
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/7H095ziNfrCjvFgUg3pTDPAvKAg.roa
File: 7H095ziNfrCjvFgUg3pTDPAvKAg.roa (raw, json)
Hash identifier: DDBpBhXOKBwHhWdYYalnAwVkx0IizmFzzxEdwvE2Hys=
Subject key identifier: EC:7D:3D:E7:38:8D:7E:B0:A3:BC:58:14:83:7A:53:0C:F0:2F:28:08
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 12C7
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7H095ziNfrCjvFgUg3pTDPAvKAg.roa
Signing time: Sun 01 Mar 2026 03:16:22 +0000
ROA not before: Sun 01 Mar 2026 03:16:22 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.86.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4807 (0x12c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 03:16:22 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=EC7D3DE7388D7EB0A3BC5814837A530CF02F2808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e9:17:66:81:43:ec:4b:fe:22:9a:41:6e:de:
63:4b:1e:7e:db:8e:81:4b:ef:14:31:4e:42:47:ae:
b7:57:1d:8a:1f:94:ef:7f:8c:ed:ee:da:27:27:02:
35:a7:83:d4:22:83:67:3e:44:de:7a:7f:e0:6e:b9:
b5:0a:56:02:c7:32:e3:25:9a:82:57:cb:18:92:26:
b1:9b:5f:12:c4:cb:58:67:7b:b5:c1:b9:ef:3d:8a:
0f:5d:5c:d0:78:21:82:cc:78:71:71:47:36:e9:fa:
27:06:db:3b:31:dd:a3:12:ed:c6:41:f2:9d:42:04:
4d:3b:a1:46:b3:f5:55:c2:8b:4c:cb:35:ea:fb:88:
32:b8:97:b2:c1:8c:57:8c:9e:38:9d:3a:10:95:ac:
ba:13:43:44:dd:fa:04:d6:58:68:2d:d5:07:e0:69:
83:e4:6f:cd:3b:ef:b7:fa:29:55:7a:ea:37:70:af:
fc:dc:80:a8:df:08:69:0c:c4:39:8d:ec:e6:60:fe:
c6:93:fa:44:e1:db:c3:40:b9:99:18:b3:4b:4e:e6:
57:d4:50:80:f8:f2:71:f4:15:1c:a2:63:85:ea:b8:
57:80:84:ac:eb:ea:e4:7b:fa:c8:50:c9:10:7a:2f:
60:9d:8a:c9:e6:4b:03:21:fd:7d:62:af:ba:73:df:
4a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:7D:3D:E7:38:8D:7E:B0:A3:BC:58:14:83:7A:53:0C:F0:2F:28:08
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7H095ziNfrCjvFgUg3pTDPAvKAg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.79.86.0/23
Signature Algorithm: sha256WithRSAEncryption
23:d6:90:d7:c4:70:92:a5:3c:f6:65:5a:48:d0:01:da:9a:7d:
92:9a:8e:d5:aa:5a:fb:08:e7:fc:1b:02:47:e4:91:ce:6d:8b:
ce:9c:ad:42:13:5e:67:00:e9:f2:f2:be:be:56:52:04:2c:d9:
25:32:a6:78:1b:67:ea:24:aa:74:e3:b5:ad:1c:26:2b:1a:c2:
44:19:73:f3:44:7e:6f:1d:90:83:72:f6:18:50:e0:55:06:ed:
5a:92:ab:a7:bc:b8:8d:56:60:9b:6b:06:b3:d7:44:97:d8:2c:
32:66:f6:36:da:ab:35:1e:c4:3a:2b:4e:3a:6b:e1:ae:d4:6f:
6e:bd:32:00:53:2a:0b:ff:be:a9:f2:4b:a2:35:81:c3:87:0c:
c9:9f:da:78:37:b6:47:dc:e1:02:bc:dc:a3:ed:64:10:d0:1c:
25:74:61:74:f4:50:5c:1c:fb:86:db:73:3f:5b:25:b1:25:27:
65:77:f7:73:b3:63:93:86:e4:44:66:1a:e1:51:92:c9:bd:83:
fc:8d:0f:45:05:e3:8e:af:e6:bf:98:0f:54:10:f4:8f:84:bb:
f4:4a:fb:4d:4b:6c:5f:94:39:42:9e:1c:fe:47:70:9c:1b:63:
42:29:27:82:57:59:14:c3:f6:44:40:36:70:1f:d5:20:46:da:
5d:28:56:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:29:06 2026 by rpki-client