
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ixtoJDZocu4DRqParO3HxZfzsIA.roa
File: ixtoJDZocu4DRqParO3HxZfzsIA.roa (raw, json)
Hash identifier: 4FmOcwAB56bKYqy/Xou+UD6554YYEJxWuo/a2/Ozk34=
Subject key identifier: 8B:1B:68:24:36:68:72:EE:03:46:A3:DA:AC:ED:C7:C5:97:F3:B0:80
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1060
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ixtoJDZocu4DRqParO3HxZfzsIA.roa
Signing time: Sun 01 Feb 2026 01:32:50 +0000
ROA not before: Sun 01 Feb 2026 01:32:50 +0000
ROA not after: Fri 15 Jan 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.75.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Feb 2026 12:38:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4192 (0x1060)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Feb 1 01:32:50 2026 GMT
Not After : Jan 15 01:30:02 2027 GMT
Subject: CN=8B1B6824366872EE0346A3DAACEDC7C597F3B080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:71:56:98:36:23:39:ab:7b:06:98:e2:6c:fa:
ea:5b:9a:aa:a0:fa:dd:ad:e6:4f:70:f3:25:c7:a8:
e7:54:5f:f3:b5:98:65:11:c6:b7:1f:ea:b0:41:37:
84:12:fb:bc:9d:e3:b3:a4:78:03:05:d7:74:e8:e7:
11:cd:ad:be:a2:c4:dd:1f:a8:30:aa:5f:8d:cf:b4:
78:a3:34:61:27:4a:81:2e:da:26:f7:e6:cc:80:bf:
3f:fa:e7:e2:e0:a6:ac:6a:67:a6:71:7e:06:c0:76:
c4:e0:b2:e5:fb:65:43:34:10:94:05:5a:85:86:51:
3c:92:c9:fd:42:3e:93:98:f6:0f:39:aa:72:7a:13:
84:6d:f5:2b:ca:44:1b:0f:ed:42:8a:08:c8:a3:e4:
6e:2b:45:7e:11:71:dd:d0:65:00:5f:45:0c:18:e6:
09:4d:af:48:7a:a5:ec:d5:cd:e2:06:a7:92:8b:55:
64:4e:28:22:5d:1b:fc:60:92:67:7e:4c:c3:56:ab:
64:57:ec:a5:e8:6b:db:20:6a:e2:d7:51:01:16:7f:
2d:d7:9a:87:4b:8d:68:ea:bc:12:60:28:2c:09:a1:
d1:a2:5d:1b:99:c3:e4:4e:10:d7:a3:14:03:fa:9e:
f4:72:c8:27:2c:e4:f0:f9:f5:66:a7:a3:d5:a2:82:
76:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1B:68:24:36:68:72:EE:03:46:A3:DA:AC:ED:C7:C5:97:F3:B0:80
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ixtoJDZocu4DRqParO3HxZfzsIA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.75.151.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:e1:0d:d5:f0:5a:8d:fd:f6:a2:2a:82:0c:77:b0:cc:95:96:
c2:25:f7:61:23:f6:6d:df:a9:e9:7a:87:0d:e7:ce:fa:6b:c1:
38:1d:09:41:11:08:0c:bd:ff:d2:e2:c6:f6:3b:64:39:39:35:
89:bd:91:2a:c2:84:c6:d7:76:7e:d7:6f:d8:18:2d:f4:79:d1:
11:b0:69:11:2e:9f:39:ff:4f:72:d2:5d:a7:42:42:c5:68:32:
ba:0f:b1:47:15:8e:85:ca:12:c1:55:a6:71:ce:cf:7b:0c:36:
6d:58:48:a2:6e:0a:32:2b:9c:7b:27:09:31:7e:23:22:f6:2c:
ae:1e:6f:6f:48:19:54:97:53:0a:6c:6f:17:71:57:33:87:4d:
d3:db:26:ac:ff:a5:42:1a:45:de:37:54:92:03:13:65:2d:a4:
fb:44:75:50:4a:5f:58:5b:b3:98:ca:a8:d5:43:7c:2c:a3:b0:
19:78:33:c8:78:0e:a9:e1:aa:c4:23:61:29:04:13:49:41:e0:
da:6d:2a:d4:34:21:51:02:42:56:3d:00:b8:a2:8f:84:87:03:
14:6a:5c:bc:e3:d2:30:f6:a3:8d:8e:82:2d:24:0d:08:48:43:
e0:68:13:69:29:b8:53:e3:80:f9:43:14:bb:bc:6c:e4:d3:08:
20:4d:9d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 14:59:05 2026 by rpki-client