
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/AnENmdcHHvN9MWDWweAcWTMsb4E.roa
File: AnENmdcHHvN9MWDWweAcWTMsb4E.roa (raw, json)
Hash identifier: F0YUH3G1LwgGpab0gA9KUdJSxXcryHWh4FBYxUaoL9E=
Subject key identifier: 02:71:0D:99:D7:07:1E:F3:7D:31:60:D6:C1:E0:1C:59:33:2C:6F:81
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1187
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AnENmdcHHvN9MWDWweAcWTMsb4E.roa
Signing time: Sun 01 Mar 2026 02:27:05 +0000
ROA not before: Sun 01 Mar 2026 02:27:05 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.73.64.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4487 (0x1187)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:27:05 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=02710D99D7071EF37D3160D6C1E01C59332C6F81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1e:3c:e1:0b:77:41:55:bb:2c:1e:f9:35:66:
59:45:c2:f5:00:bf:b6:a2:e8:73:07:a4:63:09:35:
bb:9a:76:62:32:8e:5f:9c:6e:ee:1d:a4:41:59:ba:
0b:1b:2f:9e:15:7d:d8:d6:2f:3a:fd:43:f0:96:f8:
ef:3e:09:3e:fd:85:6c:1a:9c:8e:7b:ad:d9:42:a2:
77:5c:79:ad:27:a9:61:ea:1b:3b:b2:95:52:46:a1:
4e:c9:a5:ad:49:f6:6a:d0:4e:af:03:b9:8d:bd:06:
5e:7c:c7:06:1f:7c:c3:9a:29:47:1e:0b:a8:50:89:
b3:41:a3:c2:b4:ab:bc:a4:f9:cc:b8:86:f0:48:40:
80:62:ff:55:74:9a:11:97:43:ec:bd:0a:09:99:07:
7b:c5:06:f6:20:ad:aa:7e:b5:18:1a:a2:e6:0c:e4:
b3:3e:10:f4:36:f6:9b:69:f3:2e:49:78:c8:63:cc:
0f:43:ef:3e:b5:b0:06:b5:1e:60:ee:96:32:bf:80:
b8:e6:b5:1b:58:1d:87:a0:cc:4d:21:b5:40:66:81:
ff:11:52:a4:8d:66:a0:6e:05:f8:ae:32:b6:2a:cc:
b2:aa:7b:a9:47:69:19:5c:8b:a4:d6:ad:32:8c:10:
c9:3c:3d:a3:6f:9a:3c:4c:e3:fa:83:8e:a7:96:a7:
fe:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:71:0D:99:D7:07:1E:F3:7D:31:60:D6:C1:E0:1C:59:33:2C:6F:81
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AnENmdcHHvN9MWDWweAcWTMsb4E.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.73.64.0/21
Signature Algorithm: sha256WithRSAEncryption
ba:7e:1b:6e:87:6f:6a:72:8c:b5:95:9e:f5:c5:91:45:f3:5c:
5a:8c:47:1c:2e:5b:ec:42:6f:9d:8b:44:a6:2c:67:2c:ba:f5:
45:f5:d6:51:80:34:fe:fe:9e:01:9e:07:bf:5b:9a:da:22:e5:
ee:52:43:47:5a:6c:20:2a:80:29:5b:43:dd:ec:f0:03:b2:6e:
45:b4:9c:af:fc:00:87:c7:b5:c3:c6:f2:19:bf:5e:5e:87:73:
55:03:ad:b6:11:26:e7:80:40:1e:3f:6c:b4:23:e8:40:bd:03:
5d:9c:08:65:6d:80:8e:54:0d:0c:06:0f:03:1b:86:a4:91:78:
d1:fe:03:ca:6b:dc:98:15:6b:25:05:e7:14:c9:82:15:1b:5a:
af:6d:25:9b:bb:b5:b2:6a:34:e5:0f:59:4a:80:87:92:9a:a8:
37:0b:8a:72:4f:9d:cf:d0:70:dc:61:92:b0:3c:55:ba:91:e3:
96:cd:1c:76:d6:cb:fe:72:b4:cd:12:e2:46:c0:c3:1b:dc:17:
ea:f1:6a:63:fe:b1:ba:cb:dc:a6:7a:d8:6a:ad:b2:9e:11:2e:
81:2d:84:f9:d1:c6:6e:a5:f8:fe:b6:86:0f:e8:9e:60:50:fa:
9e:a2:b2:a5:96:e3:2a:a3:ce:7a:18:75:ee:ac:0b:d1:3e:e7:
b6:d1:68:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:58:06 2026 by rpki-client