
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Dnr3UvkRNRQmeunz0mdvY5jnG2A.roa
File: Dnr3UvkRNRQmeunz0mdvY5jnG2A.roa (raw, json)
Hash identifier: lPBGYNvj16B9/a1pEp4KPhUbrqZUH1ZaJbjkUEK2CFc=
Subject key identifier: 0E:7A:F7:52:F9:11:35:14:26:7A:E9:F3:D2:67:6F:63:98:E7:1B:60
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 161B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Dnr3UvkRNRQmeunz0mdvY5jnG2A.roa
Signing time: Tue 31 Mar 2026 08:01:09 +0000
ROA not before: Tue 31 Mar 2026 08:01:09 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.86.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5659 (0x161b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:01:09 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=0E7AF752F9113514267AE9F3D2676F6398E71B60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ad:99:68:89:26:07:a6:fa:54:5d:ec:6d:e0:
5b:a7:d9:38:27:c0:40:d3:c0:50:66:4f:a8:7a:cd:
be:b0:89:4b:f4:03:88:b1:a7:90:65:47:4a:c6:00:
ee:d7:25:01:f9:99:16:e6:c0:c8:b6:e0:c7:97:db:
f5:5f:5a:6c:bb:be:b7:bc:b5:a6:ef:72:d0:cc:2e:
4e:8f:1e:37:a0:47:2e:e9:5d:ec:8b:4f:f2:fa:b7:
52:0e:96:6d:dc:8a:56:eb:b3:8d:33:06:bb:9f:cb:
ac:3a:ab:46:ff:31:d5:da:55:f6:f2:72:3d:c6:42:
3e:29:b3:80:b1:b6:23:7d:4b:bc:70:82:07:4a:56:
dc:2b:6e:b0:46:68:46:0c:db:3a:ed:c9:bf:4a:16:
41:73:ce:bf:29:a8:e5:a1:3c:d5:f3:29:6c:07:17:
c5:6c:ac:1e:eb:16:39:57:86:37:92:19:00:ec:39:
f6:ed:6f:a7:48:37:90:75:2d:9a:fb:cc:db:dd:7e:
a4:5c:88:33:b3:c0:34:94:e4:8c:5a:be:7b:e1:f4:
aa:d0:c3:a8:20:aa:53:eb:36:ff:5a:1f:51:63:ed:
73:8e:43:11:b5:9f:ca:fe:4e:fb:8f:ae:4d:c0:4b:
9b:5b:c2:04:3b:65:5f:87:cb:84:cd:94:98:1c:85:
5b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7A:F7:52:F9:11:35:14:26:7A:E9:F3:D2:67:6F:63:98:E7:1B:60
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Dnr3UvkRNRQmeunz0mdvY5jnG2A.roa
sbgp-ipAddrBlock: critical
IPv4:
49.98.86.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:d0:bd:4d:9e:58:1c:3b:25:45:16:df:47:99:2a:04:90:2b:
e9:03:90:27:0d:7e:0f:47:09:27:51:f5:7f:22:f1:3e:3e:88:
2f:a0:fa:4b:06:bb:b8:4f:23:fb:d0:16:5d:5c:37:ba:23:41:
a3:e2:84:a6:70:44:9a:94:06:4e:20:a4:10:79:b8:41:47:8c:
f5:e1:e9:51:45:8a:de:68:f6:fb:19:f9:c0:9a:ad:08:fe:20:
a3:27:39:63:1b:a6:4f:1d:ea:4e:97:29:8f:ec:c2:33:38:61:
ad:ad:f5:3f:36:da:84:ba:5d:93:20:12:82:e8:4e:e9:cb:8f:
71:90:d9:47:bf:3a:d8:8b:84:2c:e2:3e:20:d7:00:ac:34:3f:
11:2d:e0:6a:62:59:3f:57:85:5c:fb:0c:4b:f9:73:0a:29:f2:
58:c6:ab:12:0f:38:0b:3b:25:f6:68:e6:68:9c:d9:df:f6:a8:
ea:a1:e5:6e:61:e2:82:ac:db:e6:d7:8c:78:9d:4e:b3:e0:8b:
33:3b:65:ee:4a:0f:b1:3c:ab:f9:75:03:28:60:f9:a2:ac:5c:
08:9d:41:b2:1f:df:da:07:6c:dc:fb:c5:e5:63:cf:dc:97:2c:
3d:ba:bb:39:d2:cb:8e:c5:2f:2d:f1:7b:38:85:ac:2d:fc:e0:
6e:7f:df:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:56 2026 by rpki-client