
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/jl4FpIrj0U8X-3qE80PFIiSZaXQ.roa
File: jl4FpIrj0U8X-3qE80PFIiSZaXQ.roa (raw, json)
Hash identifier: gkokNOOzZ2cjiBB/lTr29lWLcf+n64dK/oOP+0bWI90=
Subject key identifier: 8E:5E:05:A4:8A:E3:D1:4F:17:FB:7A:84:F3:43:C5:22:24:99:69:74
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1199
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jl4FpIrj0U8X-3qE80PFIiSZaXQ.roa
Signing time: Sun 01 Mar 2026 02:31:14 +0000
ROA not before: Sun 01 Mar 2026 02:31:14 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.84.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4505 (0x1199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:31:14 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=8E5E05A48AE3D14F17FB7A84F343C52224996974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:05:c6:0a:28:79:2e:7a:9d:c4:61:e2:dd:6d:
cf:c2:3d:e9:e0:2f:c0:94:cb:0d:3c:68:47:49:a5:
62:4d:be:eb:ad:64:29:6b:86:69:9f:f2:da:cc:42:
71:54:01:9c:6e:0a:5d:22:9a:e8:78:1e:d4:19:de:
ad:03:16:f7:c0:5a:bd:05:51:32:11:3c:03:81:3a:
76:98:49:cb:70:9f:65:78:ce:3b:cd:de:83:3c:dc:
d3:78:74:ab:04:71:d4:ca:fe:66:ec:4e:36:67:fe:
56:fc:70:c0:ee:1a:db:86:68:1d:bb:b2:40:87:37:
03:9a:0f:ad:d9:5c:c8:05:bf:c2:d3:9e:28:ea:06:
e8:e1:f7:28:66:5e:a8:f8:20:90:ae:c9:1b:bc:7a:
20:0a:48:ac:26:51:c4:2a:5a:90:a7:7e:d5:64:36:
06:d7:45:7f:9b:fb:8e:11:52:fc:c4:cf:fa:6b:ec:
b0:73:a9:e5:6a:37:e2:d6:70:f2:58:e2:88:88:3b:
4c:a2:c2:1e:d8:31:e4:e1:3a:b9:45:09:46:f2:71:
fd:ef:56:12:95:0d:8b:ca:5d:cd:a4:80:68:60:49:
65:86:b4:90:93:0f:2d:c7:df:12:24:05:64:a3:c5:
87:06:4e:1b:1f:f1:d7:20:31:80:b7:f1:0d:70:34:
c8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5E:05:A4:8A:E3:D1:4F:17:FB:7A:84:F3:43:C5:22:24:99:69:74
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jl4FpIrj0U8X-3qE80PFIiSZaXQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.79.84.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:4c:5f:3a:c6:25:62:f9:df:da:c5:66:49:2d:68:ae:11:e4:
96:c7:ed:39:38:45:86:b8:b0:f7:c7:8e:aa:10:95:4b:29:26:
b7:c2:42:9b:d9:74:17:66:e5:21:49:50:63:a4:b1:2b:55:7e:
b5:3f:0a:18:14:0d:2d:1a:37:c5:55:1f:cf:6f:61:ac:1a:86:
c9:13:81:f4:6f:af:e4:3f:89:ae:31:1e:4e:81:ec:ab:54:63:
11:a4:50:bb:3b:a9:cf:a4:27:c7:b7:b1:9d:61:a7:77:3c:92:
ab:de:86:de:29:26:d6:94:9a:5b:31:ed:98:2d:63:d8:7b:a9:
7d:bd:66:3e:b2:0b:f2:9a:fc:11:0f:74:dd:b9:6e:f9:7c:37:
48:06:f9:67:d4:ff:6c:b1:a0:cd:37:79:d7:d1:d3:58:b0:9d:
80:b0:98:0f:f3:b0:05:4a:47:2b:ab:6c:cd:8a:3f:a8:d2:72:
87:f7:55:8e:1e:35:73:f4:4c:c0:64:d1:2b:70:69:73:56:85:
03:bc:2d:a2:f0:57:91:9e:89:1a:0b:5c:9d:d8:f6:d8:e0:e5:
c2:71:ad:4a:ef:7d:49:ed:cf:b0:28:12:c2:2e:a2:75:ec:5d:
4d:02:a6:06:04:d8:3d:ef:be:a9:7d:e6:76:5b:cd:72:b5:6e:
73:30:61:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:50:39 2026 by rpki-client