
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/7fSp54733tbROQtG5TTLIbGFlWk.roa
File: 7fSp54733tbROQtG5TTLIbGFlWk.roa (raw, json)
Hash identifier: LtxUcAxQlQxysan1cLipuLHMmleDZGYXxVpJvRi+0mM=
Subject key identifier: ED:F4:A9:E7:8E:F7:DE:D6:D1:39:0B:46:E5:34:CB:21:B1:85:95:69
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1196
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7fSp54733tbROQtG5TTLIbGFlWk.roa
Signing time: Sun 01 Mar 2026 02:31:13 +0000
ROA not before: Sun 01 Mar 2026 02:31:13 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.98.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4502 (0x1196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:31:13 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=EDF4A9E78EF7DED6D1390B46E534CB21B1859569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:00:95:7a:d5:15:c7:78:3c:f0:97:e3:52:67:
52:f1:bd:1e:24:f7:95:20:ee:97:b5:a0:bf:44:80:
11:e4:b0:8e:3e:f3:bf:e4:bc:b5:4f:62:33:f4:7b:
fa:7f:07:51:0f:eb:cc:81:05:df:ca:49:ad:a0:0d:
8f:a5:6f:50:2d:3f:d4:80:47:79:7d:c1:88:6e:46:
9d:c6:be:61:1a:b0:50:e0:56:5e:76:ea:ac:c5:32:
0a:d9:c4:0d:d6:5e:4f:38:8c:c0:17:e1:e2:ea:c3:
43:e9:58:9b:1f:4e:87:ea:26:0b:52:a9:00:e0:54:
30:59:59:9f:65:d0:8a:73:5a:91:5b:07:31:10:a2:
c7:64:09:ff:ae:40:0f:97:6b:ec:15:92:ec:92:4e:
ad:dd:fa:cc:fd:bd:d4:22:57:0a:b4:4f:ad:7c:2f:
28:a0:36:17:81:27:06:8d:af:54:86:26:25:a6:7f:
d6:69:22:46:7b:6b:5b:bb:0c:aa:11:35:e1:d3:b4:
93:3f:3c:35:5a:20:4a:57:9a:2a:ec:ff:73:06:c2:
d8:53:c5:1e:e2:49:92:d8:6b:12:6b:c0:73:a7:82:
f0:70:c7:ae:2a:b6:b3:06:82:20:6f:36:06:e2:bb:
37:31:1f:ac:eb:90:1a:7b:ce:1c:8c:ce:bd:bb:f5:
8e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F4:A9:E7:8E:F7:DE:D6:D1:39:0B:46:E5:34:CB:21:B1:85:95:69
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7fSp54733tbROQtG5TTLIbGFlWk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.79.98.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:20:2b:9b:67:e4:76:60:9f:53:69:46:56:49:6d:93:1b:fc:
c7:ea:0e:ad:43:9e:40:12:15:d2:a1:0d:22:0b:91:1b:54:f7:
9c:1d:69:ee:9f:a0:05:fc:1a:ca:82:8d:1e:80:6e:72:ff:f1:
15:76:d2:89:f7:5d:e0:9f:76:a5:3b:a4:bd:c7:28:9c:f6:cb:
dd:d2:cf:ea:7f:b5:91:4f:b8:ff:60:ff:8b:e5:e3:35:c5:5e:
53:2f:c6:16:f0:65:9e:60:83:ad:44:b1:4d:d2:6c:ae:d0:49:
61:4a:d0:3c:56:7a:9d:8d:79:23:22:bd:e0:c0:72:fe:e8:fb:
e6:f1:69:d0:58:fc:cd:af:0f:92:e4:cc:75:53:a8:61:72:aa:
c7:54:c1:02:fc:20:2c:70:6e:85:2d:b1:11:d6:11:5b:70:3a:
99:1f:8b:2b:66:d0:0d:18:ef:cb:7b:d5:bc:7f:02:1b:ab:b2:
13:da:ee:6b:f9:80:04:e7:77:50:15:be:93:68:3a:26:dd:ed:
ef:9b:c5:13:f1:b1:7c:bc:04:cc:5d:39:ab:4d:e7:2a:1b:e5:
5c:cf:8b:c4:40:2d:6c:bb:14:4b:a0:8d:dc:f9:3a:fd:7d:6c:
4a:bd:c2:9e:a1:c9:92:03:18:6b:a7:ba:ed:b6:1e:be:3a:31:
ab:8b:8c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:10:33 2026 by rpki-client