
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/dcuTFxBNNqwBXVBKLXYtOH8FL3Q.roa
File: dcuTFxBNNqwBXVBKLXYtOH8FL3Q.roa (raw, json)
Hash identifier: eGVbiWSUfElMsbnI411xjRNq2dr8+57uRtSx+GcDsjQ=
Subject key identifier: 75:CB:93:17:10:4D:36:AC:01:5D:50:4A:2D:76:2D:38:7F:05:2F:74
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1272
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dcuTFxBNNqwBXVBKLXYtOH8FL3Q.roa
Signing time: Sun 01 Mar 2026 03:04:34 +0000
ROA not before: Sun 01 Mar 2026 03:04:34 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4722 (0x1272)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 03:04:34 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=75CB9317104D36AC015D504A2D762D387F052F74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:88:95:85:4f:7e:ae:c1:3f:0c:e3:74:f4:d7:
ee:a8:f0:2d:b4:6a:46:2d:6f:00:b6:29:bb:43:96:
ba:74:13:df:78:a4:16:37:c0:c4:39:c1:81:9e:6f:
e8:53:87:5f:39:07:fc:26:52:2b:53:02:71:5d:f9:
3d:02:f3:aa:93:f8:b0:fc:18:aa:57:55:52:c0:44:
38:2e:39:75:6c:41:b2:b4:88:41:8b:fa:91:5c:05:
8d:c3:ad:88:98:0f:33:46:a0:7d:25:f5:cf:92:fe:
23:91:e9:0c:b8:b8:bf:d5:b2:f7:d8:07:ac:9a:fd:
6c:ff:fb:83:7a:56:30:18:42:73:98:71:27:97:f0:
d0:92:98:fe:b7:b6:2a:24:21:fd:fe:ec:28:c8:ed:
26:2c:e5:a6:b2:3f:25:4c:cc:c9:e6:ee:c8:df:e8:
21:bc:49:4d:7e:07:43:a4:68:1c:4f:8b:ab:1d:49:
31:7e:d7:17:8d:45:6d:a5:37:9d:7f:83:01:e0:ab:
72:71:e6:b6:a5:f2:3a:f7:c2:64:f4:7e:c8:58:1e:
5d:40:15:40:59:bf:b0:b1:22:94:6c:52:dc:ce:7c:
ef:6f:9d:4b:94:31:df:87:a2:61:44:44:fa:b1:56:
05:0c:57:0a:ce:3e:1b:6f:3f:ac:59:72:91:2b:4f:
35:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CB:93:17:10:4D:36:AC:01:5D:50:4A:2D:76:2D:38:7F:05:2F:74
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dcuTFxBNNqwBXVBKLXYtOH8FL3Q.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.79.128.0/19
Signature Algorithm: sha256WithRSAEncryption
23:cf:19:ec:ca:ae:e3:d9:87:b6:24:7e:2f:07:76:89:6f:44:
be:18:07:bb:e5:ee:46:e0:da:a1:5b:2c:26:73:49:ee:f7:d4:
a8:99:cb:69:72:89:cd:0b:d2:bc:94:2b:9b:e2:60:5b:23:b2:
45:e1:2c:6c:5d:fa:2c:72:e2:f5:c9:11:d5:4b:09:8d:af:06:
ce:57:86:32:30:72:e4:a0:41:36:c6:8c:6f:26:ae:15:49:07:
32:10:62:3d:67:a4:47:f9:8c:18:a2:fd:c5:2d:99:36:a5:8a:
63:d6:88:e6:3d:05:ef:eb:42:ae:68:12:e9:bd:96:bf:cc:fd:
7b:67:70:91:06:72:34:89:b6:cd:a2:67:ad:f7:89:26:09:85:
2c:29:16:22:73:70:98:40:47:ad:6c:ed:bf:17:6a:64:b7:4e:
fc:a6:42:cb:f5:8b:5b:9c:3c:31:27:47:fc:e4:a4:af:ad:31:
08:26:49:a1:ef:83:db:2c:5a:b0:66:ca:4f:57:f9:96:d1:10:
77:13:a0:5b:af:9f:c7:c7:08:c4:d0:2d:d5:7e:6d:79:f3:8a:
2c:05:c0:39:e5:a7:f0:f5:58:ee:61:cf:5d:34:df:cf:45:e0:
5e:24:ec:d2:ba:15:43:97:46:e3:0d:b3:41:06:2d:4d:82:36:
ef:fd:70:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:17:12 2026 by rpki-client