
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/oyC1WnR1UZ1yFvsaNxS8rIlWXc4.roa
File: oyC1WnR1UZ1yFvsaNxS8rIlWXc4.roa (raw, json)
Hash identifier: WBbUetotRwv+dxonrElHQOdgqq7D2ZsjBVd10LY/URQ=
Subject key identifier: A3:20:B5:5A:74:75:51:9D:72:16:FB:1A:37:14:BC:AC:89:56:5D:CE
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1810
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/oyC1WnR1UZ1yFvsaNxS8rIlWXc4.roa
Signing time: Tue 31 Mar 2026 08:05:13 +0000
ROA not before: Tue 31 Mar 2026 08:05:13 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.76.80.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6160 (0x1810)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:05:13 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=A320B55A7475519D7216FB1A3714BCAC89565DCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d9:97:61:e7:09:e3:13:8b:93:e2:c2:6a:10:
51:f0:8f:0e:25:0b:c3:3a:58:5a:36:35:6d:56:b6:
bb:33:16:68:ed:5b:89:af:61:2e:ca:15:e5:ec:18:
de:3d:8f:a2:c7:c9:dd:b8:94:ac:02:87:7c:7c:03:
4c:55:75:ed:38:a9:07:88:aa:91:14:73:19:b9:bf:
be:0b:07:c8:e4:cc:84:05:dd:9f:e5:92:b6:f7:aa:
24:a0:c9:f0:8c:14:58:00:4a:4f:b2:b3:b1:1b:d7:
46:06:a3:08:d9:0b:d1:9c:ac:a3:bf:80:8a:ba:fc:
6e:cc:dc:8e:6e:2e:67:68:21:cc:3d:b0:de:3f:e6:
f6:ff:ce:32:7f:04:40:47:23:ec:6c:ad:e8:ca:cc:
6c:a3:90:1e:13:c1:35:9b:fd:ca:77:4b:6a:f4:43:
75:bd:8b:a5:4f:ac:ff:42:a2:9d:06:fa:f0:70:00:
78:ee:69:11:10:5e:b4:e5:b3:c4:99:03:2b:08:48:
0c:e5:74:64:76:27:35:c2:a4:46:de:08:f1:41:bd:
fa:ba:17:9c:6c:f0:56:28:d8:68:9f:04:e7:0d:08:
0a:c4:11:b5:ba:8d:d1:13:40:42:53:94:c7:28:54:
29:23:01:9c:71:aa:58:e2:76:e8:32:2e:1e:03:28:
66:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:20:B5:5A:74:75:51:9D:72:16:FB:1A:37:14:BC:AC:89:56:5D:CE
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/oyC1WnR1UZ1yFvsaNxS8rIlWXc4.roa
sbgp-ipAddrBlock: critical
IPv4:
1.76.80.0/22
Signature Algorithm: sha256WithRSAEncryption
15:81:46:0a:f0:2a:d6:53:9d:53:ac:e2:65:05:f2:6c:92:05:
a7:d6:dc:f2:b3:f8:ec:e5:b3:ee:22:da:a0:64:5e:10:b1:e8:
a3:ba:7a:b4:df:e7:9a:06:98:b3:0e:aa:7b:ec:8d:0d:6c:70:
7e:64:6d:9f:5e:41:4e:12:cb:dc:a1:25:68:74:0e:d2:31:9c:
81:bc:6c:62:25:e1:a0:c0:55:52:5f:0e:5a:ee:bf:a6:33:0a:
07:03:c2:d7:6a:1b:88:64:45:c8:47:8f:c5:8c:75:3a:f7:21:
81:2b:03:5d:55:6f:1f:6e:a3:dd:12:72:94:a3:77:a0:20:3c:
75:ae:cb:10:64:a2:bf:e8:1d:f9:f6:85:53:c2:22:39:81:db:
00:76:94:80:70:ed:92:4f:31:65:98:05:a5:4f:31:8e:f1:d6:
1c:10:23:50:8d:c5:cc:2c:8f:ba:9c:c2:a0:52:e0:a5:43:a8:
9d:71:94:3d:c1:33:ff:7b:f7:0b:da:7b:8a:95:30:0d:2e:9a:
07:0e:40:e5:df:4a:9d:0b:ef:d4:a7:96:8a:15:c8:dc:25:04:
e7:e5:52:54:35:42:d1:1c:fc:d2:01:6e:7f:10:86:b5:f3:6a:
b5:b6:4a:92:80:4b:7b:85:54:d3:89:f1:4e:18:4b:b1:e0:88:
02:9a:1d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:03:26 2026 by rpki-client