
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/4BbFGs4vgn_yTzT5kwWsElVr-zk.roa
File: 4BbFGs4vgn_yTzT5kwWsElVr-zk.roa (raw, json)
Hash identifier: +mWt7pru+tdryclIjkwvwLouYE9pMzIvNGvAq6m/9MY=
Subject key identifier: E0:16:C5:1A:CE:2F:82:7F:F2:4F:34:F9:93:05:AC:12:55:6B:FB:39
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 13FF
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4BbFGs4vgn_yTzT5kwWsElVr-zk.roa
Signing time: Tue 31 Mar 2026 07:56:41 +0000
ROA not before: Tue 31 Mar 2026 07:56:41 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.152.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5119 (0x13ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:56:41 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=E016C51ACE2F827FF24F34F99305AC12556BFB39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:44:45:01:cf:3f:18:fd:3c:7f:80:67:9c:e2:
37:ce:7d:07:98:d2:f1:9e:d8:42:4c:2c:ab:82:48:
02:3e:81:ca:32:d5:b1:7b:0c:c9:8a:14:60:a8:77:
f2:3e:5e:48:db:96:5a:e8:c7:25:9b:28:33:27:fa:
eb:40:36:a1:f6:62:b9:ab:88:48:d6:b5:00:29:21:
ad:60:fc:20:76:44:23:7c:11:85:0a:be:4a:73:37:
21:7a:8e:9b:a0:6d:9d:6f:a1:07:d0:56:94:d5:2f:
4b:c7:c8:a5:46:22:13:3d:a8:89:19:22:7e:4b:d6:
7d:53:38:00:67:df:90:ea:14:11:62:ff:22:b2:4e:
64:a4:62:c6:36:15:e5:71:1a:4a:ca:2b:1c:4a:1c:
ec:48:ff:4b:08:a6:10:14:8d:77:61:63:57:74:f7:
43:e2:d1:2e:b9:b6:4d:34:c6:51:6d:6d:81:d8:09:
0c:15:f8:50:0d:20:32:08:52:f5:9f:dc:ff:ba:0f:
ce:ff:cc:49:49:46:20:c7:3b:de:3c:af:64:9e:dc:
9d:09:cc:7c:b0:c6:58:ad:15:8c:58:3b:53:e3:7b:
4d:85:cc:21:a8:9a:5a:d0:83:4f:e7:72:3d:cc:1b:
ac:3d:1b:03:fc:68:51:e8:66:82:a0:f6:59:7f:f6:
96:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:16:C5:1A:CE:2F:82:7F:F2:4F:34:F9:93:05:AC:12:55:6B:FB:39
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4BbFGs4vgn_yTzT5kwWsElVr-zk.roa
sbgp-ipAddrBlock: critical
IPv4:
49.98.152.0/22
Signature Algorithm: sha256WithRSAEncryption
69:ce:35:36:39:ed:4c:f4:6a:43:22:15:30:d5:fc:75:33:2a:
65:bc:be:62:55:58:2c:73:28:a8:87:42:02:ed:7d:42:57:92:
1e:c4:be:4d:ea:f7:ab:b1:84:c4:94:bf:d8:bb:70:11:8e:99:
3b:5f:1a:43:b9:94:0d:26:e0:a3:77:88:de:4d:35:5c:1a:73:
53:6d:a5:a5:bb:5a:89:99:45:24:8f:6d:53:92:02:38:d1:63:
50:96:c7:df:8b:96:52:cd:b8:4a:15:40:49:cd:d5:14:18:2c:
46:c9:f2:74:a8:7d:fc:f9:a6:ab:0e:32:dd:9c:58:e9:da:87:
9b:9e:d0:98:1c:53:3f:9e:76:d9:1d:e4:b5:25:fa:27:f0:1c:
d1:f0:57:74:55:9c:0c:02:ec:89:10:39:72:c2:dc:42:12:cb:
fd:8a:5b:02:fb:fc:f2:97:e4:77:bf:b9:36:b4:96:c2:93:65:
94:1d:b6:ce:69:97:b2:0a:76:c5:7e:3e:7e:b4:5a:b3:6d:ab:
3b:c8:43:42:24:26:ee:10:8c:94:9b:f1:85:e6:ae:7c:7e:cd:
12:5e:6e:b7:a2:73:7d:90:25:25:45:51:5e:01:ae:64:be:43:
fe:46:9c:57:c1:82:9f:8e:bb:f8:f8:4b:e1:f3:4e:9d:ed:34:
0a:4e:52:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:13 2026 by rpki-client