
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/AMp1MEO5MOe15-QokMRoUrkOlfM.roa
File: AMp1MEO5MOe15-QokMRoUrkOlfM.roa (raw, json)
Hash identifier: B2/Rxp6NcMtWVVbcOG6gPDczB9Y6KyKyANU7XyWsN2Y=
Subject key identifier: 00:CA:75:30:43:B9:30:E7:B5:E7:E4:28:90:C4:68:52:B9:0E:95:F3
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 11D1
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AMp1MEO5MOe15-QokMRoUrkOlfM.roa
Signing time: Sun 01 Mar 2026 02:40:36 +0000
ROA not before: Sun 01 Mar 2026 02:40:36 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.70.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4561 (0x11d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:40:36 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=00CA753043B930E7B5E7E42890C46852B90E95F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:09:f1:9f:07:43:a4:ae:45:6a:f1:9d:d9:6c:
e8:b2:4f:af:e8:e0:4a:b1:48:dd:91:80:a1:6b:76:
26:35:51:bf:40:11:01:6e:3e:62:b4:3a:8e:a4:49:
1e:74:b9:a6:16:76:cc:cd:b4:fb:82:e6:e9:56:31:
b9:1b:bd:6b:3f:00:d7:5b:9f:b7:9b:b9:28:56:11:
2d:7a:56:d8:20:07:40:d0:16:60:cc:92:5f:75:7e:
52:c8:67:2f:86:27:9a:52:bf:77:e8:a6:da:b4:45:
cf:f0:0f:b9:be:37:1a:52:f1:df:c5:68:ca:ca:5a:
bd:3c:71:01:11:b2:3b:b6:e6:c8:d4:ae:d2:cb:ea:
c2:67:3a:f4:3e:3f:69:a9:28:7b:c5:c4:57:4a:69:
71:34:f6:3e:37:0b:db:f3:eb:29:92:49:d6:24:39:
7e:6a:20:b9:bd:4e:2e:ea:4f:39:69:a8:09:22:2f:
c1:ec:9c:b3:57:62:41:1a:27:ab:e5:cf:d3:5f:16:
74:99:79:93:b4:5d:39:70:5c:55:f5:3c:0c:b7:40:
9a:1d:0a:3d:df:07:01:db:fa:ab:b9:86:56:8c:7f:
de:4e:11:19:71:c8:17:78:58:9b:6d:e7:3b:13:16:
0f:37:96:c6:48:bd:d7:e8:8b:93:b5:5c:bc:15:34:
86:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CA:75:30:43:B9:30:E7:B5:E7:E4:28:90:C4:68:52:B9:0E:95:F3
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AMp1MEO5MOe15-QokMRoUrkOlfM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.79.70.0/23
Signature Algorithm: sha256WithRSAEncryption
98:df:47:7c:05:dc:99:26:7b:33:d0:8c:ca:c9:b2:a0:e2:97:
fd:3b:50:50:68:b6:54:32:e2:52:92:25:0f:44:76:7b:27:8b:
45:11:33:46:46:4a:d1:ad:55:e1:6c:54:ce:8b:dd:2a:e5:f8:
f1:56:de:47:db:f5:f2:57:c4:bb:e1:d0:46:73:52:54:0b:d3:
1d:25:4b:c3:5b:ea:6b:3c:35:13:c9:75:5a:5d:4a:44:e6:21:
fc:32:1a:8b:fc:62:41:ce:ed:fc:2d:7b:6f:94:f3:c8:7a:94:
ac:56:46:6f:4f:09:cf:0f:94:e6:24:7a:27:2e:30:6c:9c:5f:
64:67:b3:5c:b5:7d:79:52:f7:38:2e:bb:25:97:e9:c5:35:54:
84:48:68:03:25:ab:19:2d:1c:56:7b:89:60:c8:b5:95:ad:99:
cc:5a:8e:81:78:e6:86:29:67:9c:43:a5:a6:f9:56:b3:bd:d8:
54:ca:dc:dc:fe:a7:ed:27:b7:91:11:6b:45:b9:da:f1:7e:20:
46:2e:55:ff:45:d0:60:b7:de:20:01:ec:db:da:f2:ea:06:0a:
25:28:86:ee:8a:2f:60:bd:dc:4c:67:81:d4:ed:e1:01:f4:ed:
10:b5:f9:ee:5c:2f:d1:8d:8e:29:d2:0a:8b:ee:5b:21:44:e7:
33:94:c7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:27:30 2026 by rpki-client