
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/9WQdEUZ2BUTnxAagCQIgEticXKc.roa
File: 9WQdEUZ2BUTnxAagCQIgEticXKc.roa (raw, json)
Hash identifier: w9KIyZRYMEVenbRfz2Q02fmVD5fTTcBrhaxJg30UgpI=
Subject key identifier: F5:64:1D:11:46:76:05:44:E7:C4:06:A0:09:02:20:12:D8:9C:5C:A7
Certificate issuer: /CN=637B364ED0458526D668CEF8CEE65A09DDC2E4DC
Certificate serial: 4E
Authority key identifier: 63:7B:36:4E:D0:45:85:26:D6:68:CE:F8:CE:E6:5A:09:DD:C2:E4:DC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/9WQdEUZ2BUTnxAagCQIgEticXKc.roa
Signing time: Tue 31 Mar 2026 07:51:33 +0000
ROA not before: Tue 31 Mar 2026 07:51:33 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9351
IP address blocks: 157.70.192.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637B364ED0458526D668CEF8CEE65A09DDC2E4DC
Validity
Not Before: Mar 31 07:51:33 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=F5641D1146760544E7C406A009022012D89C5CA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2a:4d:4c:f1:c6:75:00:2c:cf:14:08:2a:03:
88:31:c0:31:06:f0:57:ec:9b:d4:3f:96:3c:d4:47:
57:3b:88:b3:cf:83:05:8b:58:25:7e:38:38:7f:b6:
c0:08:93:b6:a5:50:8e:cd:9b:95:be:2c:64:f1:88:
b2:a1:69:38:e7:7c:ab:b7:61:eb:be:a0:d5:82:77:
7f:be:66:11:76:1a:22:2c:99:c9:d4:e6:3f:3c:a3:
30:c6:92:63:c1:6f:b9:56:5a:f5:e4:f7:18:44:69:
c8:12:3a:ad:ae:7f:13:79:ca:51:e2:1d:6b:fb:20:
0e:cc:bf:2f:56:41:71:6d:11:23:3c:e5:ec:bd:c5:
4d:55:f1:b7:d5:4f:cf:e3:9f:f1:c5:df:86:5a:cd:
40:d3:7e:fc:0a:08:2a:7e:0a:0f:90:62:0f:5f:d1:
d7:52:72:d9:71:2c:c3:b8:23:93:00:43:57:0f:48:
4f:2d:c0:77:91:e7:d6:29:1b:23:8c:66:61:a5:0a:
3b:7f:d8:45:ea:4e:2f:1f:1a:20:46:a5:fa:5a:52:
4e:9d:18:ad:8e:b5:3f:bf:f0:37:cd:b3:8a:88:bc:
3f:55:0e:7a:61:38:74:2a:08:29:99:05:04:7a:5d:
7c:b5:18:eb:9e:3e:4a:af:42:5c:ca:25:bc:2c:18:
9e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:64:1D:11:46:76:05:44:E7:C4:06:A0:09:02:20:12:D8:9C:5C:A7
X509v3 Authority Key Identifier:
keyid:63:7B:36:4E:D0:45:85:26:D6:68:CE:F8:CE:E6:5A:09:DD:C2:E4:DC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/9WQdEUZ2BUTnxAagCQIgEticXKc.roa
sbgp-ipAddrBlock: critical
IPv4:
157.70.192.0/20
Signature Algorithm: sha256WithRSAEncryption
2d:eb:fc:77:99:49:72:35:8a:50:cd:e0:8b:ac:80:49:04:61:
ec:f2:df:da:f0:66:79:86:b4:f7:9a:85:cd:89:e0:51:30:86:
34:bf:48:f8:36:f9:43:68:9b:a6:ff:7c:ad:56:03:a6:12:f6:
ab:69:db:06:41:1d:d9:b0:b4:89:d7:b9:89:e5:46:64:2d:a1:
b2:ab:68:7c:63:21:d4:77:f0:83:a8:1d:61:c6:f6:8f:2e:5c:
56:23:e1:b5:39:9e:43:f2:b5:51:a7:40:43:1b:e7:6d:14:25:
bb:c9:15:da:03:76:0f:6b:89:b3:59:6d:f1:ad:0c:28:d9:e6:
6c:f7:9a:49:0f:5c:74:36:aa:38:aa:ab:73:1e:66:da:d6:37:
e2:75:59:d1:ba:c6:51:0b:e9:62:a6:9c:da:e9:6d:06:f5:74:
85:91:c2:3e:85:ca:d9:c2:21:48:f7:e7:2b:f7:32:fe:2d:aa:
d9:44:10:ef:16:2d:f0:65:88:b4:ea:58:07:a9:d1:fb:53:80:
19:a8:0b:56:a3:79:0a:5f:06:73:5c:7c:1f:38:4b:22:e5:f4:
f2:1f:91:a8:5c:d4:1a:87:8b:b2:b2:b1:c3:85:3a:c8:eb:f3:
d5:89:6c:2a:e1:96:48:fe:0f:c7:8a:32:ab:c8:16:12:59:09:
dc:6e:c0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:27:57 2026 by rpki-client