
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/D1y8I6Wbfzt94okO8S3anWEgHm4.roa
File: D1y8I6Wbfzt94okO8S3anWEgHm4.roa (raw, json)
Hash identifier: ZDBluemQcCmz8MCJVksKg2MMuCugkS2ErayuNSdteto=
Subject key identifier: 0F:5C:BC:23:A5:9B:7F:3B:7D:E2:89:0E:F1:2D:DA:9D:61:20:1E:6E
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 12DC
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/D1y8I6Wbfzt94okO8S3anWEgHm4.roa
Signing time: Sun 01 Mar 2026 03:20:36 +0000
ROA not before: Sun 01 Mar 2026 03:20:36 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:24:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4828 (0x12dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 03:20:36 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=0F5CBC23A59B7F3B7DE2890EF12DDA9D61201E6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f2:31:d3:36:46:74:33:d0:81:03:27:d9:41:
5c:c6:a5:86:2d:b2:35:eb:c4:a4:63:8c:2d:49:4d:
52:b9:97:7f:78:4b:70:0d:11:81:65:a3:1b:ee:2b:
db:9b:e3:8f:d2:4d:12:4b:02:c5:f6:32:b8:e7:a5:
21:07:8a:fd:41:c5:07:7e:2b:e6:f4:c0:e2:96:6f:
a4:80:54:51:5a:ab:fb:c5:0b:3f:c5:ef:ed:67:b8:
eb:ba:a9:01:22:15:6e:de:77:9a:7d:27:18:1f:2c:
fd:21:a4:db:34:21:4c:e0:95:d4:ce:3b:b7:76:cc:
03:5d:52:2f:ba:bf:cc:90:58:0e:20:ae:f7:17:f1:
a6:f6:8f:44:f1:b1:98:8a:e0:c5:c2:da:a2:c7:76:
0d:f5:26:9a:eb:ad:ee:4b:64:44:fe:26:b8:35:8f:
1a:4a:03:f1:cc:d0:41:31:a2:dd:08:97:60:42:c8:
36:f3:bf:ef:82:20:b4:52:93:02:af:db:7b:47:e8:
c7:37:60:72:5c:31:af:3b:2c:ea:d5:af:03:05:d1:
ef:19:5a:8a:d3:e4:26:7d:9c:49:77:08:b7:ab:73:
e2:ef:c6:59:6c:b8:99:b3:79:fd:28:6c:ea:04:5f:
c6:a2:d3:b5:fa:c8:52:11:28:a5:98:89:c7:7f:2a:
21:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5C:BC:23:A5:9B:7F:3B:7D:E2:89:0E:F1:2D:DA:9D:61:20:1E:6E
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/D1y8I6Wbfzt94okO8S3anWEgHm4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.79.89.0/24
Signature Algorithm: sha256WithRSAEncryption
31:72:af:ac:a0:8f:28:f5:01:3c:de:e8:8a:28:43:b5:6d:0f:
b7:dd:3b:7e:ae:a6:1d:7f:0e:85:08:1e:c7:1d:93:fe:80:ec:
23:65:f7:2c:4e:8b:ef:1e:82:91:a8:0a:8d:37:69:25:30:ed:
6c:08:0e:6e:97:57:50:62:7b:cb:92:56:8f:d0:b9:c8:0c:49:
d8:f6:93:e8:b6:30:a6:db:ee:85:08:1a:3b:d5:08:6d:a5:a2:
85:b7:a4:fe:50:d2:a5:45:cb:ea:dc:3d:00:17:7d:70:84:fd:
73:51:68:96:79:ea:06:b2:f7:47:d2:ee:9c:57:b9:ef:7d:d2:
90:59:46:ef:1d:77:9d:be:83:9b:b3:ac:d9:15:40:5f:2f:08:
79:9a:22:c5:2f:57:5f:1c:d0:5b:33:f6:2e:43:63:f3:45:70:
33:b0:7b:3f:dc:e8:bc:88:e5:5a:bd:2b:64:03:5d:f6:ef:ac:
ce:3c:46:50:5e:4a:ff:98:d5:0c:9a:0d:18:9a:e1:d1:34:20:
56:4d:5b:c3:b8:4a:f8:02:8c:30:2d:c1:10:14:45:1b:e2:57:
15:9b:20:b1:c0:75:1e:46:60:07:a1:78:50:77:51:b9:ce:33:
0c:2c:0b:ba:1e:9e:73:46:9d:1e:32:c9:db:0b:74:5d:8c:bd:
dd:95:01:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:55:19 2026 by rpki-client