
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/pmuYVuKmmZRxTZ5JTvMxtpI-ooo.roa
File: pmuYVuKmmZRxTZ5JTvMxtpI-ooo.roa (raw, json)
Hash identifier: hPAt8pzR6aA7yjXcRXI/4CWQQun9+H7LmnkiET3q8rA=
Subject key identifier: A6:6B:98:56:E2:A6:99:94:71:4D:9E:49:4E:F3:31:B6:92:3E:A2:8A
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1380
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pmuYVuKmmZRxTZ5JTvMxtpI-ooo.roa
Signing time: Tue 31 Mar 2026 07:55:42 +0000
ROA not before: Tue 31 Mar 2026 07:55:42 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.75.6.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4992 (0x1380)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:55:42 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=A66B9856E2A69994714D9E494EF331B6923EA28A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e6:9f:c7:30:59:ce:52:c3:b3:5d:3a:ca:a7:
90:83:03:4b:25:f6:da:70:5a:e4:7a:bc:d6:03:f2:
db:5a:e6:94:09:83:0e:ca:70:cf:23:e1:9a:79:04:
b9:24:9f:8c:5a:1d:ed:06:53:05:7e:43:c5:9b:f3:
34:d2:0b:ba:86:37:71:99:16:72:89:30:73:fe:11:
ca:19:58:6c:d5:74:28:b0:33:1e:bc:80:9e:78:40:
14:4a:ea:4c:38:c1:ac:f2:b7:3f:0d:fa:83:7e:2d:
82:f3:06:f7:ab:14:ca:aa:c6:20:13:36:b9:5e:73:
44:2d:a7:da:94:ea:20:ad:ed:f3:a8:0a:c8:b0:c2:
b7:24:3d:ed:51:c8:6b:03:ef:64:29:0b:f5:d2:d6:
6c:f1:52:8a:82:2b:91:fd:15:1b:a6:df:25:fd:ad:
b6:44:2a:2e:81:51:0b:f8:0b:cc:5c:6c:8f:3d:1c:
f8:21:a2:3f:39:ae:ba:00:eb:73:06:4d:db:b6:9d:
a1:25:f0:6e:c0:e0:93:65:27:7f:58:93:94:69:62:
a1:61:13:0a:7a:80:94:ec:dd:e0:4a:09:fe:5c:77:
45:57:c8:87:3f:11:11:62:4e:ad:81:6b:b8:77:e7:
16:64:86:40:e3:48:90:ff:18:12:40:c9:5e:dc:4e:
65:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6B:98:56:E2:A6:99:94:71:4D:9E:49:4E:F3:31:B6:92:3E:A2:8A
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pmuYVuKmmZRxTZ5JTvMxtpI-ooo.roa
sbgp-ipAddrBlock: critical
IPv4:
1.75.6.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:fa:be:a1:8b:27:c4:df:5d:f6:72:a8:2d:ba:d0:7a:ad:c8:
22:e4:c8:e3:c7:56:fa:3f:11:c3:d5:23:b7:d6:c2:05:49:35:
df:6b:1a:d8:23:ce:d1:7b:32:1e:21:75:f3:14:22:35:84:68:
f8:58:ef:77:97:b8:68:78:f0:e2:67:e1:ee:98:6b:fa:08:63:
2c:c4:b7:ce:89:23:e9:91:26:45:e7:59:63:01:d2:99:2d:1c:
09:8d:73:ff:a8:f5:2b:3f:9c:72:88:29:4f:e4:2e:93:75:cc:
4d:00:29:5d:14:9d:74:7f:1f:7b:65:c0:70:60:32:e7:21:b2:
6d:f7:fd:98:3f:30:41:d9:20:1e:fc:da:dc:27:2f:ca:8c:73:
6b:20:bc:fb:11:e8:d0:76:2a:85:9d:c9:7d:5e:94:ec:30:b4:
f2:cb:38:9b:0f:2a:d8:80:96:a2:df:fc:ed:c5:af:12:9c:6e:
3b:41:ea:0f:a8:a9:b1:fc:d5:71:91:32:e1:b6:a4:40:f7:7c:
cf:ed:3a:61:ea:5d:46:4f:4e:ba:f1:85:17:06:78:ea:4a:40:
ed:c3:53:24:7c:2b:7b:44:0c:c0:55:b7:d8:85:ac:38:fe:02:
37:ff:9e:df:9b:76:03:a1:b5:a0:49:d8:9b:3b:8a:d1:5a:02:
98:11:b5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:35 2026 by rpki-client