
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-zH8itq14HOw0beGKxYYYWqnOHI.roa
File: -zH8itq14HOw0beGKxYYYWqnOHI.roa (raw, json)
Hash identifier: sbQZ2Hm3ixLI7BOE41qToKoKR2UM3Muz60K0Kdh57Mw=
Subject key identifier: FB:31:FC:8A:DA:B5:E0:73:B0:D1:B7:86:2B:16:18:61:6A:A7:38:72
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1348
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-zH8itq14HOw0beGKxYYYWqnOHI.roa
Signing time: Sun 01 Mar 2026 03:40:42 +0000
ROA not before: Sun 01 Mar 2026 03:40:42 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.34.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4936 (0x1348)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 03:40:42 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=FB31FC8ADAB5E073B0D1B7862B1618616AA73872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6e:e0:5d:50:84:63:f6:56:27:54:a5:65:fa:
25:a1:48:d0:3a:81:9e:d0:82:a0:d9:54:1a:90:30:
20:7f:b6:fb:06:f6:07:8d:7e:d6:f8:f0:15:ce:7d:
f5:7f:5f:c4:f3:80:dc:6e:7d:bb:66:50:9d:a1:f1:
bb:8b:42:06:7f:6d:09:81:fe:d5:3e:ef:f8:82:42:
18:f8:8f:53:67:10:33:f8:c0:d1:37:fd:50:ce:7e:
1c:e3:29:fc:08:85:db:8e:35:3e:90:ef:bf:f3:ae:
94:39:d5:47:26:ec:5e:df:ab:bb:fc:f7:ec:8b:3f:
25:3f:06:c6:9a:89:20:38:09:c8:fb:0a:f3:a1:f3:
5c:96:71:7c:6b:c1:47:0f:46:3b:4e:bb:b2:aa:d9:
65:ad:92:68:f9:d4:f7:52:55:12:dd:99:23:bd:22:
4f:48:d8:b3:77:54:74:e6:fb:c9:cf:e8:87:13:21:
1b:77:b3:a5:60:f8:dc:fc:53:9f:fa:24:6f:9a:f2:
8d:59:76:cb:e3:35:33:4a:79:c9:c6:39:85:33:d0:
ef:0b:c3:78:5e:80:23:63:41:17:6b:f9:02:06:86:
e8:48:57:b4:e8:a3:e4:6f:80:77:28:3a:c8:52:1f:
a6:b9:0d:b2:69:a7:44:25:f4:77:b8:46:de:1d:e8:
68:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:31:FC:8A:DA:B5:E0:73:B0:D1:B7:86:2B:16:18:61:6A:A7:38:72
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-zH8itq14HOw0beGKxYYYWqnOHI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.79.34.0/23
Signature Algorithm: sha256WithRSAEncryption
d9:4d:64:88:55:13:b4:c0:96:bd:38:51:2e:9d:ef:c8:7c:2f:
a4:e3:a7:08:a8:5a:45:7c:e2:a1:b7:02:a0:c1:17:b2:55:f2:
cc:11:ee:18:25:64:b0:69:6a:6e:8e:22:d3:91:10:23:83:7a:
88:fd:3b:77:de:d5:b9:4a:f4:ae:26:44:06:ce:de:86:f6:eb:
db:56:51:96:2a:47:aa:b7:8d:24:58:54:ad:0f:21:c8:03:bf:
a0:23:7b:64:eb:98:cd:06:52:11:01:ea:1c:9b:da:dc:21:dc:
dc:00:b6:46:af:1a:de:07:d9:bd:53:dd:b4:82:61:e0:0b:92:
75:2b:2c:d8:d4:b4:05:e6:4a:bc:cd:5f:a8:32:0f:ea:e7:a5:
7a:15:53:b5:65:3f:5f:77:d4:db:5f:3e:0d:c4:d6:89:82:31:
18:21:ee:84:c3:da:3a:06:11:53:46:9b:e6:94:db:e8:2c:92:
32:a3:70:43:2d:8e:da:36:da:6d:71:54:de:92:34:0b:2b:e6:
ce:9a:22:6e:fb:9f:88:22:3c:1a:57:a4:e5:af:6d:c6:dd:a3:
fb:9f:0a:74:7e:2d:59:c7:02:18:e2:05:2d:a4:3f:6e:2d:38:
bd:c7:77:39:4c:ab:e6:3a:a3:ed:05:c1:95:24:99:c4:18:f3:
4f:e9:f5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:01:15 2026 by rpki-client