
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/UD1KJvCDqSe0S4UwbtGT9psggmY.roa
File: UD1KJvCDqSe0S4UwbtGT9psggmY.roa (raw, json)
Hash identifier: PUm6/kw6a0Ru/2pcMLRzePNIx5FZYaxOjXVndxhn8uM=
Subject key identifier: 50:3D:4A:26:F0:83:A9:27:B4:4B:85:30:6E:D1:93:F6:9B:20:82:66
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 12FF
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UD1KJvCDqSe0S4UwbtGT9psggmY.roa
Signing time: Sun 01 Mar 2026 03:27:59 +0000
ROA not before: Sun 01 Mar 2026 03:27:59 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.40.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4863 (0x12ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 03:27:59 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=503D4A26F083A927B44B85306ED193F69B208266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b4:38:41:0b:48:b5:7b:df:09:cb:4d:e3:e5:
8c:27:dc:7a:79:5c:ea:f9:be:5b:dd:0b:22:c8:e1:
4a:67:0b:89:48:07:a5:1b:7c:08:03:cd:7b:75:70:
22:16:3a:bb:75:3d:ca:ee:3e:7c:d5:b7:92:a0:44:
92:67:a1:28:15:68:93:48:76:af:4e:a1:77:c9:1d:
81:57:62:3a:85:40:4c:63:84:31:4e:97:1c:a5:85:
4f:b4:74:9f:7c:41:26:d7:5b:1a:e1:f7:13:78:4b:
0e:e7:04:75:67:75:6c:fc:6c:7a:db:ba:95:47:f6:
2c:e4:6f:f4:93:c7:57:3a:fa:4c:1f:d7:0a:4c:52:
d4:be:4f:69:d3:01:aa:e3:7e:3e:ac:de:22:9c:e4:
12:8a:94:9f:72:0b:a0:c4:3c:40:53:61:92:8b:b8:
50:7b:4d:93:e2:eb:30:12:7b:38:9c:61:3a:b4:85:
3c:b3:aa:73:a6:3e:c4:0e:64:85:81:9d:f7:0b:d3:
3d:a7:9b:22:e6:a4:eb:70:30:db:a1:6d:ec:64:5a:
47:8e:f7:be:66:4f:3e:e9:64:84:04:86:e3:68:e5:
70:36:b8:5f:ec:5b:78:e5:57:07:e7:c9:55:e2:e3:
d4:6b:a2:37:3e:99:29:5b:0d:7d:68:af:82:8f:24:
4e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3D:4A:26:F0:83:A9:27:B4:4B:85:30:6E:D1:93:F6:9B:20:82:66
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UD1KJvCDqSe0S4UwbtGT9psggmY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.79.40.0/21
Signature Algorithm: sha256WithRSAEncryption
39:eb:58:47:f3:a1:c4:42:08:0a:18:d1:e9:58:ec:a4:cf:13:
dc:b3:03:d5:b6:51:56:6c:ff:5d:94:4c:5c:41:4d:ef:c3:3a:
15:ee:59:54:db:2c:c0:c2:a1:c9:4d:50:0f:4a:83:00:23:23:
49:8c:7c:17:df:32:41:50:05:cc:5f:c8:97:ab:f1:6f:df:62:
a9:3d:a3:23:12:ba:e7:a7:50:0f:53:59:28:0b:bc:70:0a:c5:
70:db:1b:e0:1b:f9:7a:61:11:74:cd:64:a6:2e:e5:74:4b:8b:
29:f8:75:d7:b1:49:b2:a1:8e:e0:93:c9:80:e3:06:1a:48:86:
cf:d8:de:78:c5:56:52:46:97:68:df:2d:22:e2:fc:5a:6b:01:
1b:47:04:c9:65:70:b2:f5:81:71:83:32:aa:58:81:f5:3e:7d:
b3:aa:2c:9e:b0:fc:8e:1e:bf:6b:fb:8f:0d:81:8e:c0:c8:b4:
16:70:2e:c0:48:2c:b7:8b:07:10:c9:6e:95:8a:2c:20:d9:da:
89:dc:fd:a7:a6:36:9a:14:29:30:4e:ec:ac:6d:f4:46:6b:13:
f7:fb:99:31:35:1f:e8:87:0e:70:6e:75:33:e6:c1:f4:fe:51:
32:e9:98:4f:b9:be:44:e9:9a:d3:f7:d8:91:38:b4:8e:9c:6f:
c7:ff:31:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:15 2026 by rpki-client