
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/CLZxp0uUWg0swSGOUZOJ-zJNQgQ.roa
File: CLZxp0uUWg0swSGOUZOJ-zJNQgQ.roa (raw, json)
Hash identifier: 1XGfZbMPSYAlNHDDCnkMSq09sEl5vC9Yn+ePfbiNr6U=
Subject key identifier: 08:B6:71:A7:4B:94:5A:0D:2C:C1:21:8E:51:93:89:FB:32:4D:42:04
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 12CF
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CLZxp0uUWg0swSGOUZOJ-zJNQgQ.roa
Signing time: Sun 01 Mar 2026 03:16:28 +0000
ROA not before: Sun 01 Mar 2026 03:16:28 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 27.230.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4815 (0x12cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 03:16:28 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=08B671A74B945A0D2CC1218E519389FB324D4204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ba:22:83:e5:42:6f:92:08:ef:2e:ca:95:4e:
bc:19:e3:6c:6c:c8:b6:26:e5:b8:72:65:a3:7f:66:
8e:f5:40:d0:1e:f6:24:c3:03:7e:91:53:00:df:42:
f5:46:be:4a:9c:f9:62:87:d8:ae:ef:76:56:fb:41:
98:a9:84:29:31:34:27:04:92:9d:30:ec:5d:a7:08:
dc:30:e0:26:f0:ac:b9:ff:2a:3c:30:ed:8b:02:2a:
9b:da:a7:da:48:eb:5f:af:a8:a1:0b:15:26:ea:89:
1e:ea:bf:08:46:15:2d:89:9d:19:cb:ba:29:56:62:
9d:18:4f:94:7d:c6:bf:cb:81:50:94:17:cf:2e:0f:
0b:b8:5a:40:a3:89:cd:95:5c:8a:3e:31:fa:d9:f5:
46:b7:d1:16:b9:e6:bf:22:50:12:58:8e:4f:36:1e:
7b:74:f3:24:03:87:aa:84:74:a6:dc:57:42:07:bd:
4b:6f:78:bd:f6:6d:68:c0:21:97:c8:08:52:a9:7c:
c1:00:56:08:73:40:11:85:0c:e0:8d:78:7e:63:a1:
63:9e:d8:1a:d4:70:28:8a:97:0f:69:0c:12:52:71:
e5:98:f4:dd:2a:9b:19:21:70:e2:86:90:0e:52:1b:
16:3a:40:3c:b9:eb:23:44:fd:5d:5b:f4:6f:15:00:
65:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B6:71:A7:4B:94:5A:0D:2C:C1:21:8E:51:93:89:FB:32:4D:42:04
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CLZxp0uUWg0swSGOUZOJ-zJNQgQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.230.160.0/19
Signature Algorithm: sha256WithRSAEncryption
18:25:a5:e9:5b:a2:50:7b:60:e3:5d:86:5a:6f:17:52:b4:ad:
01:72:4e:49:ab:9a:cd:ee:a6:8a:81:ca:e8:36:6c:43:87:46:
28:ed:b0:0c:10:6a:04:d6:26:ca:b8:8b:8b:1a:fe:8e:c2:d5:
f0:62:26:69:64:a2:1b:e9:7d:47:94:6c:f8:d7:f7:b8:16:56:
58:f8:ba:26:27:31:bf:06:9a:f2:30:aa:1d:27:a5:ec:d0:8c:
b6:c3:82:ae:1f:aa:a6:a3:55:65:19:46:66:ed:f5:61:c4:e4:
6e:87:d9:9e:d2:08:4f:d7:ff:5f:fe:e1:17:3e:ba:17:37:77:
47:d4:ec:61:64:1f:94:be:e0:24:07:ce:32:07:12:11:1b:8a:
15:45:90:4d:77:8e:fa:50:10:f4:8b:7d:2e:5c:7b:51:39:93:
de:c6:51:98:49:61:91:b1:d6:c1:5f:31:1c:16:82:c3:60:ed:
31:08:dc:25:cb:b5:0e:9c:19:fd:1f:10:36:2a:77:c3:03:79:
d9:8f:c2:e1:fa:7c:88:aa:ef:31:44:1a:72:5b:3b:e8:c4:16:
7a:96:6b:42:a8:d9:62:ba:27:d3:d9:b6:cf:0c:ca:ad:6b:53:
0a:94:d5:4f:20:ff:41:42:b3:d6:23:5e:34:1e:b0:fb:9f:8c:
85:94:95:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:04:30 2026 by rpki-client