
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/s9Q-BTTXl5h-JbS2z-W49Va76os.roa
File: s9Q-BTTXl5h-JbS2z-W49Va76os.roa (raw, json)
Hash identifier: bxoHBecgFL8VSaTcqMCfxZRXkyuHszdUUe3+pshI3v8=
Subject key identifier: B3:D4:3E:05:34:D7:97:98:7E:25:B4:B6:CF:E5:B8:F5:56:BB:EA:8B
Certificate issuer: /CN=677198612266777D83A2DB4A1E9E147C72A5D76D
Certificate serial: 0F
Authority key identifier: 67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/s9Q-BTTXl5h-JbS2z-W49Va76os.roa
Signing time: Wed 25 Mar 2026 05:47:29 +0000
ROA not before: Wed 25 Mar 2026 05:47:29 +0000
ROA not after: Wed 24 Mar 2027 01:46:06 +0000
asID: 17511
IP address blocks: 61.213.128.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677198612266777D83A2DB4A1E9E147C72A5D76D
Validity
Not Before: Mar 25 05:47:29 2026 GMT
Not After : Mar 24 01:46:06 2027 GMT
Subject: CN=B3D43E0534D797987E25B4B6CFE5B8F556BBEA8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:35:e2:d3:85:2f:b7:70:95:89:88:7d:68:69:
32:ad:96:78:bf:62:20:d0:74:06:02:24:2f:ed:6a:
be:ed:95:91:b0:b7:ee:8f:ef:31:7c:c8:67:6c:94:
c7:4e:8f:8d:29:6e:48:04:7c:cd:c8:3b:30:1f:45:
d1:f0:a2:49:01:33:a4:9e:a0:d4:f7:af:71:c1:bd:
4f:57:00:ca:85:05:b7:ae:53:63:b8:bb:da:f8:f7:
c9:b8:6f:35:32:fc:82:6e:35:25:bd:7d:99:da:d5:
c1:97:50:5d:93:2e:5e:b5:04:91:18:4c:76:ee:a0:
43:3e:89:ff:78:f9:76:d5:f3:1b:3e:a7:68:48:9c:
9a:03:34:66:1c:2c:ca:e7:62:1f:e1:3e:36:51:bf:
24:7a:ec:24:4d:87:32:cf:14:46:51:ac:96:78:f2:
c8:4e:dd:62:9d:e3:9d:0b:ba:c4:44:83:09:67:ac:
5f:48:64:c6:a9:c9:87:4d:18:19:ab:75:80:ba:e5:
4a:fd:25:aa:20:32:fb:96:00:8a:a4:a8:7d:35:b8:
aa:16:e9:d1:c3:1d:9c:84:1b:16:53:85:66:0d:0d:
34:37:78:23:f1:85:7b:6c:97:eb:8f:58:a8:23:6d:
6a:50:07:45:a5:dd:80:ff:af:c8:50:51:92:29:3f:
24:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D4:3E:05:34:D7:97:98:7E:25:B4:B6:CF:E5:B8:F5:56:BB:EA:8B
X509v3 Authority Key Identifier:
keyid:67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/s9Q-BTTXl5h-JbS2z-W49Va76os.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.213.128.0/20
Signature Algorithm: sha256WithRSAEncryption
05:6b:ff:e0:4f:02:d3:7f:a1:a2:7e:e0:68:3d:95:c2:bf:d2:
22:e9:7e:0c:f3:65:26:98:37:7f:2f:b2:7e:a7:f6:14:ea:d1:
3b:72:78:f1:1a:93:23:ec:a4:11:e2:43:00:38:cb:5b:ba:a1:
6c:f5:6d:0d:d7:c9:30:0b:40:5c:06:a7:d9:62:af:b9:4a:ee:
49:79:33:1a:74:52:d7:02:95:f8:85:fe:0b:78:94:fc:98:96:
01:b3:21:9f:6a:15:cb:16:cb:6f:ae:58:3a:48:84:97:ef:ff:
ef:4f:ef:5e:ef:f8:e9:b9:a8:24:23:94:5f:a5:ed:dc:25:f7:
32:46:39:35:06:58:f5:77:14:0d:2f:21:23:6a:b4:5d:69:12:
25:41:72:bc:a9:cf:b7:78:60:8d:96:ae:c4:81:55:36:dd:cd:
2e:80:39:85:c4:0a:6d:ff:fe:34:a5:61:08:be:b2:aa:7f:4e:
9a:a5:bd:93:2d:09:2e:32:aa:f8:95:20:3a:0a:39:cc:b8:9d:
8f:b3:a9:2b:92:71:b1:75:3e:6d:25:b5:99:07:bb:1b:3d:f7:
59:d8:f7:6a:44:9b:2c:b4:85:25:48:28:4b:de:31:35:6d:a7:
33:34:3a:e2:2c:76:ef:00:53:cd:c4:81:ba:0f:60:68:54:24:
d1:ef:ea:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:16:51 2026 by rpki-client