
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Y-JrjZdPZ4d0-7VTr0g-IaH3cKw.roa
File: Y-JrjZdPZ4d0-7VTr0g-IaH3cKw.roa (raw, json)
Hash identifier: 9B4XaVGYtZazKTINowmPVfzxScfw4dXz4kGzWajRAJ8=
Subject key identifier: 63:E2:6B:8D:97:4F:67:87:74:FB:B5:53:AF:48:3E:21:A1:F7:70:AC
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1233
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Y-JrjZdPZ4d0-7VTr0g-IaH3cKw.roa
Signing time: Sun 01 Mar 2026 02:52:30 +0000
ROA not before: Sun 01 Mar 2026 02:52:30 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 220.210.28.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4659 (0x1233)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:52:30 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=63E26B8D974F678774FBB553AF483E21A1F770AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:52:04:f2:cc:00:1d:eb:74:4c:dc:5c:9a:71:
a7:7b:3f:38:4b:9c:c9:86:69:1c:70:16:ca:09:1a:
59:6a:5f:28:10:b8:7f:4b:50:73:e3:1e:d5:a1:b8:
bb:c6:f8:93:ca:aa:f1:b5:c0:c0:8a:ca:ee:be:aa:
53:0f:bc:b7:e2:91:b4:44:46:48:94:cb:57:d3:01:
86:75:7f:4e:25:77:46:ed:b9:fc:2a:36:d7:0a:39:
37:31:33:24:11:1d:3a:f3:f7:89:9f:a2:38:62:0e:
99:ca:bc:b9:d3:ca:5b:0e:ef:74:ce:5f:6a:3a:e1:
e2:8a:71:ca:1e:eb:95:9d:fb:bc:91:c1:a7:8a:75:
00:e6:7b:04:4f:42:d5:0c:1a:a4:b9:e5:ca:a0:04:
97:94:d3:b6:f8:e7:c0:49:96:2f:43:f6:83:53:2e:
57:b2:eb:ac:3b:12:6b:47:ca:fa:cc:80:69:2f:37:
13:d2:14:f4:b7:78:ee:72:c2:89:43:6d:15:9b:5a:
6b:ff:71:7d:04:dc:36:1e:12:a6:31:76:02:56:20:
de:a9:24:2f:e7:b2:57:71:a7:48:36:af:82:b6:ad:
0a:ec:0c:a6:68:0a:5c:0a:b9:88:45:c4:ee:0b:32:
21:71:65:a6:bb:a5:cd:84:8d:7b:71:27:ad:87:47:
d8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E2:6B:8D:97:4F:67:87:74:FB:B5:53:AF:48:3E:21:A1:F7:70:AC
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Y-JrjZdPZ4d0-7VTr0g-IaH3cKw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.210.28.0/23
Signature Algorithm: sha256WithRSAEncryption
d4:4c:a7:e7:b6:7d:5a:94:ae:4c:42:40:65:ce:d8:e5:92:7b:
6b:74:78:f8:2e:a6:e1:42:6d:12:d7:9e:21:c9:ed:76:ee:e3:
75:97:83:47:4c:05:c4:3e:7f:b2:ef:6d:49:10:1f:55:f0:f1:
fe:d1:c6:81:d6:1d:10:04:34:b1:b7:be:89:6e:5b:f7:cd:b4:
40:43:1f:c8:51:5e:cc:f8:bf:2d:90:52:9e:d0:c0:a1:ef:ef:
5c:c6:dc:3d:8b:4f:e2:5c:67:6f:d1:dd:48:9d:b9:6c:70:cf:
20:42:ec:d4:73:31:d9:7c:72:80:fd:0f:b7:45:bb:9e:d5:20:
f5:6b:65:ab:5f:0d:8c:16:50:ee:e6:c3:50:e6:7a:5c:dc:f0:
20:fb:14:b3:88:fc:27:cf:f1:eb:1f:7e:87:45:1e:8e:3c:b0:
73:cc:75:6b:7a:f1:34:b7:33:5b:8f:0f:70:5d:2d:4b:90:a1:
83:b2:4f:17:a3:98:8e:bf:27:12:22:c8:e5:25:d4:78:4b:a0:
1a:03:4b:56:e5:ff:a4:eb:d4:a6:bf:7a:fe:d7:a1:84:2f:10:
7d:4c:44:d4:33:70:99:20:cd:2b:fd:32:24:b4:57:2e:83:33:
df:a4:ca:e2:e4:dc:a0:aa:1c:84:c7:24:ed:b1:46:c8:1b:1f:
87:3c:f6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:59:47 2026 by rpki-client