
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/r6pRHFP4-9WZQa-cZqvMf1HxeJs.roa
File: r6pRHFP4-9WZQa-cZqvMf1HxeJs.roa (raw, json)
Hash identifier: lq9snmR9L6nyXP5/F7fAXNcouDkX+Ybjj1RIg241f+8=
Subject key identifier: AF:AA:51:1C:53:F8:FB:D5:99:41:AF:9C:66:AB:CC:7F:51:F1:78:9B
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1792
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/r6pRHFP4-9WZQa-cZqvMf1HxeJs.roa
Signing time: Tue 31 Mar 2026 08:04:08 +0000
ROA not before: Tue 31 Mar 2026 08:04:08 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.66.20.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6034 (0x1792)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:04:08 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=AFAA511C53F8FBD59941AF9C66ABCC7F51F1789B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:da:d6:65:c9:d7:02:1e:7b:2b:f5:98:3f:8c:
f8:04:9a:6e:e6:3a:c7:ce:bb:58:49:9f:98:13:12:
39:c2:d2:42:58:35:a4:cd:96:3e:27:80:4c:be:2c:
f8:6c:41:89:5a:d2:89:c6:3b:42:5e:f6:0d:a6:d7:
d2:18:84:23:58:08:c5:aa:e7:9c:93:67:92:bf:a6:
05:e8:a0:67:d7:f8:f7:9d:8e:e7:10:55:03:77:c5:
74:f5:26:2a:77:6f:00:e8:87:8e:16:ad:09:ca:a4:
b8:3c:c2:56:d5:e6:93:f9:17:50:41:06:b5:8d:df:
26:fb:78:c0:aa:f8:54:16:6b:0d:c5:1b:a8:d8:08:
84:e4:7f:81:b4:19:3d:30:83:e9:46:b0:1b:75:37:
5f:f1:bf:bd:3c:88:b9:e7:b4:b0:0e:61:78:63:ed:
cf:ea:97:1a:66:7e:14:0a:ab:51:ac:79:53:3b:c9:
f0:89:07:06:a1:18:97:79:85:cc:36:ee:63:c1:ab:
24:9c:79:0c:ce:f4:33:b1:a6:98:fb:eb:a5:63:10:
9c:1f:2a:34:36:e6:7e:df:63:56:0b:5e:12:78:91:
6e:45:6c:48:9e:d3:ea:a0:a2:f0:e7:42:fc:a5:89:
2b:9e:12:1d:fb:fb:83:87:32:cc:15:1e:99:a8:af:
84:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AA:51:1C:53:F8:FB:D5:99:41:AF:9C:66:AB:CC:7F:51:F1:78:9B
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/r6pRHFP4-9WZQa-cZqvMf1HxeJs.roa
sbgp-ipAddrBlock: critical
IPv4:
1.66.20.0/23
Signature Algorithm: sha256WithRSAEncryption
e5:b0:a1:38:a7:6b:66:27:1c:d2:e0:17:4b:90:71:39:bb:5b:
3d:a0:3f:bf:2b:a5:e9:26:2b:b6:ad:60:54:a1:69:48:09:7f:
d5:dc:9d:d5:08:42:1c:d4:07:5c:44:18:e3:f2:8e:7e:86:22:
fa:1c:2d:50:4d:7c:a8:85:9f:30:94:71:47:30:ea:5d:37:f0:
bb:f8:cf:53:fa:7e:55:69:98:7d:56:0c:97:71:54:5c:0b:4f:
c7:68:d3:07:83:58:cf:39:bf:4b:cb:b8:8b:be:24:59:a3:8e:
a4:65:b4:1a:28:f8:f4:65:66:09:4d:56:91:2c:40:dd:8b:b9:
73:a8:4e:23:76:fa:b9:4b:ec:e2:33:9f:57:52:b5:dc:17:0b:
51:14:d4:03:66:34:bc:e1:ef:05:70:4e:69:c1:d9:ba:7b:87:
e9:a6:ed:72:f7:75:d1:62:1d:d2:5b:c6:1d:3b:e2:e2:d1:86:
58:59:df:ab:7b:b8:1b:b5:3b:fc:01:74:28:22:11:c8:de:00:
72:1c:aa:89:61:a0:3b:7f:48:16:68:31:b0:e8:e6:22:e3:4d:
e5:a6:53:fe:ca:bb:7e:15:2e:95:e8:02:ce:5b:e0:f5:e7:2d:
3c:15:80:63:b2:59:19:0d:e7:af:02:3d:9d:44:85:c7:1c:f6:
6c:31:7c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:34 2026 by rpki-client