
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/5sLBOe89zcYM03URaymAQI5Gqvc.roa
File: 5sLBOe89zcYM03URaymAQI5Gqvc.roa (raw, json)
Hash identifier: tYlHdez6+tIFMO8VbYrmYoPt+D03tR+tqMmdo5jzEXM=
Subject key identifier: E6:C2:C1:39:EF:3D:CD:C6:0C:D3:75:11:6B:29:80:40:8E:46:AA:F7
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1829
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5sLBOe89zcYM03URaymAQI5Gqvc.roa
Signing time: Tue 31 Mar 2026 08:05:24 +0000
ROA not before: Tue 31 Mar 2026 08:05:24 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.109.192.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6185 (0x1829)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:05:24 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=E6C2C139EF3DCDC60CD375116B2980408E46AAF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:78:8e:c2:a7:a3:91:fb:d4:26:de:ce:fe:9b:
76:58:97:65:29:21:79:cd:fd:48:10:26:34:a3:35:
96:e0:4a:5a:07:f3:c2:6f:6e:cc:83:3d:75:82:b4:
58:a7:c1:58:f2:db:64:10:23:9f:33:18:2f:e0:9d:
34:aa:89:e5:07:92:76:60:53:0d:4d:97:56:ad:a4:
24:99:82:5c:f7:c8:1c:d6:97:50:30:b8:cc:81:df:
34:c5:6c:9e:be:4e:cd:0e:9a:60:37:58:b7:08:94:
85:a0:69:8c:e6:de:45:dd:94:a4:f8:31:80:a5:03:
96:6f:ef:f4:ba:20:19:18:97:a2:d5:05:a0:33:98:
eb:14:c3:c5:dd:95:50:82:d6:ad:6a:1d:44:9d:ec:
a3:ab:74:38:1b:9b:8c:5b:80:47:2d:a8:98:20:27:
32:97:bb:c7:80:28:cf:14:1d:e2:bd:ce:9e:2b:04:
4e:ec:75:1e:fb:44:4f:c8:b0:d1:57:2c:14:ea:59:
c7:05:ab:8d:0c:fb:04:00:b0:e7:07:d3:3b:ef:5b:
9e:03:eb:c9:9a:37:d3:a5:e6:58:2b:b6:2e:52:d8:
e6:a0:cc:2d:cb:60:c4:54:0a:ea:6a:a3:0f:c4:83:
d8:26:57:ce:7a:d7:3f:42:c9:72:ca:82:26:3a:1c:
6e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C2:C1:39:EF:3D:CD:C6:0C:D3:75:11:6B:29:80:40:8E:46:AA:F7
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5sLBOe89zcYM03URaymAQI5Gqvc.roa
sbgp-ipAddrBlock: critical
IPv4:
49.109.192.0/20
Signature Algorithm: sha256WithRSAEncryption
8a:5c:de:b8:b8:81:2b:2c:54:50:65:cd:60:dd:dc:74:85:08:
bd:12:10:fc:e4:6f:49:07:45:fe:39:9b:5a:2a:67:63:0d:52:
48:61:31:8e:c8:cb:45:d6:80:a2:f9:a7:ee:2e:6e:2d:7d:ef:
69:28:e3:28:3d:05:74:70:b6:9f:78:76:24:ca:28:5a:d6:18:
08:8e:f1:07:c3:a6:ce:64:33:62:28:42:0c:86:3a:c3:f1:55:
27:74:48:33:cb:f0:2c:c8:12:d8:f6:9d:fe:4e:e7:34:e6:f2:
71:d3:49:d8:01:ab:a6:6e:f4:32:d2:3d:6b:78:e2:34:12:ee:
e2:87:dd:36:17:80:6e:68:de:fe:22:de:e4:94:e1:d8:29:0d:
46:f4:d9:4d:3c:7e:04:f3:6a:e5:d5:7f:37:a1:9f:a9:af:1f:
c9:a4:a1:bd:0e:50:39:94:2b:54:4e:c4:89:01:0b:66:bd:b1:
47:af:4e:cd:75:08:b3:01:d9:a8:d4:d1:be:d2:b9:48:74:2c:
8a:6d:19:8c:b1:6c:fa:27:c2:cd:29:7c:1d:c1:9b:ed:27:54:
5e:2b:2e:4f:e9:60:7b:66:83:bd:cf:08:43:97:f7:28:6d:d2:
00:a9:66:51:d8:d8:71:d4:4c:a2:03:d0:fd:61:96:ab:5a:d0:
a8:05:c8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:11 2026 by rpki-client