
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/fOw3XQQkY5R5ulE4lBxtkZYk4ZQ.roa
File: fOw3XQQkY5R5ulE4lBxtkZYk4ZQ.roa (raw, json)
Hash identifier: b0tq/uK+5rggnPoNAzEuOYOxXo0o+ApZR5ErKN10S9I=
Subject key identifier: 7C:EC:37:5D:04:24:63:94:79:BA:51:38:94:1C:6D:91:96:24:E1:94
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1118
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fOw3XQQkY5R5ulE4lBxtkZYk4ZQ.roa
Signing time: Sun 01 Mar 2026 02:07:28 +0000
ROA not before: Sun 01 Mar 2026 02:07:28 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.75.244.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:24:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4376 (0x1118)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:07:28 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=7CEC375D0424639479BA5138941C6D919624E194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:56:ba:2c:77:c3:d1:63:bf:7d:a6:6d:70:eb:
46:12:57:9d:4e:4a:22:1b:e5:cb:46:39:f8:11:09:
04:9c:fa:88:cf:fa:ad:e4:12:ae:09:1f:60:26:0d:
0e:26:f7:7f:9c:39:b5:64:fd:26:34:98:ed:53:90:
79:4b:d3:6b:4b:cb:f9:78:4a:8d:fc:2b:e1:f4:50:
38:3f:9e:35:ef:5c:60:36:ef:d4:a7:88:73:f3:38:
1d:69:50:90:4a:43:39:18:47:50:28:09:6b:f0:1a:
aa:bd:a5:7f:30:5f:26:28:39:cc:00:33:cd:b4:5c:
9f:fb:6d:cd:94:85:20:3c:b2:56:57:36:e0:67:df:
77:5d:dc:3e:eb:58:f8:c0:a7:45:4b:c3:a5:10:2f:
66:0e:bb:35:40:2e:38:06:9d:79:49:b9:01:08:8a:
58:e1:dc:26:28:e2:16:1f:54:93:78:df:29:ef:31:
99:09:74:a9:33:fc:0f:88:10:e3:95:0a:cf:e2:c9:
4e:ed:4c:58:f3:89:a5:03:ce:33:c1:fe:26:17:a0:
fe:c3:2e:cf:a1:dd:70:26:a0:5c:77:ce:aa:46:54:
68:58:b1:75:f9:ad:06:44:0f:cc:b4:cd:7c:1a:bb:
4f:38:08:6b:48:2f:4e:9b:89:ac:69:85:2e:8d:cb:
7e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:EC:37:5D:04:24:63:94:79:BA:51:38:94:1C:6D:91:96:24:E1:94
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fOw3XQQkY5R5ulE4lBxtkZYk4ZQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.75.244.0/23
Signature Algorithm: sha256WithRSAEncryption
80:f8:2e:6d:90:ff:40:ca:78:c1:f6:43:65:22:60:63:a1:bc:
45:1a:70:54:60:e6:72:70:86:d9:b6:af:64:97:87:b6:6c:fa:
89:e0:65:b9:cb:52:e7:29:cc:90:a7:b4:66:72:3c:ad:f1:ab:
4b:09:62:c3:d4:b1:af:a3:4c:08:c4:62:f6:df:95:91:77:ac:
1c:36:3c:9b:b6:09:6d:34:f7:c1:22:44:2c:65:26:c2:01:20:
37:98:cd:cc:d8:42:f9:96:01:a5:79:b8:ad:ad:ab:75:3c:15:
7e:20:3d:67:7c:72:8c:6e:33:19:85:c6:20:2a:b1:89:53:6b:
c7:36:ca:3b:5f:e3:f2:88:e9:8a:c1:e3:56:0c:25:15:c6:55:
2c:37:83:76:42:15:b9:5a:dc:08:24:f7:86:a0:4d:fe:79:3e:
5d:aa:41:63:0f:51:9b:90:cf:e6:62:af:9b:aa:b9:0f:5b:ae:
d3:59:6c:e2:11:54:43:b5:02:01:d9:c1:18:67:7f:3a:e5:03:
b6:f7:a2:21:12:aa:5d:b0:09:b0:52:40:51:93:eb:64:4c:b3:
7c:46:be:5d:60:87:8b:c1:74:72:22:ab:17:91:90:be:fc:0f:
99:7f:57:b7:04:2b:6f:18:d3:93:98:4c:80:4c:b9:ac:bc:40:
3b:0a:10:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:54:58 2026 by rpki-client