
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/rXPBGfNcph0eDXn8NPDHQ94n67k.roa
File: rXPBGfNcph0eDXn8NPDHQ94n67k.roa (raw, json)
Hash identifier: msQnbP1zNasm8Lowjc+ImC/o/4x5epp8HAOGNzz09J8=
Subject key identifier: AD:73:C1:19:F3:5C:A6:1D:1E:0D:79:FC:34:F0:C7:43:DE:27:EB:B9
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1782
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rXPBGfNcph0eDXn8NPDHQ94n67k.roa
Signing time: Tue 31 Mar 2026 08:03:58 +0000
ROA not before: Tue 31 Mar 2026 08:03:58 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 27.230.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6018 (0x1782)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:03:58 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=AD73C119F35CA61D1E0D79FC34F0C743DE27EBB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0f:81:32:69:93:cc:de:59:c1:a9:47:eb:5d:
ad:39:62:61:ff:b4:2f:1b:28:08:7a:f6:2d:d3:66:
b1:01:c4:8b:40:7b:fb:c2:26:29:10:1a:62:79:61:
77:e0:91:72:15:3c:3e:28:73:0c:ff:1a:83:21:dc:
97:10:79:59:67:2d:ca:c8:ef:e1:6b:12:b9:15:cd:
4c:ca:66:ed:ec:83:60:1b:a1:c0:76:fa:4a:7c:e1:
a3:b4:d4:02:09:86:d8:bf:db:5a:15:ee:aa:99:ca:
1f:1c:a6:81:cb:3f:22:a6:00:a9:11:fc:8d:0b:fc:
c3:98:89:54:ec:b1:d7:20:4a:49:b7:06:bb:32:04:
79:9b:47:61:c2:a0:a2:ac:42:ff:bf:47:25:97:ae:
20:9b:14:76:2a:51:95:a0:4b:b4:91:9d:43:d8:be:
6a:51:69:41:84:10:14:ce:f2:2b:6b:4e:d8:63:c5:
3c:c4:10:31:8e:03:1e:48:f6:be:f8:43:3a:ba:d4:
8e:f5:df:e3:45:c6:c8:68:9b:77:5f:21:20:ec:19:
51:96:de:57:db:eb:51:36:73:c9:d2:7e:ad:13:3f:
85:48:53:85:5a:7d:d9:b0:94:6b:e1:1b:14:44:63:
20:9e:06:cf:14:c5:69:52:18:f5:50:3f:98:1f:ff:
08:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:73:C1:19:F3:5C:A6:1D:1E:0D:79:FC:34:F0:C7:43:DE:27:EB:B9
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rXPBGfNcph0eDXn8NPDHQ94n67k.roa
sbgp-ipAddrBlock: critical
IPv4:
27.230.144.0/20
Signature Algorithm: sha256WithRSAEncryption
55:a7:62:dd:d7:ad:ad:19:a3:a2:13:43:55:c4:88:ad:40:bd:
09:02:cd:51:d9:01:8a:89:00:e7:f4:b4:0a:2c:ae:b6:80:9f:
cd:c5:74:3a:58:62:4d:9b:b4:4c:68:33:e7:a8:d1:b8:12:f6:
82:03:2e:cd:df:0b:86:16:a4:a0:4e:8a:27:8d:1a:a0:09:e1:
e2:6c:6b:68:12:dc:d9:a2:60:08:6f:55:b9:65:f3:3b:0d:24:
47:ad:3e:c9:17:45:c2:29:f8:32:a1:11:69:0c:28:36:81:d6:
b0:20:b6:e4:12:7b:98:d4:4d:58:77:41:ce:72:63:b7:4a:51:
fa:03:e4:9f:7f:1d:6c:ac:cd:d7:8f:38:13:a2:27:70:8a:fb:
8a:2c:03:86:bb:f5:07:1c:98:30:34:23:c4:09:ba:20:0d:78:
cd:ab:ca:61:00:3c:10:d6:39:93:e7:da:d1:ac:d4:9f:23:35:
d2:dd:23:2e:11:9b:32:24:fb:21:aa:ca:df:d0:65:ce:b8:7e:
22:6f:42:bf:bb:93:68:2b:73:04:51:1b:7c:48:b6:a3:b8:f6:
4f:6b:8f:03:62:79:08:0a:3e:29:29:2b:20:03:e3:a8:38:04:
12:e7:40:a8:b7:7a:7f:15:29:7c:a2:2c:84:c2:ea:25:0a:ab:
3a:26:66:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:38 2026 by rpki-client