
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/p-Az6i8RUpmxh9OfUcy-kX0aJqo.roa
File: p-Az6i8RUpmxh9OfUcy-kX0aJqo.roa (raw, json)
Hash identifier: UgHgS24D2MUPVW7R0uIefjohd6tr3HEJF6T77dE/68k=
Subject key identifier: A7:E0:33:EA:2F:11:52:99:B1:87:D3:9F:51:CC:BE:91:7D:1A:26:AA
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 14D8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/p-Az6i8RUpmxh9OfUcy-kX0aJqo.roa
Signing time: Tue 31 Mar 2026 07:58:24 +0000
ROA not before: Tue 31 Mar 2026 07:58:24 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.74.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5336 (0x14d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:58:24 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=A7E033EA2F115299B187D39F51CCBE917D1A26AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:98:22:8c:1a:f6:f9:d5:69:39:6a:0e:e9:d0:
5d:c3:6e:6f:86:2e:bd:42:48:0e:10:b2:11:8c:04:
a0:9c:8a:16:44:10:2f:d7:1e:fc:e7:44:c8:8a:1a:
10:fc:78:cf:55:7a:67:e8:bb:39:1f:9f:e7:5a:af:
0f:f5:e2:2b:47:ec:a6:9c:b1:07:58:2f:52:e0:7b:
47:57:ec:16:e1:32:29:c7:e6:05:4c:46:b5:f8:94:
a3:7d:f4:d5:2e:56:09:61:4b:ba:ba:70:2e:38:3b:
f9:cb:41:cb:eb:42:72:04:41:f1:ec:b9:55:78:d4:
9f:85:3a:7b:b6:5f:70:bf:db:93:39:9f:7a:c0:26:
8a:29:f0:af:fe:f2:63:03:7f:65:d1:fa:2b:6f:d0:
c3:04:3d:aa:8e:e2:c1:a6:df:38:95:c9:ad:36:cf:
34:61:b6:3e:55:7a:39:09:31:ab:c9:24:77:7c:f0:
71:ea:39:c1:ea:55:30:fe:26:a4:c6:38:e4:2e:dc:
7e:2d:ed:d6:ef:00:43:e5:2d:14:93:ab:c9:6c:90:
9d:6e:41:12:c0:60:98:7e:b5:a8:d1:9f:73:6d:19:
d3:0d:32:54:93:55:17:00:25:18:7a:35:72:23:95:
3a:c0:0f:78:bd:4e:58:03:c1:5c:54:b9:50:90:97:
f1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E0:33:EA:2F:11:52:99:B1:87:D3:9F:51:CC:BE:91:7D:1A:26:AA
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/p-Az6i8RUpmxh9OfUcy-kX0aJqo.roa
sbgp-ipAddrBlock: critical
IPv4:
1.79.74.0/23
Signature Algorithm: sha256WithRSAEncryption
48:0b:c5:21:50:ed:de:56:4c:8c:d7:2d:0f:c4:d6:23:ba:51:
a8:b8:d5:6c:71:ed:0a:95:8b:ea:bd:42:3c:58:6a:41:a3:e8:
1f:86:3d:9a:f6:65:0e:8e:a2:fa:59:d4:d5:a4:f4:b7:58:39:
ce:8b:37:18:66:1f:df:bf:be:75:9f:02:6e:88:46:52:c3:2c:
36:22:76:39:92:c4:25:56:4c:28:98:13:a6:96:9b:9a:ff:4b:
93:43:07:6e:10:57:90:1b:43:19:b2:7a:a9:4d:9c:80:c0:de:
54:01:7e:e2:3e:f1:70:6a:64:9e:9d:5a:ad:45:ad:e0:a2:2f:
67:4a:28:35:7e:19:25:2c:85:a0:d5:35:96:5a:26:ad:6e:ad:
87:00:b9:a5:d3:10:c2:5e:d7:14:13:12:9e:bb:e6:1f:0f:98:
7f:f3:23:3f:86:cd:4e:44:ef:93:b6:64:c4:ad:11:c4:4c:8a:
13:6d:53:d6:e5:bf:bd:0c:ba:78:ec:9d:8e:15:1f:61:34:79:
20:2e:c5:02:71:d1:1c:7b:0d:6a:d3:c8:85:83:f8:af:3b:1b:
c3:75:c0:97:af:10:77:4b:91:35:94:46:35:41:1f:79:9e:ed:
c6:b0:38:84:47:d2:08:19:8b:30:f4:d4:99:d5:6a:1b:b1:ae:
ca:bd:a6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:09 2026 by rpki-client