
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/J9afGkSJZg398TRRe4mX0kB9iE4.roa
File: J9afGkSJZg398TRRe4mX0kB9iE4.roa (raw, json)
Hash identifier: xZ2QEpKLzwSf3F/rPeEMR2/T3LZaRqwbwCH8A1E+gxg=
Subject key identifier: 27:D6:9F:1A:44:89:66:0D:FD:F1:34:51:7B:89:97:D2:40:7D:88:4E
Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial: 014F
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/J9afGkSJZg398TRRe4mX0kB9iE4.roa
Signing time: Tue 31 Mar 2026 07:30:22 +0000
ROA not before: Tue 31 Mar 2026 07:30:22 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9607
IP address blocks: 211.14.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 335 (0x14f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Validity
Not Before: Mar 31 07:30:22 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=27D69F1A4489660DFDF134517B8997D2407D884E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:61:e5:05:43:4f:9f:7e:f5:87:2f:09:3e:76:
04:8b:03:f9:28:3d:a7:b0:f7:d8:5a:ec:f1:f8:08:
52:24:82:16:a4:e7:03:19:8a:a4:d0:97:f7:80:5a:
95:d5:1d:a8:28:d6:a1:c1:fe:3c:08:88:b2:e1:3a:
54:47:84:bb:70:3e:5c:db:e5:37:2d:2b:7c:2f:d2:
3f:d8:05:26:e6:65:7f:36:7b:56:b8:ff:d2:6a:f1:
ef:ee:bd:26:e9:c9:3c:8c:14:d3:0d:4e:0c:09:3a:
01:c7:5f:73:3a:8d:06:57:c6:cd:af:89:4c:20:b3:
86:b0:d9:22:cb:26:62:57:c8:54:3d:d9:e7:39:bc:
ca:ad:1f:f5:39:a8:40:7e:d9:be:91:c8:82:1f:41:
49:21:8b:d7:38:56:30:b7:0e:c8:d9:f6:a8:64:83:
1b:09:eb:26:35:fd:26:3a:bf:fd:5b:e6:29:e2:c3:
80:0c:06:82:f3:92:ff:0a:8b:21:b3:fd:7b:ca:e6:
8f:e4:4f:f4:5a:9d:76:09:dd:f4:55:83:56:a8:15:
03:d7:3b:1e:a5:7f:13:c1:06:63:58:8a:af:3c:6c:
e4:9f:09:ef:c9:e4:f0:2c:4d:8f:96:fb:20:46:8d:
b7:22:88:d7:89:ab:7a:2a:a7:a9:dc:7d:19:61:31:
09:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D6:9F:1A:44:89:66:0D:FD:F1:34:51:7B:89:97:D2:40:7D:88:4E
X509v3 Authority Key Identifier:
keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/J9afGkSJZg398TRRe4mX0kB9iE4.roa
sbgp-ipAddrBlock: critical
IPv4:
211.14.9.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:70:3f:55:4f:b7:0a:03:fd:e2:d6:45:32:50:32:ff:4c:44:
7c:31:0a:ba:95:83:aa:78:ad:94:a3:36:51:85:55:9c:da:c0:
42:04:67:57:ab:db:ac:a1:5e:97:84:57:e0:7c:44:af:02:b6:
43:49:e3:1c:c5:d9:d0:a5:78:44:b5:d5:3d:8f:67:b5:14:7a:
bb:ca:d8:73:fb:39:8f:e4:8e:5a:2f:af:f2:59:b9:40:90:bc:
d9:d9:c8:a5:9d:a0:d9:30:d8:40:64:2b:28:77:14:22:12:68:
64:95:41:aa:03:11:ea:5b:cd:a1:eb:0e:ff:64:5b:94:75:bc:
03:2b:f9:4c:b4:c7:69:03:8c:02:45:4e:ee:7c:28:f1:ab:a5:
8f:42:15:39:2a:66:b7:b6:0b:56:3d:3e:16:f0:35:5b:ea:20:
cf:3b:dc:e0:33:90:07:10:73:2d:ed:e2:ef:8f:65:13:30:70:
ff:ce:42:e3:42:6d:74:ad:11:a4:73:a9:83:f1:7c:87:3b:af:
60:e2:b2:87:8a:ca:b5:73:30:d0:52:26:04:d1:19:b1:c4:77:
b5:6f:54:31:6c:98:87:4e:e9:50:b6:e4:fe:3f:1f:b5:13:52:
a9:2f:f2:e8:0e:a3:c4:e5:f8:17:d9:9d:c9:69:46:f1:63:1d:
be:a6:be:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:19 2026 by rpki-client