
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/x0izXtsHBVv_OUIjxIue4gLdt1U.roa
File: x0izXtsHBVv_OUIjxIue4gLdt1U.roa (raw, json)
Hash identifier: utXtwbv1qXxP8h+xEL5mn3XG8fG3ctGCeWT8KpJP29s=
Subject key identifier: C7:48:B3:5E:DB:07:05:5B:FF:39:42:23:C4:8B:9E:E2:02:DD:B7:55
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1713
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/x0izXtsHBVv_OUIjxIue4gLdt1U.roa
Signing time: Tue 31 Mar 2026 08:03:06 +0000
ROA not before: Tue 31 Mar 2026 08:03:06 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 220.159.32.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5907 (0x1713)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:03:06 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=C748B35EDB07055BFF394223C48B9EE202DDB755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:86:35:bf:5a:8f:0a:79:6b:f3:be:b6:36:51:
bb:61:78:11:60:36:98:14:9b:91:3b:3d:92:c6:91:
a9:54:e4:fc:2b:b3:8b:70:5e:be:46:af:3e:07:b3:
36:3d:37:5b:33:19:82:71:e2:f2:d7:41:24:ba:08:
bc:3b:bf:48:4e:b1:ad:3f:10:2c:29:95:15:0c:3a:
67:38:92:ca:91:c8:2c:25:32:06:d1:59:4c:cb:d1:
6d:9d:59:9a:6c:8c:c1:d9:f9:fa:68:4b:e1:0a:a1:
fd:a6:f3:ff:98:4f:1e:d7:fc:d4:6e:3b:f7:1c:71:
0e:d5:e4:93:7a:2f:1c:47:57:87:9b:bb:e5:be:86:
ca:2a:ed:ce:97:51:ae:21:c8:9b:fe:6b:e3:2e:68:
a0:d9:f3:f9:91:c0:e9:e4:f0:93:12:6d:44:26:2e:
52:2f:2d:3c:4b:3f:76:84:e4:b8:bb:41:7c:68:1f:
c8:87:72:c9:34:75:84:d3:57:75:44:00:3f:b1:30:
9d:3e:2c:0b:6e:11:a8:40:6c:8a:39:f9:4d:2d:5a:
53:3b:df:3e:61:1b:61:01:49:05:01:e2:dd:56:eb:
8c:2b:7f:89:7c:96:55:6c:62:88:4c:8e:ac:8b:73:
10:1c:04:07:d4:0a:3d:01:bf:5c:2e:d6:65:af:2d:
f9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:48:B3:5E:DB:07:05:5B:FF:39:42:23:C4:8B:9E:E2:02:DD:B7:55
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/x0izXtsHBVv_OUIjxIue4gLdt1U.roa
sbgp-ipAddrBlock: critical
IPv4:
220.159.32.0/21
Signature Algorithm: sha256WithRSAEncryption
6e:7a:3e:eb:4f:7c:8e:7a:7b:70:2f:b0:b2:04:a3:e7:e3:32:
22:fc:50:42:d9:0a:0a:c4:59:72:d4:53:66:4b:a1:ab:f2:4f:
17:a7:88:31:1a:d8:e8:63:97:62:17:ba:73:75:14:1d:a9:cf:
c3:00:56:98:83:f2:99:43:a1:50:54:14:f5:c0:74:03:00:1a:
13:4a:48:eb:cf:7a:19:f1:af:20:47:26:83:60:7a:4f:a4:e1:
4c:15:c8:c3:aa:6b:10:8f:9d:66:24:45:e4:53:c5:90:64:45:
af:d8:55:a8:36:c2:0e:f5:62:36:17:b5:d1:76:ee:d3:63:07:
f5:f8:bd:ff:22:95:93:b7:01:91:f0:c9:4f:1d:ff:bf:86:80:
90:1b:10:89:ce:54:f5:e2:92:3c:a3:36:9d:cf:28:23:86:6a:
14:8f:1a:b1:99:49:be:5c:79:b8:5e:f4:e6:91:68:66:4a:81:
e4:53:33:dd:57:45:24:ae:11:be:07:19:e5:db:e0:93:f9:80:
a3:56:a3:56:c1:e2:f4:0d:ee:cf:bb:e2:fa:c0:12:4e:ba:9f:
a0:bd:af:b3:d1:16:9c:99:eb:ed:ad:e1:17:7d:c2:f8:69:7d:
fb:6f:e6:fe:4b:e4:6c:4e:39:99:b5:3b:50:6b:c0:5d:8c:07:
74:29:6d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:33 2026 by rpki-client