
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/sj7lqq1yn8WB3Zkf9bILwV3sbNM.roa
File: sj7lqq1yn8WB3Zkf9bILwV3sbNM.roa (raw, json)
Hash identifier: lAj+Z1LwNU+yclv7pdy7WrVjnXvSupxsf5zBjxmgz/4=
Subject key identifier: B2:3E:E5:AA:AD:72:9F:C5:81:DD:99:1F:F5:B2:0B:C1:5D:EC:6C:D3
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 113F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sj7lqq1yn8WB3Zkf9bILwV3sbNM.roa
Signing time: Sun 01 Mar 2026 02:12:48 +0000
ROA not before: Sun 01 Mar 2026 02:12:48 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.78.10.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:24:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4415 (0x113f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:12:48 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=B23EE5AAAD729FC581DD991FF5B20BC15DEC6CD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e6:1d:6e:b8:34:a0:41:1a:d1:cf:9d:59:82:
0b:13:e2:7d:24:7b:45:fc:45:eb:20:88:99:ef:82:
1d:fe:76:47:88:a8:ef:b1:93:93:e5:bb:8a:dd:7b:
1b:59:8b:2e:32:45:c3:89:e9:90:2a:91:c1:63:04:
c0:59:20:be:b5:3a:8b:fc:8e:20:2b:b2:7c:ef:df:
a7:c8:06:ff:fe:df:b7:ea:ef:ea:0a:23:b1:c9:40:
ce:94:34:51:d6:30:77:30:e0:de:60:8a:77:4f:32:
ce:ae:b1:7d:74:0b:06:49:78:72:2c:64:b5:bb:36:
39:57:5b:6c:9c:2f:64:26:46:0b:22:d4:0a:e0:59:
12:21:36:18:b8:e2:9c:e2:be:71:2e:5f:37:76:43:
88:fa:04:1d:12:b1:98:2b:10:aa:7f:e8:2e:50:51:
76:7b:69:04:fd:5d:b2:09:c0:4b:75:6d:52:d4:00:
0e:f6:76:34:d3:85:fb:b6:4a:78:72:e9:74:0f:ca:
ea:44:28:c1:8d:7d:1c:7b:15:5c:ac:1e:37:f3:22:
0c:22:f5:89:76:29:10:8a:73:0b:bf:fb:d0:68:09:
52:b7:e0:9a:9a:16:b6:c4:01:f6:75:7a:b0:d1:7c:
86:4d:7b:8d:37:f0:65:e7:69:9c:f9:e6:95:39:4f:
dd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3E:E5:AA:AD:72:9F:C5:81:DD:99:1F:F5:B2:0B:C1:5D:EC:6C:D3
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sj7lqq1yn8WB3Zkf9bILwV3sbNM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.78.10.0/23
Signature Algorithm: sha256WithRSAEncryption
e4:d5:7a:67:d4:ab:49:09:24:11:20:d9:97:31:70:4b:21:e8:
31:77:ef:57:3f:20:c6:f8:26:21:30:b2:a4:cb:20:ec:82:41:
d3:3f:17:9b:b0:6c:4f:64:6e:d3:e6:c1:5a:7a:60:21:bb:25:
40:99:73:e9:aa:fd:2c:75:a5:bd:68:6d:1e:c0:63:ad:65:f8:
bb:b5:24:f9:b2:e6:3e:4a:19:69:db:2b:7c:54:c5:cd:ed:68:
06:1f:cb:e9:42:55:fa:2a:9b:d2:ec:1c:aa:a4:57:b1:40:c1:
8d:d0:03:f1:7b:5c:ee:a1:a2:b0:31:d3:50:b8:f9:ef:41:16:
23:1d:ff:6c:62:c3:c4:5b:ee:f4:98:8f:f1:f7:65:cb:73:da:
1b:a1:4f:c8:be:d5:ad:d4:87:6d:11:60:41:a9:b7:c4:06:1f:
b0:8f:9c:50:e6:f4:03:11:f8:33:f6:d3:65:66:5d:7c:53:26:
e0:2e:b0:94:a1:d7:4a:70:bf:64:21:4a:f8:a1:19:f1:52:c7:
13:ec:00:5c:d4:5b:72:7a:7b:17:b5:5c:b5:ff:f2:e6:ae:4c:
4f:5e:42:17:e1:7d:2b:16:95:86:62:8b:db:f5:75:6a:53:a5:
4f:ae:01:bc:e1:0c:17:03:58:ce:70:14:59:6d:12:be:88:39:
0d:df:81:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:54:50 2026 by rpki-client