
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/kNuRgB7JFNNaoqFvzo95xxpgzos.roa
File: kNuRgB7JFNNaoqFvzo95xxpgzos.roa (raw, json)
Hash identifier: p9ccO+kXOlNoDTm6eRjw03kRGPxcwFgPLoY2zyi3E2g=
Subject key identifier: 90:DB:91:80:1E:C9:14:D3:5A:A2:A1:6F:CE:8F:79:C7:1A:60:CE:8B
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 117D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kNuRgB7JFNNaoqFvzo95xxpgzos.roa
Signing time: Sun 01 Mar 2026 02:26:58 +0000
ROA not before: Sun 01 Mar 2026 02:26:58 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:24:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4477 (0x117d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:26:58 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=90DB91801EC914D35AA2A16FCE8F79C71A60CE8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:63:de:ea:b9:ac:66:af:31:21:11:7d:83:11:
b7:b3:54:3c:aa:14:92:c3:60:78:f7:d7:c8:74:83:
c3:06:7d:cf:75:46:ff:70:07:ec:02:3a:16:e1:34:
1e:3b:1c:29:23:b0:25:45:81:7f:53:48:b7:bb:e1:
f9:65:2e:29:7a:af:31:10:d1:f6:66:a9:36:3f:88:
fa:87:14:f3:a2:5e:2f:6e:cc:43:7d:ab:bc:d2:c7:
9b:11:ae:8c:a9:2c:ca:b2:98:2d:92:e9:88:28:94:
1a:19:7e:a6:c2:30:f8:e9:b8:59:6d:ac:e9:9e:2c:
7d:17:d7:bb:c2:62:e3:91:11:d4:b5:dd:11:09:05:
b3:3d:a9:04:34:64:06:cf:4c:0a:0c:ee:2d:d5:be:
77:ca:9d:1a:fb:06:c5:40:a3:6f:ff:ae:d5:2f:e1:
f4:9e:ab:ff:dc:e3:b4:fc:05:72:97:29:5e:1d:11:
e9:5d:89:df:81:62:63:62:15:21:06:f8:60:71:7e:
b1:71:c3:2f:33:e3:41:0d:97:66:e2:52:6b:99:30:
47:96:25:66:a5:26:c0:b8:59:3c:fe:c7:94:c5:77:
41:ce:23:54:82:d0:da:1e:10:18:50:2c:4e:d1:8a:
23:c5:cd:88:e9:c1:6b:ea:4e:99:dc:c3:de:df:35:
4d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DB:91:80:1E:C9:14:D3:5A:A2:A1:6F:CE:8F:79:C7:1A:60:CE:8B
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kNuRgB7JFNNaoqFvzo95xxpgzos.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.79.23.0/24
Signature Algorithm: sha256WithRSAEncryption
97:6c:04:90:0f:65:55:bf:bd:c7:9b:09:e1:38:6a:61:22:99:
6b:a8:4c:e2:f8:9c:f5:17:36:ec:18:1e:4d:01:35:ea:e7:2c:
25:70:85:e4:2e:33:a7:65:20:27:4d:16:43:32:9b:69:5d:f8:
36:a3:e5:fd:89:c3:0f:d5:ee:49:d1:02:a2:f6:cd:eb:8c:ec:
3a:64:12:f2:48:52:28:c8:6f:9c:18:62:65:62:74:c0:7a:95:
04:56:03:66:b0:4d:2e:cb:aa:b2:75:51:e4:00:c8:05:c5:76:
c2:9e:61:41:5c:62:f9:62:91:16:16:da:55:6c:5a:c9:16:dc:
87:23:94:87:cb:29:f7:2f:8a:0a:a2:2b:ce:31:41:ef:c9:74:
fc:6e:5f:74:08:59:7e:94:97:c4:99:10:6f:20:77:bd:e3:ed:
4b:91:8f:54:91:31:d7:82:89:17:26:78:02:d4:b1:a6:26:30:
f4:04:02:ac:d9:9f:c5:5f:46:83:2f:a3:2e:68:c2:3a:a3:11:
ef:4d:af:a2:cc:bc:4a:62:ea:82:88:64:ab:12:71:a1:be:57:
fa:c1:4e:a9:bb:a7:66:d8:ef:ed:5c:51:48:76:97:31:94:71:
28:46:19:68:30:da:12:da:24:e4:81:a1:f0:34:d7:66:02:a5:
89:d9:9e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:55:03 2026 by rpki-client