
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/A_mY2PKu_cEtm8AVkHXKmq6cwcE.roa
File: A_mY2PKu_cEtm8AVkHXKmq6cwcE.roa (raw, json)
Hash identifier: 313YcQ8dkW536rxQiv0egL3ow51LjrFiZbZMDvAVTUQ=
Subject key identifier: 03:F9:98:D8:F2:AE:FD:C1:2D:9B:C0:15:90:75:CA:9A:AE:9C:C1:C1
Certificate issuer: /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial: B0
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/A_mY2PKu_cEtm8AVkHXKmq6cwcE.roa
Signing time: Tue 31 Mar 2026 07:55:20 +0000
ROA not before: Tue 31 Mar 2026 07:55:20 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 160.249.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176 (0xb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Validity
Not Before: Mar 31 07:55:20 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=03F998D8F2AEFDC12D9BC0159075CA9AAE9CC1C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ec:6f:73:a5:da:97:7a:55:39:ea:1d:08:41:
27:60:7e:4c:25:6c:9f:5b:f7:34:b5:de:17:1b:e8:
52:98:7b:e8:63:ad:34:4c:33:d0:fd:14:60:a7:15:
2c:17:e2:df:01:4c:a9:16:c3:ec:31:89:c2:25:09:
94:44:23:bf:db:e7:02:e5:e9:42:0c:cf:ca:f7:a4:
bd:67:42:b5:39:04:8d:70:82:70:3e:a7:ae:6c:81:
d4:3e:4a:7c:9d:39:6c:2a:45:33:07:60:63:be:c1:
58:3d:fa:8b:e6:02:90:c3:bd:9b:72:8b:11:df:2e:
c5:1c:a6:88:8f:5a:dd:27:47:e3:0b:8b:f5:30:5e:
f4:67:17:de:3e:13:f5:18:d5:63:fd:b0:46:29:24:
c8:d4:56:2c:25:91:08:17:85:3a:ed:7b:93:64:e5:
fb:fe:c0:ff:b9:c5:37:77:7f:55:56:70:41:87:c8:
8a:cd:78:e6:3f:1a:ec:d6:55:9f:79:32:70:cc:a3:
5d:fc:6a:3c:a6:d9:1a:47:5f:89:16:83:9d:55:37:
c9:14:29:e9:7d:0d:b0:03:7f:61:4f:18:96:9f:a5:
f7:4d:d1:7f:61:d2:c1:00:4a:44:15:a3:a5:4e:05:
30:0a:fb:57:fb:ab:dc:3a:d7:8d:bd:32:58:65:86:
c4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F9:98:D8:F2:AE:FD:C1:2D:9B:C0:15:90:75:CA:9A:AE:9C:C1:C1
X509v3 Authority Key Identifier:
keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/A_mY2PKu_cEtm8AVkHXKmq6cwcE.roa
sbgp-ipAddrBlock: critical
IPv4:
160.249.92.0/24
Signature Algorithm: sha256WithRSAEncryption
36:ac:ef:80:9a:86:9e:e0:f3:3d:b2:31:f6:da:f2:d9:d0:75:
38:06:98:e5:41:6d:5b:41:f5:3a:25:d4:f7:e0:87:de:24:e6:
e7:b2:3c:c6:57:fc:8f:cf:e1:11:98:42:c0:e2:7d:c0:cd:e2:
78:18:c6:0a:e2:b7:8e:79:04:07:5b:d8:ba:5c:20:da:c5:6c:
8d:8f:50:eb:e3:63:ad:45:dc:e1:db:f3:af:f1:5f:55:37:80:
b2:31:a0:0f:cd:6c:49:24:16:cc:97:fd:45:8b:d5:1a:b8:57:
1d:80:42:ac:4f:38:48:2e:12:52:ce:2f:e4:03:43:03:8e:2c:
0e:31:13:14:51:b5:d6:58:b1:8d:ce:7a:d4:f4:3f:3a:b5:40:
57:4d:fd:2a:2d:c1:77:c2:9d:d5:a1:b3:ef:92:5f:d4:e0:6a:
29:f8:e3:07:b0:68:08:14:89:ca:7b:d5:48:2b:04:d1:8d:b5:
ad:f2:59:e8:08:e2:f0:34:ce:34:5f:1f:f1:ee:46:40:2b:e9:
66:02:47:69:38:ec:af:4d:f6:69:52:d8:fc:26:58:55:f0:3e:
d7:44:6f:b1:50:94:ad:f3:95:92:ec:52:d1:d7:fd:3a:85:32:
a9:ef:b8:ba:ea:81:ac:4b:e3:e8:80:ba:a2:92:a9:a1:d7:66:
33:ee:c0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:25:08 2026 by rpki-client