
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ExmOxKlgMO_stwSqgO9NCoIPgJA.roa
File: ExmOxKlgMO_stwSqgO9NCoIPgJA.roa (raw, json)
Hash identifier: v4lqS/uCKgkE+SBmgFmcPL/oZDtb5kKiG/eerassjC0=
Subject key identifier: 13:19:8E:C4:A9:60:30:EF:EC:B7:04:AA:80:EF:4D:0A:82:0F:80:90
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 13DE
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ExmOxKlgMO_stwSqgO9NCoIPgJA.roa
Signing time: Tue 31 Mar 2026 07:56:28 +0000
ROA not before: Tue 31 Mar 2026 07:56:28 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.128.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5086 (0x13de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:56:28 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=13198EC4A96030EFECB704AA80EF4D0A820F8090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:70:2a:af:ba:03:1f:7f:11:7b:ed:8b:c4:de:
ad:69:8d:0f:f5:4f:78:10:e3:8a:d1:84:d5:e5:40:
ff:a1:a8:c5:0e:82:ec:f1:fe:30:44:9c:9d:88:c2:
e0:ad:ff:10:0e:bf:cd:11:36:60:68:22:94:a5:f5:
ef:a2:f3:39:2f:7d:41:56:71:d2:4d:d4:b8:18:57:
17:15:80:b1:1a:d1:6b:a4:74:ea:39:c0:6f:99:e9:
b8:c1:38:c4:12:75:7a:99:57:be:11:ea:30:8e:10:
d5:5e:c8:65:e2:d9:dd:e0:d5:1f:39:12:f9:9c:f4:
00:17:15:da:62:f0:b2:5c:02:5b:d0:5e:b0:0e:07:
d0:97:91:65:ca:f8:dc:96:67:93:c0:92:26:4e:ef:
a8:a6:26:73:71:dc:c8:7e:91:10:e2:ec:36:57:8b:
a9:cc:fa:2b:9e:b9:e7:6e:91:d6:b0:a3:ef:41:98:
6a:9b:14:75:9a:01:89:27:30:dc:42:23:3c:d9:97:
57:ef:99:04:c5:ba:50:ff:01:b4:d1:fd:46:ed:f7:
5c:c8:2b:e5:3b:95:fc:35:5d:9c:46:3f:94:ec:9a:
59:54:47:b2:8d:f5:fb:ab:0d:19:0a:fe:7a:e8:63:
f8:3e:79:a7:18:39:e1:d7:65:e8:dd:de:17:62:78:
1e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:19:8E:C4:A9:60:30:EF:EC:B7:04:AA:80:EF:4D:0A:82:0F:80:90
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ExmOxKlgMO_stwSqgO9NCoIPgJA.roa
sbgp-ipAddrBlock: critical
IPv4:
49.98.128.0/23
Signature Algorithm: sha256WithRSAEncryption
41:fc:5e:a4:47:ac:02:64:02:b6:fc:19:11:41:ff:87:27:68:
d8:ae:f7:46:73:31:6f:34:e6:8a:5b:66:b3:4c:d7:45:8a:2e:
67:cb:ec:11:c3:8d:57:49:19:0c:14:39:ee:ac:07:ae:cc:49:
e2:a0:a4:cf:4d:56:8a:9c:66:90:55:4c:c4:0d:84:c7:45:ac:
b4:69:28:23:39:5f:67:28:a2:dc:07:65:df:0c:cd:ff:e4:2a:
e7:57:f0:0f:1b:4c:88:01:41:c3:43:b1:2b:9f:d6:2a:a6:e2:
ea:15:1d:af:de:a4:c6:e9:57:d6:cd:fb:5e:54:ca:63:ae:a2:
b3:2f:a6:0a:af:b3:e7:d9:35:fe:4c:e0:64:e7:f1:fc:1c:b3:
8b:32:32:9c:bd:92:66:e6:1a:84:26:d3:da:0a:bf:4e:f0:00:
03:b5:22:af:e2:24:7c:c4:b0:19:cc:82:0d:2b:bb:d3:44:33:
4f:ba:42:d5:ec:e2:71:d4:6b:bc:77:97:e5:9b:5b:6a:ac:9e:
0e:af:e7:de:30:d5:c3:57:da:86:50:93:1e:33:d6:ef:a8:13:
c7:36:26:52:27:bc:99:be:b4:35:d9:6c:83:4e:4a:65:c1:d0:
cf:6e:8f:78:d5:69:91:d8:89:9b:a2:b7:06:24:bb:f4:e4:47:
8d:b2:dc:45
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICE94wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
NzU2MjhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDEzMTk4RUM0QTk2MDMw
RUZFQ0I3MDRBQTgwRUY0RDBBODIwRjgwOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDocCqvugMffxF77YvE3q1pjQ/1T3gQ44rRhNXlQP+hqMUOguzx
/jBEnJ2IwuCt/xAOv80RNmBoIpSl9e+i8zkvfUFWcdJN1LgYVxcVgLEa0WukdOo5
wG+Z6bjBOMQSdXqZV74R6jCOENVeyGXi2d3g1R85Evmc9AAXFdpi8LJcAlvQXrAO
B9CXkWXK+NyWZ5PAkiZO76imJnNx3Mh+kRDi7DZXi6nM+iueuedukdawo+9BmGqb
FHWaAYknMNxCIzzZl1fvmQTFulD/AbTR/Ubt91zIK+U7lfw1XZxGP5TsmllUR7KN
9furDRkK/nroY/g+eacYOeHXZejd3hdieB43AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUExmOxKlgMO/stwSqgO9NCoIPgJAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L0V4bU94S2xnTU9fc3R3U3FnTzlOQ29JUGdKQS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExYoAwDQYJKoZIhvcNAQELBQADggEB
AEH8XqRHrAJkArb8GRFB/4cnaNiu90ZzMW805opbZrNM10WKLmfL7BHDjVdJGQwU
Oe6sB67MSeKgpM9NVoqcZpBVTMQNhMdFrLRpKCM5X2cootwHZd8Mzf/kKudX8A8b
TIgBQcNDsSuf1iqm4uoVHa/epMbpV9bN+15UymOuorMvpgqvs+fZNf5M4GTn8fwc
s4syMpy9kmbmGoQm09oKv07wAAO1Iq/iJHzEsBnMgg0ru9NEM0+6QtXs4nHUa7x3
l+WbW2qsng6v594w1cNX2oZQkx4z1u+oE8c2JlInvJm+tDXZbINOSmXB0M9uj3jV
aZHYiZuitwYku/TkR42y3EU=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:37 2026 by rpki-client