6:81:2f:39:7c:31:2b:ae:71:85:3a:98:4f:70:c8:99:7b:64:
b5:0f:de:c2:9c:01:90:b9:8b:dd:26:e0:c6:11:94:3c:b9:18:
2e:d6:83:38:11:56:67:1c:e2:e9:e8:9e:73:31:f5:a6:4d:1e:
df:a4:d6:ac:c6:cf:e1:54:03:ab:eb:dc:f3:2f:d1:70:73:fb:
a8:db:6d:77:78:df:6d:7d:9f:56:1a:bd:2c:f3:99:8b:fe:0b:
2f:e5:6f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:42:56 2026 by rpki-client