
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/FH1b5VpNOoIUJbrd3DWRZgOEddY.roa
File: FH1b5VpNOoIUJbrd3DWRZgOEddY.roa (raw, json)
Hash identifier: eZdKUsooqUQv02nkesfyCCLt8R2Pbw02/CPUKVSMxnM=
Subject key identifier: 14:7D:5B:E5:5A:4D:3A:82:14:25:BA:DD:DC:35:91:66:03:84:75:D6
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 138A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FH1b5VpNOoIUJbrd3DWRZgOEddY.roa
Signing time: Tue 31 Mar 2026 07:55:47 +0000
ROA not before: Tue 31 Mar 2026 07:55:47 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.97.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5002 (0x138a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:55:47 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=147D5BE55A4D3A821425BADDDC359166038475D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9a:79:4f:e9:16:ed:7f:17:6c:6e:08:22:fe:
5f:4b:8a:ae:f0:1c:ae:84:b8:e9:fb:54:6c:25:93:
4f:11:e4:00:0e:22:6b:ec:5b:5b:18:c4:43:e1:fb:
e2:76:6a:e3:c0:99:54:70:f3:d4:d6:43:4a:cd:2b:
a7:3a:cb:d3:72:3b:e1:b9:a9:1a:69:f8:bd:e8:29:
4b:d9:4a:5c:4e:77:5c:e6:a9:d9:13:ae:57:d4:bd:
68:55:40:40:e5:50:a5:c4:d6:3c:a9:25:e0:d6:b2:
f3:b0:ee:0e:bd:82:a7:7e:64:1c:09:9e:00:a3:ec:
dc:24:62:c1:a5:87:21:d7:34:a3:cd:b6:86:d2:ea:
08:db:11:ee:31:f6:d8:90:89:de:2f:66:7f:ed:25:
7c:35:14:3a:10:81:ca:ab:3a:9b:e9:91:ee:10:d4:
83:c3:c2:4d:38:24:31:52:9a:bf:f4:51:13:03:ed:
a4:6d:70:6c:6d:88:d8:f4:f5:f8:b2:6d:d3:3b:77:
61:13:ee:5e:a3:24:9a:21:7c:bf:28:f4:66:21:ce:
b1:4f:7d:e9:1e:b8:b1:7b:73:74:3d:9e:31:d7:90:
e3:08:c3:73:b1:d6:60:71:50:e2:b1:25:60:85:ac:
b2:6d:b5:c7:fa:79:a2:10:23:df:d2:f5:29:4c:9d:
1e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7D:5B:E5:5A:4D:3A:82:14:25:BA:DD:DC:35:91:66:03:84:75:D6
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FH1b5VpNOoIUJbrd3DWRZgOEddY.roa
sbgp-ipAddrBlock: critical
IPv4:
49.97.5.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:98:06:dc:43:70:32:a3:d5:05:28:3c:c1:a4:62:21:21:c2:
e9:8e:08:cb:a0:3f:08:d7:05:d6:01:89:e1:78:fa:20:97:4f:
f1:3b:2d:22:b3:0c:a5:09:98:3d:6e:03:02:62:4e:79:2f:7c:
70:7b:6a:3d:69:4a:bd:e9:40:97:21:be:a0:4e:15:33:40:bb:
78:36:16:c9:be:4f:db:49:08:69:47:c4:18:9a:4b:f2:4f:d9:
82:e4:6d:1d:09:72:f0:d8:54:b8:e2:ae:26:1b:ac:a2:3a:43:
b8:19:db:ae:06:c3:20:44:51:f9:fa:01:2a:da:c7:de:a3:fc:
cb:5c:4f:8a:cd:3e:47:b0:a3:8f:a7:2a:06:24:04:28:58:96:
55:f2:56:cb:ce:2a:d1:5c:42:8a:1d:91:2a:dd:87:7d:1b:b8:
bd:06:0a:0a:e9:f9:a5:02:da:fa:90:d4:dd:68:8f:59:4e:ba:
e5:a3:75:cc:5c:61:5f:f5:58:5b:13:05:58:d6:5b:f8:c4:aa:
60:8f:41:b0:0d:94:dc:01:c1:e3:ca:b9:a9:aa:2e:a6:23:46:
88:4d:c7:e5:55:f7:9f:80:f3:9e:57:ec:f4:d4:e3:53:e2:c9:
42:e8:f8:a2:2c:16:e6:d1:c6:54:82:1a:a2:15:83:82:03:eb:
a8:5b:73:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:23:25 2026 by rpki-client