
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/pCaMUmG9VdCJ62B4kkdVOyEfYgk.roa
File: pCaMUmG9VdCJ62B4kkdVOyEfYgk.roa (raw, json)
Hash identifier: ew0hZx0+MPgYy/mittD+Dlrgg+pye7oLmkD8paQk1ZY=
Subject key identifier: A4:26:8C:52:61:BD:55:D0:89:EB:60:78:92:47:55:3B:21:1F:62:09
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1445
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pCaMUmG9VdCJ62B4kkdVOyEfYgk.roa
Signing time: Tue 31 Mar 2026 07:57:13 +0000
ROA not before: Tue 31 Mar 2026 07:57:13 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5189 (0x1445)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:57:13 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=A4268C5261BD55D089EB60789247553B211F6209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d1:5e:b2:00:95:39:08:63:4c:96:ed:16:a7:
66:91:b8:f8:06:a1:64:08:d5:8a:51:09:ca:d8:a1:
30:4a:d4:90:57:35:ed:d7:08:16:4d:9b:f4:c8:59:
5b:1d:57:e1:7a:74:cd:9a:2e:d4:6d:d6:3b:98:6a:
b6:43:ff:a4:10:39:81:06:13:4f:c4:c9:43:f3:38:
6a:4b:ec:ed:13:be:35:84:13:d3:84:e9:e6:33:57:
3b:b8:3b:ed:b9:68:d3:cb:54:46:57:67:48:18:bb:
99:44:1e:d8:12:c2:a0:74:9d:4c:92:40:f9:52:29:
39:ee:ec:1b:bb:18:5d:5e:e6:d4:3e:3e:7c:d9:ad:
ae:59:d8:7a:8f:ed:ed:77:97:04:dd:70:75:31:05:
e9:e4:c3:8d:0f:32:75:58:b5:ca:ee:e1:ca:30:4a:
43:7d:4e:8d:09:2b:16:a1:f1:96:6f:2c:07:62:1d:
ca:6f:a6:00:17:f5:c9:d1:10:f2:9c:80:f2:bb:a2:
24:3b:a0:81:3b:d2:b4:70:90:56:45:b1:70:1f:18:
52:51:90:4c:7c:47:8f:22:e2:33:19:ff:b3:cc:cf:
98:c9:13:c8:ea:74:59:9b:57:4e:b2:3d:4e:24:cd:
a6:7a:27:68:22:9c:f7:d7:f6:45:a5:b7:25:fa:c9:
c0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:26:8C:52:61:BD:55:D0:89:EB:60:78:92:47:55:3B:21:1F:62:09
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pCaMUmG9VdCJ62B4kkdVOyEfYgk.roa
sbgp-ipAddrBlock: critical
IPv4:
1.79.14.0/23
Signature Algorithm: sha256WithRSAEncryption
34:bc:74:f6:53:5c:98:5e:ff:5e:ae:de:61:95:af:40:17:4f:
58:cc:f6:6c:62:ec:b2:d3:3b:97:bd:f4:ab:b4:f1:a1:d6:31:
30:8b:de:d2:2b:97:05:21:ec:c5:24:56:b3:60:f3:35:af:0b:
16:94:d4:ff:06:84:80:a0:4b:de:9f:55:2d:ba:af:dd:a2:f2:
10:a3:be:40:9f:f8:c7:9b:00:0d:53:65:d3:9c:9e:5e:79:63:
d6:66:09:aa:42:a5:f2:7e:af:c1:3a:86:13:34:72:14:9d:fa:
58:a6:7b:d0:24:99:e0:6f:1d:25:0a:36:36:96:3c:75:03:bd:
ec:72:6c:40:0d:9b:b4:b1:6a:02:cf:d6:2e:52:d0:03:e3:fc:
bd:6d:80:c9:63:f3:71:1c:38:96:87:3e:c3:2a:58:fe:62:ae:
41:cf:a4:df:dc:23:7a:3c:4b:aa:1b:d5:db:ec:30:ff:41:00:
34:77:d4:a2:20:01:68:1c:cc:ff:86:b9:1f:94:cd:d4:a3:14:
9d:ad:08:63:fb:fa:97:da:30:84:72:91:7e:2e:9f:36:88:1e:
b6:08:9a:b7:e6:a9:d6:2f:cd:b9:6e:08:c3:78:c6:04:4d:46:
e7:45:17:c5:84:0c:ab:4a:43:7d:b1:30:35:25:08:95:e8:c5:
c7:d2:3d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:07:03 2026 by rpki-client