
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/01NoEGzNuaaWEopd0Ul21-XQItA.roa
File: 01NoEGzNuaaWEopd0Ul21-XQItA.roa (raw, json)
Hash identifier: dhtGsEQmdO1+5B9CxOAO0kJ2318Iay8JodrrozxbOfM=
Subject key identifier: D3:53:68:10:6C:CD:B9:A6:96:12:8A:5D:D1:49:76:D7:E5:D0:22:D0
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 17D7
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/01NoEGzNuaaWEopd0Ul21-XQItA.roa
Signing time: Tue 31 Mar 2026 08:04:39 +0000
ROA not before: Tue 31 Mar 2026 08:04:39 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6103 (0x17d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:04:39 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=D35368106CCDB9A696128A5DD14976D7E5D022D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b3:81:76:2c:2f:55:fe:7b:c5:d7:8b:a1:45:
04:6e:05:48:1f:be:3b:ef:75:c5:f6:dd:47:29:3e:
bd:ae:7b:eb:3a:8a:2b:bb:ee:5a:98:59:10:8a:b8:
1d:80:c4:2a:29:99:6e:56:16:a6:e4:70:23:8a:8d:
ac:62:bf:d0:95:dd:21:73:cf:39:ab:c1:ca:f8:30:
23:28:2f:73:ee:18:da:e8:99:2b:7f:ef:7b:3f:2f:
0f:40:77:55:30:27:a7:f5:b0:1e:0e:ce:2f:3e:76:
ac:af:53:5c:c8:be:0f:09:17:1e:f0:93:1c:2f:4b:
50:f5:f4:74:a4:b8:ee:a9:a6:a0:7d:29:0e:11:f0:
78:31:e5:56:e9:5e:28:89:7c:24:24:70:54:98:08:
46:cb:2f:37:18:f5:4a:7a:db:8f:f5:13:c1:ef:b8:
17:bc:e8:c4:d2:0a:6b:5a:27:54:d6:2b:3a:1c:e9:
11:f5:51:7b:a8:ed:36:0f:7b:2f:03:c1:5c:98:3f:
4d:28:15:d7:c5:9a:01:d8:9e:41:45:6e:a0:dc:0d:
fa:e4:de:77:f3:06:b0:1f:df:f3:ac:c3:ef:62:14:
29:2f:6b:e9:e9:36:79:76:7c:37:32:1b:0d:c7:49:
9c:ea:e8:0a:11:7e:69:2e:0c:71:18:a8:3c:74:30:
12:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:53:68:10:6C:CD:B9:A6:96:12:8A:5D:D1:49:76:D7:E5:D0:22:D0
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/01NoEGzNuaaWEopd0Ul21-XQItA.roa
sbgp-ipAddrBlock: critical
IPv4:
49.106.188.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:1c:e5:9e:9a:ea:45:d1:8b:30:36:77:71:ad:f7:cb:d1:22:
97:60:22:b8:7c:dc:d9:eb:35:ef:45:5e:4c:d5:66:15:10:aa:
2b:bb:29:dd:f1:95:0a:b4:3a:a7:62:cb:dc:94:23:4b:74:86:
e3:2c:e4:8b:55:c0:b8:df:94:18:ff:72:14:b5:cc:c8:de:8e:
e4:77:61:85:ff:dd:df:93:da:20:df:38:c8:4f:14:85:87:6b:
f3:0d:f1:28:39:ea:9c:ed:e3:4d:c4:76:f1:ed:ad:10:8c:66:
97:1f:36:72:32:2a:dd:18:6a:ab:92:64:52:0f:4b:dc:7a:8e:
3c:f8:d3:a6:7d:16:8c:0a:6e:18:ac:27:a9:23:8e:7e:48:09:
75:8e:74:3e:b1:b6:aa:ac:8b:bf:be:3c:e4:85:02:58:21:be:
d0:9c:57:c5:b6:f0:33:6d:dd:71:18:4c:7e:b0:58:65:fb:3c:
8a:73:15:2b:9d:f6:14:42:f0:b6:fd:73:4c:5b:44:76:da:d3:
f3:1e:db:fb:e0:8d:c6:74:9f:04:1d:66:9d:47:ae:d7:40:68:
12:45:59:d7:99:82:b8:24:da:5c:c0:d3:4d:54:5e:44:85:47:
3a:97:3f:70:b6:4b:70:c9:13:5f:50:6b:a2:68:cf:78:38:62:
e3:61:a3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:01:41 2026 by rpki-client