
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/y1YfFLupIwt1-NqydTyezblkU0E.roa
File: y1YfFLupIwt1-NqydTyezblkU0E.roa (raw, json)
Hash identifier: jg/WGAsHICtAoEriG4drYPjuDEpVxZHwq51DilQYRYI=
Subject key identifier: CB:56:1F:14:BB:A9:23:0B:75:F8:DA:B2:75:3C:9E:CD:B9:64:53:41
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 142C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/y1YfFLupIwt1-NqydTyezblkU0E.roa
Signing time: Tue 31 Mar 2026 07:56:59 +0000
ROA not before: Tue 31 Mar 2026 07:56:59 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.78.18.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5164 (0x142c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:56:59 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=CB561F14BBA9230B75F8DAB2753C9ECDB9645341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f5:e1:8d:39:bd:96:04:16:df:0c:93:e5:d5:
fd:ee:15:c5:0f:d3:3a:42:71:cd:05:24:d3:da:2f:
dc:5c:2a:01:f3:f3:e0:18:42:70:12:92:26:aa:bf:
15:b6:f0:ef:80:a4:0b:9f:8b:9e:a4:c6:73:56:ae:
77:07:91:2d:4a:f8:a1:df:fb:44:17:1a:b4:08:d3:
62:c3:c0:34:86:5e:d3:ac:89:1a:60:d4:0c:6f:15:
65:cf:07:b1:c3:e4:b8:d1:9d:d8:5d:5d:59:7f:68:
c0:68:5b:72:37:41:b8:1f:d9:f0:50:4f:1e:81:2a:
2d:00:c4:6c:00:1b:62:14:ee:39:8d:75:ef:52:fd:
5a:63:6f:a7:82:fe:05:f1:59:a8:29:0a:2e:9a:2a:
cb:a2:57:94:e3:30:a5:9c:6e:a9:16:24:7b:17:d3:
a0:9e:d9:a8:90:98:9a:6f:09:d5:f7:6b:3d:7b:8b:
ff:6a:7f:b3:0e:86:b4:56:d4:e0:0d:fd:19:3e:b9:
a6:f4:56:fa:4c:9c:4f:45:19:fd:36:62:65:c8:d4:
64:ea:db:53:ea:7d:6b:28:33:af:67:8f:28:0d:7d:
28:8d:de:c0:a2:09:99:85:41:7a:09:9e:cb:e3:dc:
63:c5:00:d9:c4:0b:ac:3e:1b:5d:f3:3f:7e:68:4c:
16:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:56:1F:14:BB:A9:23:0B:75:F8:DA:B2:75:3C:9E:CD:B9:64:53:41
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/y1YfFLupIwt1-NqydTyezblkU0E.roa
sbgp-ipAddrBlock: critical
IPv4:
1.78.18.0/23
Signature Algorithm: sha256WithRSAEncryption
dc:f1:17:7e:41:25:23:6a:5f:fc:43:d1:11:79:58:ef:f6:21:
cd:6d:06:e9:84:cd:34:2f:0f:13:6c:8a:8c:2a:b6:14:ac:58:
e4:7e:78:54:e8:13:68:ae:26:8a:93:3c:d5:17:2c:e0:e2:b5:
aa:42:87:88:08:36:2d:9f:3b:78:04:96:ff:48:e6:0f:9c:91:
0f:81:91:9f:0c:ff:1d:e2:08:55:5a:98:24:34:d2:d9:f3:bd:
76:c2:6d:48:0b:1e:aa:25:70:47:8c:30:07:d7:b7:d2:09:88:
7f:e6:0c:6b:78:d3:ea:04:7c:51:46:75:38:48:cf:c2:94:bb:
1a:73:a7:ab:a7:85:d1:a5:f1:77:f4:4c:40:f7:7a:80:88:0b:
b8:a8:1e:55:ee:a2:f8:4f:e3:ca:cd:cc:64:20:61:c7:62:9a:
38:99:f5:25:3c:db:fa:7c:42:c3:7f:04:92:8b:f9:cb:b4:55:
86:52:40:f2:0e:78:67:78:3d:bb:7d:d8:76:28:66:2f:e0:63:
05:86:9e:76:9b:79:bb:89:aa:fe:69:1e:9f:16:1d:02:f1:b8:
4f:a0:4a:2b:db:ca:02:52:cb:81:c3:45:8d:c6:bd:1f:10:63:
66:d4:51:5c:a8:39:89:93:9c:e0:12:b5:d0:f6:93:13:1b:c6:
29:43:07:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:31 2026 by rpki-client