
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/5HRm1sRfF5X_rZpc6KGyStetqqU.roa
File: 5HRm1sRfF5X_rZpc6KGyStetqqU.roa (raw, json)
Hash identifier: PQTd/Aceq8qwsrYVo8OIJ/vZ/AND7Wr1RiqWhz1w2dE=
Subject key identifier: E4:74:66:D6:C4:5F:17:95:FF:AD:9A:5C:E8:A1:B2:4A:D7:AD:AA:A5
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 124B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5HRm1sRfF5X_rZpc6KGyStetqqU.roa
Signing time: Sun 01 Mar 2026 02:56:38 +0000
ROA not before: Sun 01 Mar 2026 02:56:38 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4683 (0x124b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:56:38 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=E47466D6C45F1795FFAD9A5CE8A1B24AD7ADAAA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:09:c0:ba:23:f8:ce:27:00:fe:e4:9b:1f:23:
a1:f8:33:b0:3c:9a:1a:59:5c:f5:ff:ec:97:2e:99:
dc:ff:b0:a5:22:23:00:2c:29:a2:69:5c:57:2b:cd:
4b:2c:b2:dc:51:2a:0b:44:cf:2a:3f:ac:8d:31:a0:
6c:c3:41:29:a0:5d:4e:2b:e0:0a:6f:00:f1:d8:f4:
1b:f6:62:a9:4f:79:f2:6f:09:14:99:90:8b:d1:9e:
9f:fb:ac:7c:ca:d0:f9:c6:8a:d8:5b:c2:12:9c:bc:
c9:42:ce:c3:c2:31:0d:ff:5d:20:cc:97:9f:be:f5:
95:bf:bf:39:85:e0:ee:f1:16:45:ac:13:a0:26:37:
36:d1:2b:2d:7e:08:f0:28:ab:42:69:ed:35:16:f1:
b5:36:f1:74:6d:46:54:4c:66:ff:bc:18:a6:b7:4d:
bb:30:22:9b:b4:2a:ff:3b:fb:b3:cb:50:21:26:2b:
72:e1:97:c2:f6:cc:8c:17:b9:38:e5:09:b0:e1:eb:
b9:77:69:30:67:e3:50:85:84:15:9f:62:f7:54:2a:
ec:12:a5:5b:85:ed:05:60:9f:1e:11:c4:c1:2e:41:
cc:ae:92:2b:ee:fa:ed:da:33:6a:43:c7:63:f1:7e:
5e:7f:f1:37:71:6f:be:1e:bd:95:d9:72:fd:92:6e:
be:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:74:66:D6:C4:5F:17:95:FF:AD:9A:5C:E8:A1:B2:4A:D7:AD:AA:A5
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5HRm1sRfF5X_rZpc6KGyStetqqU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.79.30.0/24
Signature Algorithm: sha256WithRSAEncryption
55:30:d3:17:c5:0e:3b:25:0b:71:00:76:0d:51:73:81:00:64:
aa:2c:02:46:98:d4:73:7f:3d:25:96:a3:15:61:85:a7:d7:4c:
60:ad:fc:33:be:c8:9d:68:e9:4e:2c:ba:77:17:3b:5f:65:fb:
a3:f7:d4:89:9f:97:c0:d3:a2:1d:fc:1d:4a:65:7a:0d:1c:02:
13:05:f0:2d:29:6a:8e:7b:c1:83:41:85:72:c6:ec:64:c1:b0:
06:05:3f:57:b3:99:cf:31:63:65:b3:29:5d:1d:f2:86:0e:03:
41:7d:61:dd:3a:c6:22:f0:01:d2:fe:90:8b:06:c0:d5:b0:f1:
49:55:e1:44:30:a2:bf:ae:50:cb:8e:13:24:03:c4:5f:a1:df:
94:df:5f:8b:42:40:bd:66:10:04:02:90:d7:0b:1c:1f:a2:f5:
e9:bc:bd:13:7c:e9:d2:05:c8:a6:04:15:fe:85:53:27:96:d2:
b7:10:8d:91:8c:c0:4c:b6:b9:29:be:8c:0b:32:7b:6f:d9:ac:
1d:a6:d6:ad:26:88:9d:8d:ae:c9:c8:89:c0:39:b9:f0:af:23:
bf:e3:01:5c:c2:de:1e:65:57:a7:02:11:f2:7d:21:95:f6:6f:
5e:3c:3f:f6:d8:d4:d8:10:6f:7c:8c:2f:11:b0:66:3c:9d:39:
4f:33:3f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:59:58 2026 by rpki-client