
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/utO2TFctw_J8jzQnRY7Is6DWQ4w.roa
File: utO2TFctw_J8jzQnRY7Is6DWQ4w.roa (raw, json)
Hash identifier: H4XAhBNoyCpdVNfZcB6hVEEZDmJ33wV2AjCaXtTA1v8=
Subject key identifier: BA:D3:B6:4C:57:2D:C3:F2:7C:8F:34:27:45:8E:C8:B3:A0:D6:43:8C
Certificate issuer: /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial: A7
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/utO2TFctw_J8jzQnRY7Is6DWQ4w.roa
Signing time: Tue 31 Mar 2026 07:55:17 +0000
ROA not before: Tue 31 Mar 2026 07:55:17 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 148.68.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167 (0xa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Validity
Not Before: Mar 31 07:55:17 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=BAD3B64C572DC3F27C8F3427458EC8B3A0D6438C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3f:55:d6:bb:2a:30:73:b5:fa:90:a6:ea:4a:
21:44:0e:90:c6:ab:96:7a:ee:57:b7:ed:9d:07:ff:
56:9d:3f:a7:4b:58:b8:60:62:c7:d1:d5:63:4a:45:
52:d0:8a:5e:2e:45:f2:3a:16:42:dc:1a:ca:5f:ad:
d1:ba:7d:90:30:b3:90:75:17:2f:ad:bd:24:c2:e5:
c3:10:38:0f:99:0b:ab:25:9a:94:69:9c:69:c9:b6:
70:03:75:cb:c1:d0:12:ea:17:e9:89:de:03:d3:10:
79:3d:50:2a:42:f1:d5:57:13:e3:a2:91:ea:e4:43:
09:eb:e0:d9:3e:0a:1a:58:b7:c8:26:fd:1e:01:29:
26:f4:4b:1a:24:2d:ef:68:fb:dc:e8:9e:d8:85:30:
f6:fc:2e:07:b9:ea:ef:8e:ec:f2:96:be:7a:ee:01:
d7:69:e3:5f:10:12:30:ff:3f:c7:8a:41:fb:ab:89:
d9:cc:2d:8b:7c:96:1c:92:71:80:c6:e3:2f:ac:ab:
57:d2:f6:62:0d:2d:f5:9c:be:89:18:b5:1d:47:3c:
bd:4f:84:df:3d:0c:31:37:02:45:c1:7c:3c:82:10:
62:df:92:87:27:28:dc:41:37:83:76:b9:6f:3a:9b:
6d:2f:61:e2:5a:1a:a9:b8:42:1f:50:7d:23:31:f3:
42:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D3:B6:4C:57:2D:C3:F2:7C:8F:34:27:45:8E:C8:B3:A0:D6:43:8C
X509v3 Authority Key Identifier:
keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/utO2TFctw_J8jzQnRY7Is6DWQ4w.roa
sbgp-ipAddrBlock: critical
IPv4:
148.68.128.0/17
Signature Algorithm: sha256WithRSAEncryption
2e:4d:5d:d9:ec:cc:3f:75:34:1a:df:38:b6:b4:c1:1d:6b:01:
1b:fb:82:f2:6f:bb:27:0f:5e:82:f7:0e:c5:78:07:04:f3:c9:
79:a8:4a:b8:51:cf:9b:1e:c2:94:19:bf:79:7a:ce:76:a3:7e:
c0:47:05:cb:cb:b4:a6:69:ec:46:f0:f3:74:b7:2e:f5:10:7e:
4c:10:26:d0:09:6f:cc:d2:07:c4:fd:e1:31:c2:71:5c:f6:63:
14:9b:49:6b:0d:fe:be:b1:73:05:26:cb:f0:d9:c4:36:22:bc:
f9:ad:a6:c4:38:fa:34:cc:71:b2:7d:28:9f:fa:35:bc:4b:0a:
40:fd:4d:57:74:4c:f6:95:4a:ca:19:7a:c2:d3:4e:39:9a:5e:
8f:ed:ee:09:d6:9c:2b:35:dd:e4:8a:b1:32:cf:6e:82:fa:11:
4b:01:08:e4:1f:33:94:4b:47:8c:d7:e9:14:94:5f:d3:21:79:
03:f8:c9:d2:ba:8d:ac:93:1f:26:60:d6:94:64:f9:5a:4e:13:
75:eb:fe:81:cc:8c:e5:5f:4f:8f:27:da:c8:17:42:88:72:53:
54:76:d0:fc:8c:fe:cc:bb:80:9f:e0:65:6f:0f:f7:20:87:4b:
93:a3:28:90:cd:dd:47:a1:3e:4e:7a:31:a7:dc:5f:50:c0:af:
cd:72:5b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:23:42 2026 by rpki-client