
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/qLw_OVf7YNdQddQUOuSwIdtnXUU.roa
File: qLw_OVf7YNdQddQUOuSwIdtnXUU.roa (raw, json)
Hash identifier: vgok/oBq479H2i02gi/FI1h6cXfLJWhSXWuPqDa6ofA=
Subject key identifier: A8:BC:3F:39:57:FB:60:D7:50:75:D4:14:3A:E4:B0:21:DB:67:5D:45
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 157A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qLw_OVf7YNdQddQUOuSwIdtnXUU.roa
Signing time: Tue 31 Mar 2026 07:59:42 +0000
ROA not before: Tue 31 Mar 2026 07:59:42 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 220.210.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5498 (0x157a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:59:42 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=A8BC3F3957FB60D75075D4143AE4B021DB675D45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2c:f5:3b:e8:07:ea:30:46:a8:63:17:56:da:
23:31:52:97:d8:76:74:14:ee:a6:9e:38:1d:a1:12:
cc:3b:b6:75:50:46:c6:ab:d4:a6:64:79:bc:07:7f:
15:8c:c4:60:90:58:11:ff:2b:15:cb:dd:49:6a:8c:
83:dd:a0:1f:5f:47:73:3c:e9:b5:6b:32:1b:b9:d6:
32:33:e3:3a:4f:d4:99:d9:c0:e6:cf:ac:5f:4b:a4:
78:1e:8a:33:21:a4:83:98:37:ac:2d:21:70:5b:f1:
3d:34:e3:3f:f0:83:51:8d:cd:17:97:3d:0e:3d:10:
93:4e:b6:d3:bd:8a:89:6c:d3:66:8e:cc:c9:36:a9:
8d:e5:ec:91:f9:ce:54:de:dc:81:76:c6:15:51:c0:
0b:0b:f9:8c:ca:50:52:18:75:6e:79:bc:ef:90:b2:
56:89:19:f0:eb:43:52:45:1e:0f:21:f6:b4:28:c9:
0e:22:55:b3:2c:5a:71:0c:ae:31:85:59:01:60:3c:
43:7f:3b:a2:10:9e:da:cc:ea:a2:64:1b:70:22:c6:
1d:40:3c:52:e4:3f:a6:2c:c8:d3:c9:93:bf:d6:23:
65:62:12:58:31:88:14:d7:f4:0b:1e:35:48:62:ee:
9d:72:48:f6:4b:ab:29:65:28:b3:3e:d8:a4:74:c9:
0b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BC:3F:39:57:FB:60:D7:50:75:D4:14:3A:E4:B0:21:DB:67:5D:45
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qLw_OVf7YNdQddQUOuSwIdtnXUU.roa
sbgp-ipAddrBlock: critical
IPv4:
220.210.56.0/22
Signature Algorithm: sha256WithRSAEncryption
85:45:36:1d:be:71:41:12:79:71:25:32:01:13:a5:30:cc:7f:
23:58:ad:5d:f1:ea:0d:56:56:e9:88:e9:bf:a1:96:2e:5b:bf:
63:57:4a:66:08:84:c9:3e:01:7c:fd:03:40:34:ff:c7:68:cf:
66:e3:86:e0:15:bb:fc:02:7b:6c:1c:6f:c9:dd:3c:7c:6f:44:
7e:1e:cf:d9:97:de:4e:b1:56:57:d1:ed:f3:94:4d:d3:7b:34:
fb:fa:7a:7c:02:42:13:29:38:3c:e0:0b:76:1e:28:24:0d:f3:
4e:24:95:87:2a:6a:c0:7d:1d:2e:c4:df:32:6d:51:73:c5:b8:
22:58:77:df:24:6b:26:fc:b5:89:6a:b9:e1:ee:e2:3d:76:f6:
98:9a:a7:e1:c5:aa:f9:7f:bc:96:1a:5a:71:e0:74:23:69:4b:
d6:7f:47:f0:e3:75:7b:dd:75:9a:ff:f4:54:45:ed:23:01:8c:
b0:75:da:57:12:79:6f:b3:c5:29:98:82:08:2d:c5:a4:ef:c0:
9b:13:c1:51:9f:93:a9:65:ec:50:00:5a:9b:18:af:0a:21:51:
90:70:c7:4b:a7:0f:7a:ad:d3:75:4e:37:87:16:48:ab:f6:45:
2b:df:f8:72:8b:60:b1:47:c0:8a:5a:da:b7:2c:78:6d:fd:89:
12:45:d6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:06 2026 by rpki-client