
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/y-5BGw_sPKa8un27gUyiIEiQ1a8.roa
File: y-5BGw_sPKa8un27gUyiIEiQ1a8.roa (raw, json)
Hash identifier: PfwywLXpzrnC0Z9nxPte87zwf7auEvW1QupTOcTQ/uo=
Subject key identifier: CB:EE:41:1B:0F:EC:3C:A6:BC:BA:7D:BB:81:4C:A2:20:48:90:D5:AF
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1879
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/y-5BGw_sPKa8un27gUyiIEiQ1a8.roa
Signing time: Wed 20 May 2026 06:25:41 +0000
ROA not before: Wed 20 May 2026 06:25:41 +0000
ROA not after: Sat 15 May 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.66.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 04:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6265 (0x1879)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 20 06:25:41 2026 GMT
Not After : May 15 01:30:02 2027 GMT
Subject: CN=CBEE411B0FEC3CA6BCBA7DBB814CA2204890D5AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:2e:94:e8:f4:d9:a1:1c:99:b2:2f:98:f4:43:
8e:5b:fa:2a:4b:c6:f0:d5:f2:f6:27:33:2d:d4:9e:
a4:ac:fa:25:4c:6c:ca:1c:cd:9f:1b:df:be:c9:de:
09:e5:73:be:d1:ce:bd:d0:78:18:de:25:ed:36:ca:
93:38:6b:9e:7e:46:0a:da:8c:c9:47:c5:bf:88:ff:
1f:5d:49:7e:be:09:cc:a0:78:cf:f3:18:fd:2d:78:
b2:35:c4:86:dc:68:29:67:3f:30:69:40:9c:fa:99:
50:ba:46:d3:9f:3f:cf:3a:f3:7d:91:69:86:bf:8a:
3a:3c:2c:37:19:ef:5f:8a:1d:6c:f4:31:f1:59:4c:
f6:40:dc:3a:d0:09:61:f9:7b:99:e5:c2:61:4c:72:
a5:77:fe:7c:c4:06:17:6e:d1:86:b1:ca:3b:2f:dd:
51:98:74:41:19:8b:64:09:8f:8e:d3:af:b5:d3:f4:
7d:f2:e0:11:7a:6a:bc:be:7f:46:6f:68:29:d8:73:
e0:8a:54:87:7d:ae:46:d0:db:7b:02:db:68:5f:3f:
ab:6d:55:08:09:82:35:a7:a0:9e:ba:f9:d4:9b:2a:
e1:66:3a:af:02:40:eb:f8:e3:b8:9f:ee:4d:ad:fd:
03:a6:21:a5:ec:1d:16:d4:ec:ed:36:b2:77:29:f8:
61:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EE:41:1B:0F:EC:3C:A6:BC:BA:7D:BB:81:4C:A2:20:48:90:D5:AF
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/y-5BGw_sPKa8un27gUyiIEiQ1a8.roa
sbgp-ipAddrBlock: critical
IPv4:
1.66.36.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:4d:74:74:4c:bd:7a:e3:46:f2:ee:56:2f:5f:9d:0b:72:56:
1a:67:43:ee:21:80:7d:eb:bd:37:71:4d:23:51:b0:db:7d:76:
ae:6c:0c:3b:28:70:39:51:4e:de:96:98:b8:b1:92:25:d0:38:
c6:7a:8d:6f:05:3f:34:dc:cc:61:55:01:30:9c:ac:aa:ef:57:
82:f2:27:96:cd:e5:6f:9d:7f:7c:d1:15:30:6d:26:d6:09:7d:
cf:9e:7c:c6:be:b8:27:70:5b:3b:98:b3:d7:f2:a2:2e:dc:7e:
2b:8c:7a:07:48:90:8d:3a:da:d2:fe:b7:a6:23:a3:ad:ae:5e:
70:a3:c2:aa:1d:be:65:dd:04:67:ce:cd:e9:69:5c:43:92:f5:
21:68:13:2b:b6:1a:ef:92:bc:c7:19:c2:e5:7d:d2:9a:17:da:
24:74:80:2e:45:8f:a6:1e:1e:92:6c:bd:d9:30:d6:db:6f:e9:
ac:39:f7:22:7a:3c:1b:4b:f2:8b:52:32:15:9d:27:60:76:27:
fa:a9:64:b1:52:94:0d:22:a9:68:72:42:e5:f7:8d:d6:9b:14:
5f:6b:5e:bd:3a:d4:49:da:f0:48:bf:6f:54:ea:0f:22:a8:68:
f0:4b:8f:0d:6f:c0:79:aa:0c:a1:5f:a7:9b:9b:e6:8e:ce:ac:
07:45:0f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 05:48:00 2026 by rpki-client