
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/5e3JkNbws4bdyoH8-jpA7AvARUU.roa
File: 5e3JkNbws4bdyoH8-jpA7AvARUU.roa (raw, json)
Hash identifier: I6lLZaT8ykpHAWBqPNBsycIZnI2twL6D8HqsAmciCM8=
Subject key identifier: E5:ED:C9:90:D6:F0:B3:86:DD:CA:81:FC:FA:3A:40:EC:0B:C0:45:45
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 15B0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5e3JkNbws4bdyoH8-jpA7AvARUU.roa
Signing time: Tue 31 Mar 2026 08:00:10 +0000
ROA not before: Tue 31 Mar 2026 08:00:10 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.102.130.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5552 (0x15b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:00:10 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=E5EDC990D6F0B386DDCA81FCFA3A40EC0BC04545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:af:7c:f2:54:0c:e7:02:2d:d6:87:51:1d:ec:
2f:36:36:3f:f0:75:66:9e:a2:74:fd:47:64:f9:7e:
01:b2:ce:18:87:3c:86:09:cf:6e:c0:17:bc:8e:6a:
5b:03:a8:9d:47:f1:1d:87:31:b9:21:3f:82:05:b6:
48:07:43:8f:fc:a1:35:31:9f:3e:d5:38:ae:7e:a7:
f4:f4:b7:d2:4c:41:14:2d:15:52:23:f3:93:22:3f:
20:5e:94:35:dc:f4:5f:9e:b0:9a:38:a7:c2:8c:ad:
51:d7:f9:3e:e6:56:a4:24:77:bf:d3:42:94:d6:3e:
92:26:bc:21:cc:26:9f:6c:1d:d9:44:10:7b:70:a8:
d3:77:5c:2a:ea:cc:00:9b:24:ef:1a:0f:c4:34:a4:
96:db:0f:a6:09:30:43:99:51:94:51:c5:d5:e3:bd:
51:27:99:35:98:78:51:d5:7d:07:b9:d3:fa:8c:c0:
90:ee:31:c9:9a:14:b0:20:c3:f5:ac:d6:a2:0c:6b:
db:47:67:f9:38:53:bc:22:f9:b0:b5:a2:06:6c:4b:
18:b1:0b:fd:6b:77:f5:6e:d1:d1:37:5c:df:0a:2d:
78:a9:31:12:c8:a5:9f:9d:20:3a:e9:2b:b3:85:42:
22:d7:f7:ad:7f:07:c9:c1:92:e7:54:d3:fa:ec:0f:
50:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:ED:C9:90:D6:F0:B3:86:DD:CA:81:FC:FA:3A:40:EC:0B:C0:45:45
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5e3JkNbws4bdyoH8-jpA7AvARUU.roa
sbgp-ipAddrBlock: critical
IPv4:
49.102.130.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:ff:b2:0e:c7:11:b0:1d:53:5d:82:98:e0:9c:c3:b8:1e:f4:
06:dd:94:db:5d:af:78:06:56:0b:4a:da:a1:00:10:18:28:d5:
e2:52:d4:14:0d:f6:84:74:bf:26:3d:03:15:e0:30:ae:84:0c:
5b:4e:db:16:ab:77:76:65:5d:38:4e:d2:d3:1a:03:cf:75:61:
c5:0f:16:fa:9a:6d:2d:ee:59:85:00:55:f4:1e:d1:f3:4f:d5:
df:d3:01:9d:9d:5a:1b:c1:65:25:2e:2b:1d:64:f5:2c:0e:f2:
32:b8:0d:4c:4e:c0:0e:97:d5:8a:29:05:3c:3d:45:c9:38:34:
1f:d7:e7:5d:5c:b1:2c:db:74:a7:3d:a6:40:bd:6d:d2:1c:ee:
cf:80:ec:27:2e:6d:16:c3:40:f3:64:c2:86:87:06:bc:64:15:
97:bd:99:ae:03:dc:88:23:60:2d:df:89:9c:c6:b0:f8:88:ae:
2d:9e:d8:d6:de:f2:d1:96:e9:b5:3e:3e:fc:22:a5:d4:67:09:
b4:74:47:ef:f9:5a:4f:2c:54:c3:c2:3f:af:5f:89:e0:87:f3:
eb:cf:fb:79:dc:95:54:b7:93:d9:b9:33:4c:d0:cf:db:33:22:
94:4c:78:b9:bd:1d:ea:98:24:5f:4e:42:09:62:fb:8e:14:28:
41:fb:ca:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:46 2026 by rpki-client