
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/gOaZtcnwo3leL95ZDSjeSoHyisA.roa
File: gOaZtcnwo3leL95ZDSjeSoHyisA.roa (raw, json)
Hash identifier: UcLSrZEPdPJ98tETfVIOEUOjUMUNxiJRonwK3x+4D9k=
Subject key identifier: 80:E6:99:B5:C9:F0:A3:79:5E:2F:DE:59:0D:28:DE:4A:81:F2:8A:C0
Certificate issuer: /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Certificate serial: A8
Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/gOaZtcnwo3leL95ZDSjeSoHyisA.roa
Signing time: Tue 31 Mar 2026 07:38:49 +0000
ROA not before: Tue 31 Mar 2026 07:38:49 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9621
IP address blocks: 203.209.184.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 16:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168 (0xa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Validity
Not Before: Mar 31 07:38:49 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=80E699B5C9F0A3795E2FDE590D28DE4A81F28AC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1e:47:1d:6d:3f:47:17:bd:87:3a:93:7b:79:
60:a5:bb:83:e9:9e:37:cc:46:23:d0:fc:15:03:74:
36:87:d3:35:a9:7a:05:e4:7c:a3:87:05:49:19:06:
a5:9a:1c:bb:e7:0a:34:85:8f:fb:cb:3f:98:bf:46:
5b:91:50:06:62:56:00:6a:6d:0c:4d:bf:46:9e:23:
69:fd:22:8b:47:e1:38:fd:30:d5:29:01:c7:1d:3e:
fa:90:05:d3:70:f5:37:db:35:7c:ff:c3:b8:4a:99:
00:cd:39:0b:ff:d0:18:3d:71:19:c8:07:01:70:cd:
cd:8f:e4:28:fb:97:f2:07:f0:1e:79:bf:03:5f:53:
73:f5:9c:b7:7b:c3:b9:b9:54:86:96:6e:50:72:06:
73:83:7f:96:07:6d:03:bc:cc:1a:74:a2:fc:ad:4b:
0a:3f:27:ac:8d:97:23:e9:87:09:d1:ee:27:48:ad:
b0:e0:ff:73:23:6d:6d:11:e5:6d:06:60:46:15:c9:
8e:ac:40:6b:c8:03:d6:7b:23:1f:41:e8:9b:9a:5f:
54:67:ae:85:4d:ae:a6:a1:c4:21:80:97:59:76:49:
13:ce:df:a0:fa:de:8b:63:c8:97:4d:5d:09:5a:24:
7a:95:13:3b:83:38:23:a1:f5:4f:b9:70:cb:56:c3:
42:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E6:99:B5:C9:F0:A3:79:5E:2F:DE:59:0D:28:DE:4A:81:F2:8A:C0
X509v3 Authority Key Identifier:
keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/gOaZtcnwo3leL95ZDSjeSoHyisA.roa
sbgp-ipAddrBlock: critical
IPv4:
203.209.184.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:8c:f3:42:b9:3e:9e:a9:5b:98:08:98:a3:fa:11:f7:cb:12:
43:5d:0c:4a:46:ab:80:76:53:48:89:07:75:96:39:67:18:82:
ff:c8:fa:45:ee:5e:34:2d:a1:ef:a5:1b:c9:c6:04:17:05:35:
b3:db:96:25:d4:ca:cc:ae:89:c2:9e:da:2e:5b:c9:74:eb:73:
99:3d:73:71:32:22:70:82:3a:3c:96:bb:04:30:02:c7:dc:25:
91:9d:36:6a:16:6d:60:ab:41:3a:1d:f2:39:9e:bc:d7:e1:26:
70:dd:43:da:92:74:39:5e:d6:22:a7:e9:f0:0a:5b:05:fe:f7:
8f:0e:d2:9f:e5:61:c9:d2:51:c5:6e:25:cd:64:7d:90:b5:eb:
45:46:d8:31:8b:75:9a:7f:6c:92:41:fd:87:2f:05:01:e3:2f:
40:7d:63:6f:46:f5:d4:62:38:a5:34:49:45:cc:1b:ea:01:4b:
06:b9:f9:0c:d8:6e:0e:1c:51:43:0a:11:66:92:eb:44:10:4a:
ed:4d:a8:c9:c7:16:75:a4:40:b7:c2:66:cc:23:fb:08:a3:07:
4d:cc:a9:81:b9:72:6b:bb:f2:34:c0:70:85:f1:4e:66:79:47:
44:b8:5b:68:e9:3f:42:a7:d0:39:46:66:20:52:86:7f:2e:44:
3d:da:65:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:27 2026 by rpki-client