
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/3FvSaE9C8HxiOIWwZ7H8Vh2e06A.roa
File: 3FvSaE9C8HxiOIWwZ7H8Vh2e06A.roa (raw, json)
Hash identifier: NLkbUBzVRlI1xDQyoeL+ZLxtfq2S+Lu/0mkUM4MWo/g=
Subject key identifier: DC:5B:D2:68:4F:42:F0:7C:62:38:85:B0:67:B1:FC:56:1D:9E:D3:A0
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1067
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3FvSaE9C8HxiOIWwZ7H8Vh2e06A.roa
Signing time: Sun 01 Mar 2026 01:34:16 +0000
ROA not before: Sun 01 Mar 2026 01:34:16 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.75.214.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4199 (0x1067)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 01:34:16 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=DC5BD2684F42F07C623885B067B1FC561D9ED3A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:66:38:05:e6:67:7b:72:9d:d7:a1:f2:3d:81:
d9:da:18:f3:54:71:ea:15:2a:2e:54:e1:02:fe:2e:
63:03:66:a1:ff:f5:3c:81:01:6d:2d:59:67:3e:1f:
d4:0a:23:07:67:a0:52:b8:9c:a2:a1:93:15:4e:4f:
27:05:b2:72:b3:b5:88:d6:8a:17:2a:9a:87:ea:53:
34:52:ef:dd:39:c5:54:11:18:ad:c7:7a:59:43:04:
89:99:f0:4e:20:b3:28:f4:fe:ca:5a:23:81:49:26:
80:5f:30:8b:b1:f6:5a:17:b9:b8:5d:c0:a7:6f:9a:
99:e8:16:bc:5a:16:ab:5c:bc:19:f6:1d:c7:77:a1:
ba:00:80:48:19:d0:29:43:be:85:80:62:f1:de:e3:
cb:cf:fe:61:05:cb:fb:a6:d6:ad:60:aa:cd:84:99:
fa:c6:5c:19:f4:70:67:0b:71:b0:22:af:c1:ec:aa:
e0:d2:96:12:d2:10:a8:83:13:b2:50:7d:a4:70:59:
eb:6c:05:22:3b:a3:bf:31:a2:67:c0:9c:dd:10:78:
34:1b:08:d6:51:3f:d3:21:a8:8a:b0:e0:50:2f:44:
b5:44:1c:0b:66:41:27:95:ae:97:d4:72:7a:7d:22:
af:21:35:4d:30:9d:25:13:1c:7d:24:11:e6:2d:b0:
a5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5B:D2:68:4F:42:F0:7C:62:38:85:B0:67:B1:FC:56:1D:9E:D3:A0
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3FvSaE9C8HxiOIWwZ7H8Vh2e06A.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.75.214.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:ef:a3:78:a8:37:12:86:36:b7:65:94:b5:5d:e9:a0:27:05:
73:95:b6:f2:1b:a2:29:e1:ce:15:c9:1e:93:1c:d1:42:d0:5b:
b7:9b:f5:e4:b2:63:f1:c3:6a:69:5f:48:1a:2e:d9:3d:56:57:
6f:aa:2b:02:8b:7a:b8:25:1e:9b:fc:3c:87:18:7f:30:b6:da:
04:77:8f:71:dd:96:b5:0e:80:54:3b:42:de:fd:d5:cd:c2:83:
71:e3:7f:30:91:7a:48:39:b3:aa:26:9b:57:f6:f3:d4:99:5f:
0a:24:28:7b:44:a9:cc:90:6b:1b:f0:24:ae:f1:44:1c:5f:29:
ab:eb:de:a5:a9:3a:bd:e6:4e:e1:7a:64:00:d7:3b:9b:c9:a9:
7f:4a:cb:5d:16:7d:2b:e7:c5:f0:e1:d5:86:b6:64:ab:a3:49:
ad:b8:9d:8d:a2:17:30:5b:9c:9b:0a:83:f8:e4:48:dd:a8:8a:
80:4f:c0:33:ad:67:14:79:aa:d5:39:4e:5e:a5:df:4a:50:ef:
d5:5b:f1:f7:a6:2d:bf:cf:fe:58:36:58:4e:21:5c:ae:4d:d2:
63:6d:13:91:f3:9f:2b:8e:b6:fa:3b:cd:69:0a:c3:3c:e1:b1:
ef:ce:bb:89:b0:1e:9e:1b:d8:b1:00:1a:28:10:27:1c:9f:7b:
65:21:ad:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:47 2026 by rpki-client