
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/O9Za-fjVXzHesC-Jw5P6yX35RbM.roa
File: O9Za-fjVXzHesC-Jw5P6yX35RbM.roa (raw, json)
Hash identifier: Oc4FqzfSTrtDbyHf8wLR3Lyl8+RwoKj61AjZJ7j8qrI=
Subject key identifier: 3B:D6:5A:F9:F8:D5:5F:31:DE:B0:2F:89:C3:93:FA:C9:7D:F9:45:B3
Certificate issuer: /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial: 0130
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/O9Za-fjVXzHesC-Jw5P6yX35RbM.roa
Signing time: Tue 31 Mar 2026 07:36:44 +0000
ROA not before: Tue 31 Mar 2026 07:36:44 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9370
IP address blocks: 113.20.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 304 (0x130)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Validity
Not Before: Mar 31 07:36:44 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=3BD65AF9F8D55F31DEB02F89C393FAC97DF945B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:be:76:51:e2:e7:b5:41:e1:8b:f5:1b:59:13:
81:86:77:1d:31:7d:1e:77:30:89:de:ea:80:2b:8d:
50:f6:5f:1c:b0:09:61:af:2b:b3:c0:77:ef:b0:50:
fb:aa:b9:f3:b0:b5:a4:33:46:0e:53:41:68:7e:bd:
41:8a:b3:7e:b2:36:1e:a7:68:8d:0f:80:8d:55:b5:
1a:17:0b:d7:42:0b:54:b1:a5:60:10:13:83:fe:cb:
3c:59:06:0a:5d:90:f6:7f:80:22:1d:e1:39:48:9e:
e6:48:9e:75:35:fb:00:bc:ff:21:70:f4:26:30:57:
f5:fb:5f:00:bd:fe:6a:ec:5c:dd:7a:45:75:92:55:
a0:50:ff:41:f9:19:cb:3e:e7:09:70:27:b3:5e:31:
ab:27:fd:f7:60:9b:f5:6b:62:81:47:d4:ee:ed:1f:
1b:1b:7c:a5:d2:9b:5a:02:1b:7b:ef:74:f8:35:5c:
c8:12:d0:d2:a3:a2:c9:76:67:e7:29:db:af:b5:d9:
c7:15:b0:02:45:f5:05:21:4a:b7:86:1c:0f:0a:f5:
8e:15:10:58:70:cb:2e:df:7b:2a:fa:e1:67:5d:66:
28:43:7d:42:30:08:31:c6:ce:31:8d:ff:8c:28:66:
37:a4:7c:cf:78:09:dd:21:b1:82:b3:62:9e:a2:92:
10:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D6:5A:F9:F8:D5:5F:31:DE:B0:2F:89:C3:93:FA:C9:7D:F9:45:B3
X509v3 Authority Key Identifier:
keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/O9Za-fjVXzHesC-Jw5P6yX35RbM.roa
sbgp-ipAddrBlock: critical
IPv4:
113.20.160.0/19
Signature Algorithm: sha256WithRSAEncryption
21:71:4c:68:b0:a8:df:7c:34:17:c1:31:ed:0a:61:67:28:23:
d3:f6:d7:67:b4:12:ec:7e:e9:5d:f0:2c:1c:4c:4a:0c:65:38:
a6:1a:6c:68:de:80:65:31:c9:5c:08:92:c0:d8:79:06:6d:76:
d7:a0:85:3c:ef:33:47:7d:9e:23:cb:c8:2d:07:a7:46:46:9a:
1d:9a:54:7e:16:a7:1e:2b:59:1e:ab:2d:15:d9:7c:5b:a1:98:
07:2f:16:09:ed:4a:55:15:43:fd:7c:b4:f0:ad:8b:80:20:c9:
ea:f0:00:e1:78:3e:09:a2:db:f3:db:52:e2:85:b7:9f:c2:23:
76:e1:bf:7b:51:3f:95:7a:8b:73:ab:00:4c:ae:c6:7e:7e:86:
a4:da:f2:eb:c3:17:e5:c2:9e:6f:da:79:18:09:c4:d7:c1:8d:
90:1e:04:d6:06:bd:02:b0:a0:4f:0a:e8:61:51:a0:ca:3e:b3:
cf:f0:9b:4f:0b:be:9b:90:c0:6f:6a:fc:bc:9b:10:2f:eb:bb:
df:09:db:f6:c2:83:3e:07:bf:4a:4c:6e:51:6f:49:c7:fc:6b:
80:6e:69:2e:50:8a:64:2c:08:1f:ca:8b:62:ea:95:4d:af:d0:
1e:f7:7b:18:8f:ef:f9:35:6b:3d:09:0a:6e:e4:9c:3b:8d:04:
aa:f1:8a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:36:16 2026 by rpki-client