
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/yeJlKMtW-G3r0mU8QAOzdKFm97c.roa
File: yeJlKMtW-G3r0mU8QAOzdKFm97c.roa (raw, json)
Hash identifier: phsv2SbUlVkVXBgXbJ8zOymo1Y28Fjg/eGlhojSKb1M=
Subject key identifier: C9:E2:65:28:CB:56:F8:6D:EB:D2:65:3C:40:03:B3:74:A1:66:F7:B7
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 14FD
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yeJlKMtW-G3r0mU8QAOzdKFm97c.roa
Signing time: Tue 31 Mar 2026 07:58:42 +0000
ROA not before: Tue 31 Mar 2026 07:58:42 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 27.230.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5373 (0x14fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:58:42 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=C9E26528CB56F86DEBD2653C4003B374A166F7B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d2:af:10:3b:7e:1f:24:de:56:f6:42:39:c7:
9b:05:43:76:af:3e:88:34:bd:68:9b:e3:8a:ba:22:
e5:ec:17:45:a2:ef:47:d7:34:c6:79:e4:6b:dd:4d:
31:ea:ca:60:3a:4f:c0:eb:4b:c8:fe:77:6c:12:8e:
84:7a:4a:d1:15:bc:78:b9:b0:a8:97:35:f1:e0:f4:
fc:67:fa:21:d1:6b:79:44:a1:44:53:09:cc:41:29:
90:41:49:20:fc:4e:c8:0a:32:11:21:36:be:51:66:
7e:31:61:d7:a4:e6:1a:db:a9:02:91:1f:f6:2d:e9:
5f:e2:ff:34:5c:fb:6b:77:f4:d7:b0:1d:f2:65:43:
85:9b:1f:d6:10:df:ac:24:da:df:df:d4:8c:98:34:
87:59:c4:7a:19:01:97:74:6e:a4:20:c4:36:3f:69:
f5:a4:9a:54:aa:28:f1:9f:8f:33:f7:e4:b3:ae:99:
ad:36:35:cb:ee:d1:f4:d8:99:02:60:d5:56:dd:68:
0a:7e:00:4b:f2:23:e7:f1:c3:1e:12:55:c7:40:57:
15:1f:5b:61:e2:fa:ed:b2:63:87:a3:df:ae:a9:71:
98:74:2c:ee:5f:78:95:b3:6c:93:50:6f:66:7a:6a:
a2:fb:9b:5e:64:18:a1:53:3e:52:2d:f0:ce:fd:f9:
44:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E2:65:28:CB:56:F8:6D:EB:D2:65:3C:40:03:B3:74:A1:66:F7:B7
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yeJlKMtW-G3r0mU8QAOzdKFm97c.roa
sbgp-ipAddrBlock: critical
IPv4:
27.230.64.0/20
Signature Algorithm: sha256WithRSAEncryption
19:97:c1:7a:6b:2d:78:3b:41:b1:b8:d2:f0:a0:64:96:e0:79:
df:a8:7f:12:32:37:cc:cb:72:46:56:1b:0a:2d:87:f3:b8:9c:
4d:4e:88:f0:27:25:cb:60:99:b6:c8:8c:76:e8:74:f2:d6:75:
f9:21:e4:f2:e6:d4:60:2a:43:a8:12:83:4b:07:b5:0a:75:4b:
60:44:b1:36:19:b7:40:d7:a1:91:72:bd:78:b6:2d:0a:f1:05:
3b:83:3f:45:fb:50:68:34:34:3d:61:ce:e8:18:d9:c0:33:7d:
2a:95:56:1e:03:4d:94:35:a2:5f:b6:ee:87:92:f3:ef:96:ed:
15:2e:4a:3e:38:87:4c:37:7d:ea:86:10:a8:97:19:c6:fb:bf:
9b:66:7d:ac:98:ee:75:7b:39:3b:2b:96:a8:93:8b:76:0d:97:
ae:ee:f2:e8:cf:0c:9f:36:9d:a2:92:1e:d8:e4:61:7b:e6:76:
c0:d3:dd:14:71:78:66:ee:dd:74:c9:9e:ec:34:d8:35:a6:78:
a9:2f:11:73:e5:5f:47:b4:ec:28:ed:76:73:c7:e3:b7:64:93:
ca:80:59:b8:e4:b0:a6:27:40:92:36:b0:c4:d5:63:7d:95:f1:
48:05:3e:9f:54:cd:b1:c7:62:e1:0a:d2:e4:cf:e3:99:4e:fe:
77:52:40:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:31 2026 by rpki-client