
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/GrZusKTtVuQlLFs2uRjOIdplUDM.roa
File: GrZusKTtVuQlLFs2uRjOIdplUDM.roa (raw, json)
Hash identifier: Sjx1lJztvQ0Zn2HZ5QzobtGayyGbaQupal5INmbzffI=
Subject key identifier: 1A:B6:6E:B0:A4:ED:56:E4:25:2C:5B:36:B9:18:CE:21:DA:65:50:33
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1280
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GrZusKTtVuQlLFs2uRjOIdplUDM.roa
Signing time: Sun 01 Mar 2026 03:04:42 +0000
ROA not before: Sun 01 Mar 2026 03:04:42 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.78.8.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4736 (0x1280)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 03:04:42 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=1AB66EB0A4ED56E4252C5B36B918CE21DA655033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:46:e9:a2:46:79:72:94:e1:35:c4:0b:01:b6:
3a:b2:ba:37:cb:e9:1d:86:30:09:b9:0b:22:ac:02:
85:e6:bb:16:90:03:7c:e3:5c:3e:cd:79:a5:32:09:
76:42:d5:02:6d:81:d8:18:3a:75:e6:9a:3c:c0:40:
eb:e1:ee:ed:74:72:b3:e0:c7:a3:39:14:70:8a:16:
3e:da:b5:fe:86:62:6e:08:f9:8b:27:15:59:7a:34:
27:6a:ed:51:a4:7e:d1:e4:05:bd:fd:84:1e:8b:ce:
6d:87:a0:ba:e3:0f:52:ad:84:9e:04:d7:30:62:27:
35:4e:56:e4:f5:0e:2f:6c:74:0c:db:e1:8b:15:c7:
03:0f:fd:4e:4d:14:55:5e:9e:8c:a8:1a:ad:6f:9e:
7d:01:6d:29:9d:b4:dc:95:7d:8d:cd:77:64:6c:43:
0a:82:54:7e:70:fb:25:1e:da:e9:fb:ce:f8:dd:bd:
cc:ad:b2:5d:e5:b9:21:62:08:e6:05:ad:ce:10:37:
51:87:20:50:2a:8b:fc:36:1e:98:3d:42:c1:8c:fd:
d0:d4:b3:9c:19:36:09:91:28:93:5c:11:bc:93:36:
2c:6e:26:b3:b8:1a:df:70:c0:7b:dd:d8:d6:79:ef:
42:7e:92:cc:79:c3:33:07:4b:5a:f6:d8:11:13:ba:
cc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B6:6E:B0:A4:ED:56:E4:25:2C:5B:36:B9:18:CE:21:DA:65:50:33
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GrZusKTtVuQlLFs2uRjOIdplUDM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.78.8.0/23
Signature Algorithm: sha256WithRSAEncryption
55:ea:78:25:4e:67:a4:30:bc:f0:92:55:c4:ca:e2:92:41:26:
b6:d1:34:dd:9e:ce:92:3d:da:64:cc:4a:ee:91:a4:fa:0b:fe:
96:11:99:c1:a3:10:68:0d:bc:15:85:7d:38:d4:05:ac:cd:29:
68:d2:46:b9:ca:4b:31:9b:e1:24:10:a5:9f:9d:ff:1d:a0:37:
65:88:d1:92:e4:81:8e:44:59:57:8b:37:c0:b6:43:da:7f:dd:
c8:b3:88:0c:a3:1e:e2:43:4d:7e:43:a2:8e:4b:db:13:32:26:
f3:aa:05:2f:46:eb:bd:d4:f2:b3:54:0e:79:07:64:06:58:b7:
bd:ea:25:93:68:bb:98:19:d1:67:7d:c4:0a:0e:e5:39:bf:31:
3a:5f:6d:b1:79:dc:a7:a3:96:40:36:dc:ae:d9:07:94:e9:e3:
7b:f3:c4:44:d6:07:14:50:f1:70:49:51:67:2b:3f:78:bd:45:
60:0e:2b:74:5b:d3:67:d3:df:15:e4:0a:33:30:78:9c:f7:13:
29:e9:3f:f5:fa:39:db:0f:31:e3:75:1e:1e:54:5b:e7:d4:91:
a6:e9:23:74:8a:85:ee:4a:94:85:74:5a:6b:0a:e6:3a:93:f6:
c6:cd:1b:02:f8:7a:12:c9:17:53:a5:d3:5b:b8:21:29:ca:e3:
3d:f6:c7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:26:30 2026 by rpki-client