
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/K3ty7MCw_01BwdIPhrDNiqEm8uU.roa
File: K3ty7MCw_01BwdIPhrDNiqEm8uU.roa (raw, json)
Hash identifier: u791S89G/JqjY0a6twDbqrUlvaS5t/vBUJp8lk+e0Vc=
Subject key identifier: 2B:7B:72:EC:C0:B0:FF:4D:41:C1:D2:0F:86:B0:CD:8A:A1:26:F2:E5
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1191
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/K3ty7MCw_01BwdIPhrDNiqEm8uU.roa
Signing time: Sun 01 Mar 2026 02:31:10 +0000
ROA not before: Sun 01 Mar 2026 02:31:10 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4497 (0x1191)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:31:10 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=2B7B72ECC0B0FF4D41C1D20F86B0CD8AA126F2E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0a:ad:88:03:74:30:43:bd:eb:17:ff:d7:cc:
da:59:90:dc:18:85:d2:51:e8:6b:ff:36:58:e2:23:
fc:28:69:d2:01:9d:f1:e0:f0:84:bc:45:c0:77:fd:
e1:e6:89:06:50:38:18:f4:9e:26:b1:26:b5:2e:e1:
07:04:e1:b8:69:0f:f1:e9:16:75:91:78:80:f9:5f:
49:7d:10:ca:73:3b:28:79:cf:36:c8:bc:9c:e1:77:
16:21:40:2d:fc:e0:9a:68:dc:6b:a4:a2:51:17:b2:
84:4b:32:eb:73:d5:95:63:31:80:eb:47:b3:4c:b8:
08:f0:e8:5a:0f:60:05:d3:17:f3:f4:31:a9:d9:58:
f2:b1:5b:34:f2:51:51:82:eb:81:72:68:24:36:0b:
74:2f:2f:02:62:22:ae:db:03:05:e9:0f:14:3b:b6:
cc:eb:bd:08:37:13:3d:2b:9f:fc:13:90:32:01:fa:
fa:5e:ec:b8:cc:67:a3:e6:c0:47:cf:71:68:44:73:
f9:f9:3a:f2:2a:3c:8e:15:53:ac:94:2d:53:53:63:
fe:8f:86:57:71:c5:4e:3c:77:6b:65:61:d5:b4:82:
8b:0d:e8:e5:66:b7:ab:32:46:db:72:56:b7:2d:5c:
5e:25:50:1e:0c:58:78:d2:2a:19:a2:cc:0d:a5:6c:
2f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7B:72:EC:C0:B0:FF:4D:41:C1:D2:0F:86:B0:CD:8A:A1:26:F2:E5
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/K3ty7MCw_01BwdIPhrDNiqEm8uU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.79.14.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:34:e6:4c:82:d3:bd:cf:e4:0a:82:26:a8:c9:e0:94:f3:88:
fc:b5:3e:db:84:a7:7d:fd:fb:da:79:33:b5:11:03:0c:6e:e2:
fd:5b:5a:33:0d:f7:cf:be:ca:fb:ea:98:5c:45:1c:bb:6f:86:
5c:8a:61:da:f5:74:76:f8:1d:54:5b:87:a9:66:6e:59:b7:2c:
7d:96:83:09:47:68:ba:0e:55:c7:21:d8:4f:f1:91:78:9a:a1:
db:e9:1d:7b:96:55:0c:13:cc:d3:93:d6:13:06:56:12:ae:b0:
b8:ae:1c:ed:7f:f7:0b:55:55:6e:d8:9a:46:45:05:4a:bb:fd:
b6:73:c2:d7:0d:e5:78:db:90:cc:23:5d:67:8a:30:d2:88:dd:
65:a9:ba:fc:10:cc:17:d6:18:ae:40:8f:38:c0:c5:6d:69:56:
c1:dc:df:45:d8:e5:6f:82:f8:dd:ea:13:d8:c2:cd:e5:49:1e:
35:4b:dd:ee:da:09:39:bc:5c:f2:a3:f6:fe:8a:b9:2e:bb:d2:
00:7e:3e:cd:e9:c8:65:c3:ba:ca:40:c3:ba:c8:0d:63:27:d1:
b7:a8:ee:d9:3b:91:9a:3a:93:28:f1:21:56:36:d2:42:fc:26:
94:be:18:8a:e2:3e:02:1a:7f:15:ea:f2:d8:97:39:57:2f:e7:
82:1f:66:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:53:51 2026 by rpki-client