
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/0OZTZy6eVX5oNuToGO1BOM2FlrQ.roa
File: 0OZTZy6eVX5oNuToGO1BOM2FlrQ.roa (raw, json)
Hash identifier: LkutX0FMom7FPNNVNXN09UVl3AfMkQQ9whtAu7J+NP4=
Subject key identifier: D0:E6:53:67:2E:9E:55:7E:68:36:E4:E8:18:ED:41:38:CD:85:96:B4
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 105F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0OZTZy6eVX5oNuToGO1BOM2FlrQ.roa
Signing time: Sun 01 Feb 2026 01:32:49 +0000
ROA not before: Sun 01 Feb 2026 01:32:49 +0000
ROA not after: Fri 15 Jan 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.75.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Feb 2026 12:38:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4191 (0x105f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Feb 1 01:32:49 2026 GMT
Not After : Jan 15 01:30:02 2027 GMT
Subject: CN=D0E653672E9E557E6836E4E818ED4138CD8596B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9d:46:07:49:f5:0e:93:98:d2:42:a9:78:04:
aa:16:46:1c:2c:3a:f4:9b:60:19:20:39:73:28:9f:
b9:09:33:35:ad:eb:ef:ff:f3:3a:bd:fe:04:af:45:
c3:68:87:6b:ec:ef:fe:45:c1:de:a1:4f:bc:93:43:
37:57:ac:5c:e1:ba:4c:94:60:cc:96:45:e3:7b:68:
65:7e:fa:30:3e:47:d3:40:0a:b0:81:70:92:4b:31:
af:99:74:06:6c:ee:c8:e3:e8:60:61:76:71:67:aa:
56:ca:ae:a9:c2:ea:7a:2b:5e:76:f4:6d:99:df:c7:
f0:47:73:00:61:26:eb:e5:ef:c0:75:c4:30:b6:b2:
63:03:72:cc:80:eb:9e:58:de:31:97:8d:71:03:ec:
5a:69:aa:94:f7:ee:2e:39:90:1b:ad:a6:24:ac:51:
4e:fa:a0:3d:2b:57:a3:c0:8d:55:8a:26:a4:05:8c:
a4:f4:51:a7:f5:f9:2f:6a:10:48:77:68:77:82:02:
b1:f3:35:93:00:c8:75:95:8f:8f:bb:84:4d:16:cf:
8c:99:89:66:14:20:41:e6:41:0d:4b:1b:c1:fb:59:
73:d7:87:74:64:d7:66:46:71:f6:c2:9b:19:97:19:
8e:f0:56:82:83:da:9f:fc:ac:db:bd:23:b9:c1:27:
5c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E6:53:67:2E:9E:55:7E:68:36:E4:E8:18:ED:41:38:CD:85:96:B4
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0OZTZy6eVX5oNuToGO1BOM2FlrQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.75.150.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:17:7b:47:a8:d5:53:e9:c7:08:ba:e2:06:96:14:b9:00:47:
3d:ba:2f:f1:18:bd:63:45:9f:11:dc:c6:ce:e1:23:98:b3:2a:
8d:18:45:07:e2:29:3c:14:1b:19:78:6d:bd:c7:9c:8d:be:4b:
94:75:6d:ad:79:00:19:79:58:b0:4d:0b:c1:6f:16:36:63:83:
bf:af:1b:05:57:61:48:13:8e:07:47:3b:71:b8:f3:ca:46:ed:
ea:33:39:de:e9:6d:7f:5f:7b:97:a0:75:c0:0b:91:b1:51:6f:
25:59:7b:18:c8:a1:67:43:91:f0:4c:d9:69:f8:88:dc:cc:b7:
cb:7a:86:7a:98:6c:43:74:f3:75:7e:b2:1f:05:fa:bd:e6:0a:
ae:f2:a4:8b:8b:b0:17:f7:19:12:31:ab:0e:12:04:88:dc:a0:
f1:bf:da:8a:91:26:0d:0c:7d:47:29:aa:f7:fc:49:f8:cf:af:
f5:4d:55:94:b7:42:bc:35:a4:6a:bd:ab:01:fa:5f:09:90:b7:
50:40:b4:1b:38:0a:b9:41:bf:86:06:2a:db:bf:a5:4f:38:9a:
bd:c0:8f:db:ca:4d:f9:62:16:aa:1a:1f:fa:d8:e4:bd:a5:b7:
4b:25:88:ef:6c:cf:2c:23:5c:b5:19:a4:9d:1a:bb:f1:f8:92:
fc:a4:51:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 14:58:51 2026 by rpki-client