
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ExpU0c-aLUFF4ZhMST77ki_MFew.roa
File: ExpU0c-aLUFF4ZhMST77ki_MFew.roa (raw, json)
Hash identifier: LMfeXEW1J7ZJtorfLPNP67tX78HCmuCALh3lAomQM9I=
Subject key identifier: 13:1A:54:D1:CF:9A:2D:41:45:E1:98:4C:49:3E:FB:92:2F:CC:15:EC
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 15DD
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ExpU0c-aLUFF4ZhMST77ki_MFew.roa
Signing time: Tue 31 Mar 2026 08:00:34 +0000
ROA not before: Tue 31 Mar 2026 08:00:34 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.96.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5597 (0x15dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:00:34 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=131A54D1CF9A2D4145E1984C493EFB922FCC15EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:50:90:ef:96:f5:61:e7:9a:ef:45:94:12:d9:
fb:83:a1:ee:54:84:30:7a:88:6e:ef:14:a9:df:46:
d6:bc:55:09:d6:eb:28:20:d0:9f:0a:f7:42:6c:8d:
b9:ca:3a:03:7e:59:c8:8b:ed:18:b6:4e:d1:ec:80:
9b:f1:4f:44:fa:44:56:4e:8f:e0:30:dd:5b:51:f6:
86:46:46:57:72:ff:39:86:3a:59:35:06:c0:ce:9a:
e3:1c:ba:66:33:2e:7f:77:89:06:29:4f:17:b8:57:
48:7b:aa:fd:23:2d:df:cc:2e:a4:6d:8e:b1:40:a3:
ee:7a:60:23:f3:51:9d:94:bc:2e:81:37:d2:7f:5e:
cc:b0:7d:31:07:db:59:14:29:82:3b:fd:24:00:ad:
37:c5:75:3c:18:fb:18:43:50:64:92:d9:18:ed:b7:
e2:4d:ba:8e:68:f2:f1:07:cd:16:7e:8c:41:b2:cd:
eb:9e:5f:25:db:54:fc:84:cd:3a:dd:09:b1:d2:63:
f9:9a:49:31:44:da:e4:50:ab:98:f5:af:dc:8d:ec:
13:51:a9:7d:2d:ba:63:f9:78:96:de:05:44:15:c4:
d3:aa:b8:8d:9f:45:ad:4c:9a:ca:aa:2a:d6:e0:26:
1d:ba:a5:cc:b3:21:bb:30:76:2d:63:a5:08:78:c4:
72:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1A:54:D1:CF:9A:2D:41:45:E1:98:4C:49:3E:FB:92:2F:CC:15:EC
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ExpU0c-aLUFF4ZhMST77ki_MFew.roa
sbgp-ipAddrBlock: critical
IPv4:
49.98.96.0/22
Signature Algorithm: sha256WithRSAEncryption
de:0f:61:cc:f1:e8:a1:36:1d:81:9a:29:90:19:02:74:9f:bf:
6a:06:6f:da:5e:85:88:dc:fe:fa:92:6c:15:2a:e5:d9:36:ac:
9d:78:b9:6c:a1:46:77:8a:17:59:e2:75:53:ae:43:55:dc:89:
e4:09:23:9e:c2:e6:0a:07:7a:7f:cb:dc:a4:55:d8:75:fd:55:
4f:63:77:69:c8:84:e3:32:a1:4c:0d:bf:b1:3c:75:9d:2d:e1:
8a:d2:71:7c:09:70:c3:94:12:fb:c7:49:98:e9:cc:17:81:24:
b9:40:27:38:5f:df:9f:eb:ac:95:28:fd:1a:ea:14:9d:ff:51:
60:df:7e:f2:fa:1f:2e:f0:8c:f7:64:4f:5d:ee:d5:d9:8d:a2:
97:92:67:37:3d:d6:fc:1a:44:ed:d3:33:bf:af:dd:1e:e0:7b:
54:68:e5:92:a9:75:aa:19:c7:a7:06:50:12:9e:a6:62:f5:0d:
fe:a2:8d:82:bb:36:15:ee:bd:ad:9c:9f:36:a1:fa:b7:59:6b:
56:83:38:ab:24:01:e6:74:17:e6:e2:e8:bf:6a:13:fb:d3:23:
3c:a7:97:cb:e7:25:ad:0c:8f:4e:6e:8a:a9:2c:25:07:cc:08:
d8:4b:17:cb:ee:5d:0e:19:79:fd:17:6b:89:cc:45:2d:f2:57:
6e:08:4b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:05 2026 by rpki-client