
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/uuV79GJ0k7SXSO7fqpsezR7guLU.roa
File: uuV79GJ0k7SXSO7fqpsezR7guLU.roa (raw, json)
Hash identifier: jCtq8TH/G05Mfj3zZA/U+dMKJqNCV12BbUcfWrKEOt8=
Subject key identifier: BA:E5:7B:F4:62:74:93:B4:97:48:EE:DF:AA:9B:1E:CD:1E:E0:B8:B5
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1863
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uuV79GJ0k7SXSO7fqpsezR7guLU.roa
Signing time: Tue 31 Mar 2026 08:05:53 +0000
ROA not before: Tue 31 Mar 2026 08:05:53 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 220.159.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6243 (0x1863)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:05:53 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=BAE57BF4627493B49748EEDFAA9B1ECD1EE0B8B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:64:f2:44:41:62:92:cb:03:b4:e1:43:62:f0:
da:9c:cc:cc:3e:fb:c0:52:42:f5:b8:3e:e3:72:0e:
97:b7:a4:aa:1b:85:b6:cc:f9:49:d4:40:41:92:84:
eb:c8:0c:67:85:4d:2f:49:b0:5e:21:0e:2a:b2:7c:
8f:f2:5a:18:c2:16:aa:65:f9:d3:c8:87:b7:a3:ce:
9e:d0:9b:39:bf:ee:90:27:7f:2e:9e:55:95:c6:ba:
7b:de:8d:88:3f:6b:e5:84:55:42:b7:bd:99:0b:8a:
49:3f:79:e8:f4:ca:05:eb:27:48:f8:b2:28:fb:57:
bc:23:0f:cc:a3:4f:a0:3f:43:82:c4:55:f0:da:ec:
8c:48:25:fc:cb:85:31:57:a3:52:3b:db:d6:f8:28:
0f:0f:04:f6:11:4e:77:79:43:af:c9:74:5d:84:02:
cf:49:bb:07:19:d0:d2:7c:3c:1f:94:8c:c2:52:03:
ef:9a:07:b0:55:58:c3:ba:af:11:e5:40:00:4c:3a:
09:79:5c:25:c8:4a:51:c9:66:28:f5:56:56:3d:b7:
91:7b:e9:46:cd:7c:10:f0:1e:b2:dc:6e:b8:0d:1d:
bd:fc:93:57:de:05:37:e2:30:25:2e:cd:ab:f7:87:
04:4f:f2:fa:1c:0c:3b:d4:f1:03:3b:33:fd:6e:a6:
92:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E5:7B:F4:62:74:93:B4:97:48:EE:DF:AA:9B:1E:CD:1E:E0:B8:B5
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uuV79GJ0k7SXSO7fqpsezR7guLU.roa
sbgp-ipAddrBlock: critical
IPv4:
220.159.207.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:85:04:11:0f:7e:d0:57:e6:de:21:90:a5:85:cc:a5:84:ff:
3a:01:21:3a:1f:77:2b:99:8a:bb:55:a0:04:dc:31:2d:81:14:
59:90:67:5d:92:b7:e9:59:3c:54:1a:8e:29:0e:0a:14:5c:32:
0b:3a:5e:7c:f7:82:ba:1a:33:6a:20:32:2b:cb:b3:b6:84:47:
6b:44:66:54:81:3e:8f:e3:47:9d:d8:6f:59:b8:64:15:7f:4d:
a9:9b:2c:8b:3d:f8:cf:17:ad:13:65:ee:77:4a:c8:13:a5:48:
11:19:32:12:fe:10:30:92:dd:2e:eb:59:b4:29:87:a2:95:58:
52:49:d5:88:59:e8:21:7a:40:ac:8f:1b:d5:f9:7b:c1:8a:09:
da:43:3c:1a:d3:2a:11:0c:a8:0f:d3:a9:16:69:56:67:d1:55:
b8:72:01:f8:d8:c6:3f:c0:c4:c0:f2:9f:0b:4a:bd:4d:da:2c:
5d:ff:e6:b9:1f:f6:d0:71:71:a7:bb:6a:e4:6b:f8:3c:ce:03:
17:80:f3:bc:1c:1d:97:a3:fb:6e:42:1a:d5:61:26:48:53:94:
30:e3:6f:21:0e:06:c4:52:70:ae:31:3b:ae:85:b4:9a:88:8e:
3b:d9:11:42:00:c8:64:70:1d:64:16:27:23:ee:53:40:5c:53:
37:f4:d6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:56 2026 by rpki-client