
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/kuf1lq1UHJ0ikiNkjTsvgc65tV4.roa
File: kuf1lq1UHJ0ikiNkjTsvgc65tV4.roa (raw, json)
Hash identifier: PPDD6mH/scByX9la/b/JopriYDZ9rHP3hTGrl+GhaXk=
Subject key identifier: 92:E7:F5:96:AD:54:1C:9D:22:92:23:64:8D:3B:2F:81:CE:B9:B5:5E
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 10E3
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kuf1lq1UHJ0ikiNkjTsvgc65tV4.roa
Signing time: Sun 01 Mar 2026 01:58:38 +0000
ROA not before: Sun 01 Mar 2026 01:58:38 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.76.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4323 (0x10e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 01:58:38 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=92E7F596AD541C9D229223648D3B2F81CEB9B55E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:81:4c:11:a5:55:b3:cd:c9:21:34:10:17:53:
fa:ae:8f:94:31:9a:a8:84:ac:f0:30:9f:12:1e:49:
36:60:f0:d9:e8:73:03:01:6a:13:13:be:6b:6f:3d:
9b:79:ad:47:03:c0:34:36:26:43:15:b6:73:39:48:
02:90:33:70:c4:71:d4:7c:f1:98:92:fa:09:85:d6:
70:20:08:e4:2c:45:5a:ab:f8:0a:3d:3d:ef:44:af:
a1:6b:41:67:d7:6d:a8:4a:77:4e:1a:51:fc:2a:12:
7e:22:4d:23:b5:b9:0d:c8:d1:ee:86:2c:0a:0a:d6:
d3:cf:34:1d:75:02:96:df:85:57:09:bf:c9:10:4b:
1f:1f:21:6f:e3:70:0d:9b:96:66:0d:f5:f6:8e:7d:
e7:46:3a:cd:0f:d1:ad:d6:ae:71:16:b7:c7:12:7c:
5f:da:fb:eb:95:38:de:0b:6b:15:c4:3b:a3:ca:1a:
42:4a:6a:ca:a5:f4:57:73:ef:53:1a:cb:af:33:40:
2d:b2:4e:ff:8f:5e:a2:b9:5a:c7:49:c1:a8:f8:d1:
ec:41:ee:7d:b2:de:09:c8:b3:1e:ef:0a:b2:78:34:
7b:32:d7:92:6d:f1:98:4a:d0:6f:a5:af:9f:82:a4:
9d:c8:6d:da:07:ed:38:57:ec:f3:60:ed:81:ce:9a:
7d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E7:F5:96:AD:54:1C:9D:22:92:23:64:8D:3B:2F:81:CE:B9:B5:5E
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kuf1lq1UHJ0ikiNkjTsvgc65tV4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.79.76.0/22
Signature Algorithm: sha256WithRSAEncryption
e5:6f:a1:fb:4b:b2:10:30:54:e5:82:78:36:13:69:12:ef:46:
fd:46:96:28:09:b5:1c:ce:53:d9:37:b0:79:3c:11:b5:b6:b8:
50:51:8f:4b:19:64:30:33:b2:9e:ac:19:2d:90:cb:8a:26:4a:
c8:db:8d:dd:d9:54:00:69:3b:63:f3:8a:27:53:eb:f7:8e:58:
a0:a2:73:15:b8:c0:6d:6e:d3:c5:5a:f6:c7:33:b1:6f:c9:f4:
f0:7b:df:f4:c9:81:5b:c8:3f:3d:c0:74:60:d5:30:e7:56:9b:
96:6b:07:ab:35:73:74:76:1f:ec:15:67:00:ab:69:a3:9f:f0:
91:f8:09:c6:76:d9:21:cb:b9:9b:63:7d:ec:df:e3:14:db:3e:
a6:33:bc:f8:4f:78:9c:d7:35:a1:b0:3c:35:03:60:a2:8c:50:
1c:cc:3e:c1:a6:99:85:5e:cd:61:63:03:71:6d:e3:d7:d3:d0:
90:29:1c:66:a9:18:d2:26:c3:fb:d0:20:af:1c:11:c3:d3:5a:
fb:c0:c4:c6:da:87:a0:2a:ac:57:97:05:94:af:af:53:ab:8d:
f6:b4:40:16:96:0d:3f:d9:24:13:f7:ad:40:95:6c:da:24:cd:
c7:7f:40:57:e8:ff:77:a1:95:ba:ad:c9:60:e3:8d:75:db:27:
72:77:34:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:51:32 2026 by rpki-client