
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/orNQzeTnfdlr98ZrEfW5zI20d6E.roa
File: orNQzeTnfdlr98ZrEfW5zI20d6E.roa (raw, json)
Hash identifier: 1jvfyDC8IwWvCeF4hZvOiI7c7ZEOeS1Jt6/ZosJpaZ8=
Subject key identifier: A2:B3:50:CD:E4:E7:7D:D9:6B:F7:C6:6B:11:F5:B9:CC:8D:B4:77:A1
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1434
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/orNQzeTnfdlr98ZrEfW5zI20d6E.roa
Signing time: Tue 31 Mar 2026 07:57:05 +0000
ROA not before: Tue 31 Mar 2026 07:57:05 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5172 (0x1434)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:57:05 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=A2B350CDE4E77DD96BF7C66B11F5B9CC8DB477A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:de:b7:e7:30:a1:aa:7e:00:70:91:aa:8e:6e:
41:3a:60:bb:3c:86:1c:22:f6:85:0b:db:65:ea:83:
46:e5:b5:e3:75:b3:91:f8:f4:bb:e3:0c:3c:36:92:
6b:82:a7:b3:8e:7b:3a:76:28:fe:bb:fa:be:84:88:
7b:ab:69:fd:65:8a:ba:e8:57:2b:97:0f:18:61:28:
37:d1:76:da:c0:1d:ef:06:20:8b:16:ae:47:72:14:
15:ac:7b:f1:88:7f:38:96:f2:29:d6:c3:ac:09:4c:
53:1d:0e:b3:6f:e6:d7:e9:48:6d:09:38:fb:12:12:
e0:64:d8:a0:c3:91:b7:a8:dd:5d:c2:00:5e:62:12:
00:b0:40:71:be:af:38:d5:5f:96:85:ce:0f:4b:11:
e7:c8:9f:94:a2:9b:1c:e6:b8:d5:d5:80:ee:50:d4:
98:2c:02:9e:5e:98:da:ba:a5:42:0b:e3:49:cd:a2:
b4:94:67:f0:8f:e2:12:e5:02:f0:f8:30:79:9b:82:
e1:4f:4b:10:32:bd:47:8b:00:60:0a:e1:54:59:d1:
7b:46:69:59:0f:92:71:51:6e:15:90:d3:18:45:4e:
04:5c:1b:b3:bc:c8:49:47:76:46:63:36:ea:dd:de:
c2:2d:32:8a:5e:e3:dc:36:ad:f2:e8:09:f7:a5:f1:
40:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B3:50:CD:E4:E7:7D:D9:6B:F7:C6:6B:11:F5:B9:CC:8D:B4:77:A1
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/orNQzeTnfdlr98ZrEfW5zI20d6E.roa
sbgp-ipAddrBlock: critical
IPv4:
1.79.81.0/24
Signature Algorithm: sha256WithRSAEncryption
05:0d:58:63:21:92:a9:1e:9d:10:dc:70:36:b5:26:49:08:89:
6f:d1:78:81:ae:c1:d5:95:2c:69:b2:51:07:e6:47:42:49:e1:
d3:27:5c:9c:96:46:7e:7e:68:d1:2d:0e:17:6d:99:08:79:75:
75:71:c5:80:b0:56:d7:4c:80:af:83:8c:b2:99:45:36:94:2e:
c7:94:51:6e:58:92:96:c8:79:52:dd:17:b5:2d:f3:ad:85:f7:
89:65:10:c0:21:10:f1:43:43:c8:4f:15:18:01:94:6d:b4:b2:
2b:eb:16:92:b1:21:5a:7f:a8:f8:38:2b:d5:3e:10:f6:f5:f6:
b2:46:7b:c9:91:08:73:22:50:cb:9a:50:5f:d3:97:6e:f7:ca:
a1:6f:37:a2:a3:0f:ed:92:39:90:cc:4b:4c:2d:58:1c:5d:da:
1e:81:7e:64:82:7f:8a:b2:b0:31:e8:96:90:bb:cc:f1:7d:45:
eb:4a:98:50:4f:6f:bd:8b:7d:ea:8f:b6:e1:54:51:6e:37:12:
6b:cc:51:00:30:98:4f:96:ab:33:57:be:02:f0:0e:f3:7b:d0:
39:b7:2c:20:07:8c:37:4d:1d:4d:d3:f7:42:a6:ae:d7:20:87:
ed:89:f1:87:1e:5d:74:10:4f:4f:48:d6:81:8b:a7:18:f8:a2:
5a:d2:c2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:01:48 2026 by rpki-client