
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-o4ziNqEDpeumI1iecHyDYrY3Fo.roa
File: -o4ziNqEDpeumI1iecHyDYrY3Fo.roa (raw, json)
Hash identifier: nNOd3oDn54aAKIhBozD9Nd05Vy2iczDiyJc/2WrCw/8=
Subject key identifier: FA:8E:33:88:DA:84:0E:97:AE:98:8D:62:79:C1:F2:0D:8A:D8:DC:5A
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 15CF
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-o4ziNqEDpeumI1iecHyDYrY3Fo.roa
Signing time: Tue 31 Mar 2026 08:00:28 +0000
ROA not before: Tue 31 Mar 2026 08:00:28 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.96.4.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5583 (0x15cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:00:28 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=FA8E3388DA840E97AE988D6279C1F20D8AD8DC5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:60:d8:f1:ac:0e:e4:df:7d:2c:d6:11:f5:51:
ba:90:7d:94:de:cc:ab:9e:b4:3b:dd:6a:e7:76:21:
3b:28:25:5c:76:5d:88:13:65:e6:c5:89:da:0e:f0:
bd:ec:8e:be:af:a2:fb:27:cc:a3:b5:8e:33:9e:76:
14:04:7b:5e:bd:f0:79:80:2b:35:1f:38:95:b2:e6:
ab:f1:3f:b7:71:ef:60:38:cf:05:f5:57:17:24:91:
c6:45:b9:0c:1e:4d:d5:39:42:c5:3b:b7:70:91:71:
81:49:8c:28:da:1f:6a:6b:27:75:b5:ab:6a:da:00:
f3:58:d6:25:b0:d8:36:a2:ad:da:92:a0:aa:53:f7:
5a:1b:d1:b4:be:e1:53:f5:56:43:1f:ba:38:ae:5a:
a6:47:7c:47:d6:d9:9d:d8:9c:e3:3b:84:25:68:87:
61:a6:98:18:2f:ec:3f:5a:f6:31:15:27:f7:5e:bb:
cc:9e:a0:17:5a:5f:3e:a3:e8:73:b2:8a:21:2e:50:
df:c5:05:02:fb:98:03:e8:f1:5a:5c:dd:da:58:dd:
6e:9e:3c:72:b2:a8:a4:de:86:51:fd:57:a2:0a:91:
51:a6:cc:05:6a:d4:fe:d9:61:cd:9a:c0:95:27:2b:
a4:e7:49:e8:b5:76:bf:d3:3f:f0:1d:1b:2a:0d:1b:
ae:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8E:33:88:DA:84:0E:97:AE:98:8D:62:79:C1:F2:0D:8A:D8:DC:5A
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-o4ziNqEDpeumI1iecHyDYrY3Fo.roa
sbgp-ipAddrBlock: critical
IPv4:
49.96.4.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:c0:ce:a8:70:55:6b:97:2c:f7:19:bf:64:23:ce:7c:ec:1b:
78:60:2f:b7:cb:ba:94:29:60:51:42:2b:a0:9f:a5:e1:7e:d8:
be:1f:9c:38:0a:0d:17:ad:40:cb:de:32:67:65:3b:e0:4d:d0:
33:3e:d1:1f:2a:00:a4:07:4f:87:54:e0:60:77:14:61:fa:c3:
ba:9f:e8:76:d7:ab:8e:2a:36:04:e8:50:80:73:41:fb:53:96:
8a:ef:7a:2e:47:ad:44:c7:26:c7:a6:de:ca:49:fc:57:f7:ef:
06:a9:19:f7:a4:af:d0:41:e4:b5:67:6b:79:39:68:f4:79:c3:
bc:2a:26:d6:63:1b:9c:c4:68:d7:51:d2:aa:4a:56:25:b1:ad:
33:08:cc:31:72:e7:c8:1f:b2:b2:b7:6a:cd:53:55:62:83:5d:
a6:a1:4b:1a:b5:a3:0b:c6:8a:2e:66:b0:e1:d2:dc:0c:9d:12:
48:22:24:4f:c5:e7:04:05:5b:52:20:e9:83:45:20:ad:bf:c2:
d1:cb:bf:3a:46:73:49:25:de:80:8e:96:4d:a9:51:a9:25:61:
32:42:7f:99:9d:a4:f5:71:ea:89:43:5c:f1:11:36:54:eb:28:
bd:60:14:3d:5f:3b:0a:cd:be:57:5b:dc:87:91:e4:10:10:83:
fa:29:17:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:27 2026 by rpki-client