
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/4SgShPbY_WDZ68-sk07yHv7NkSo.roa
File: 4SgShPbY_WDZ68-sk07yHv7NkSo.roa (raw, json)
Hash identifier: ij5e9txQSx4nxgvsnYCK/ZvFQKlwpefhaQwOfsMNj8c=
Subject key identifier: E1:28:12:84:F6:D8:FD:60:D9:EB:CF:AC:93:4E:F2:1E:FE:CD:91:2A
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 12E1
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4SgShPbY_WDZ68-sk07yHv7NkSo.roa
Signing time: Sun 01 Mar 2026 03:20:39 +0000
ROA not before: Sun 01 Mar 2026 03:20:39 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.104.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4833 (0x12e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 03:20:39 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=E1281284F6D8FD60D9EBCFAC934EF21EFECD912A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:51:f5:a0:b3:b6:b1:23:ef:9c:ed:28:2f:d3:
1d:b2:59:7d:b6:91:f8:70:b0:56:b5:93:5b:be:2f:
0e:d0:a9:5a:9a:ce:6f:d9:e7:76:95:99:10:83:9f:
ca:92:53:50:aa:97:84:fb:05:59:48:d8:60:10:7b:
3c:62:93:ef:a0:2c:31:d4:d3:ee:31:09:19:b1:e4:
12:ce:16:8f:0e:3a:10:03:62:ff:33:e8:16:c1:76:
d4:e5:87:60:70:1c:39:0d:38:67:6c:44:5b:79:97:
d6:0a:a3:dd:7a:2d:58:d6:cc:e4:e7:05:9d:d5:cf:
d5:54:7b:4f:8f:b2:fa:57:d2:b1:fa:5c:3f:d7:6f:
ea:6e:08:97:1c:7c:de:32:16:5f:02:b8:15:e9:40:
e5:2f:4f:35:2f:10:0c:21:a0:1b:d8:87:0f:e1:1b:
26:99:f9:85:de:37:0b:2b:90:95:bc:4f:39:56:97:
a5:5d:f4:c2:be:db:4d:30:e0:72:e7:3f:2b:ca:38:
98:66:8c:e9:d3:6e:92:4c:1b:5d:69:eb:46:89:95:
c3:ed:30:b3:d3:aa:4c:9b:2d:a2:90:1e:ea:d1:45:
50:2a:50:50:29:e5:82:6b:65:2e:ac:3b:54:73:8b:
95:2e:cc:42:04:e7:a4:84:67:56:ac:4d:a2:b4:6b:
a2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:28:12:84:F6:D8:FD:60:D9:EB:CF:AC:93:4E:F2:1E:FE:CD:91:2A
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4SgShPbY_WDZ68-sk07yHv7NkSo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.79.104.0/21
Signature Algorithm: sha256WithRSAEncryption
b6:ee:1d:48:bb:98:b0:19:42:34:98:a7:26:b0:4a:7f:5a:9a:
f9:dc:06:17:2d:85:c4:5c:eb:65:a8:a3:b4:c3:77:b5:78:7a:
b5:f0:33:72:5b:ee:ef:24:d3:bd:d0:4d:52:e3:3b:e8:86:15:
67:6c:ab:10:1c:a6:c7:f6:35:45:6b:a3:11:11:b3:30:39:9f:
70:27:0c:e4:a8:ac:18:85:0b:79:0b:60:9b:c9:b8:40:94:f9:
a4:28:05:d3:50:f5:8b:b2:ae:7d:47:3d:2b:c0:8e:c2:f7:94:
72:88:62:a7:ff:64:21:17:59:b0:0b:ef:41:52:25:c6:b3:23:
9a:7b:01:15:00:0d:e9:33:a5:6d:4e:a0:e6:27:ea:71:9f:7d:
ef:f3:5f:92:d6:d2:9e:18:3e:0e:bb:a3:ed:bd:91:99:0c:cc:
42:5a:79:1b:cf:f4:d1:16:2d:cc:d8:69:b5:7b:9e:30:8a:56:
de:0b:c4:b3:fa:7c:ef:dd:de:bb:b4:8a:4c:d8:eb:a4:dd:28:
2e:f1:92:1e:80:dd:87:6f:32:e0:d5:3a:c0:43:e6:34:7e:08:
f0:1b:f0:8e:00:7d:d2:71:e0:1c:8c:3b:aa:cd:67:d3:d2:4b:
4e:a2:75:4e:2c:d1:30:17:80:65:02:80:54:26:51:b4:e2:95:
15:8b:5e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:23 2026 by rpki-client