
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/GOyftYWsBSfFUHLvwnftpfJBx7k.roa
File: GOyftYWsBSfFUHLvwnftpfJBx7k.roa (raw, json)
Hash identifier: nd4EKylf6p5vyEnCm/WZofcCFuKG3LJWgWgLo9qkK7o=
Subject key identifier: 18:EC:9F:B5:85:AC:05:27:C5:50:72:EF:C2:77:ED:A5:F2:41:C7:B9
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 17FF
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GOyftYWsBSfFUHLvwnftpfJBx7k.roa
Signing time: Tue 31 Mar 2026 08:04:56 +0000
ROA not before: Tue 31 Mar 2026 08:04:56 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.107.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6143 (0x17ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:04:56 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=18EC9FB585AC0527C55072EFC277EDA5F241C7B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c5:2c:e3:12:15:ab:92:fb:d7:39:51:33:26:
ee:5c:23:ee:9e:45:ba:e0:8a:38:69:05:00:60:15:
a5:1c:af:41:8c:b0:b4:61:32:70:f9:cf:08:ff:83:
c8:eb:ec:e0:81:7b:92:bd:9e:f5:3a:a9:8a:f8:17:
ed:6d:90:f4:04:3b:f4:de:20:35:3a:9f:8c:26:e1:
7c:22:88:f2:f9:fd:70:46:45:05:97:fc:54:ad:1e:
09:99:ea:bc:c8:c3:8b:d5:61:52:3b:c3:e1:d1:39:
7b:17:2e:3b:a6:91:78:2e:e6:c1:d9:be:e1:aa:19:
38:11:f3:7e:dd:fb:6f:33:31:4e:9a:b9:5c:98:0e:
9f:18:8d:96:2f:7c:7c:eb:c9:36:22:95:13:85:68:
ea:1b:42:11:49:76:80:92:93:0a:63:80:39:17:4a:
dc:fd:2e:7c:d4:8f:b0:36:2b:c1:ed:e6:70:8b:9d:
dd:fa:61:a6:26:18:a9:f0:4f:62:19:72:ee:30:a1:
8c:1c:35:5c:99:77:0b:18:3e:4a:3d:ac:66:3b:61:
7b:79:be:e0:96:ed:2a:59:5c:e0:b4:d2:fd:9f:6b:
47:53:eb:a9:e4:e1:ec:b4:d8:7e:3c:b6:e8:1a:7d:
f3:77:5a:af:a2:97:09:4b:fa:f8:f9:e6:3a:53:1c:
db:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:EC:9F:B5:85:AC:05:27:C5:50:72:EF:C2:77:ED:A5:F2:41:C7:B9
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GOyftYWsBSfFUHLvwnftpfJBx7k.roa
sbgp-ipAddrBlock: critical
IPv4:
49.107.128.0/19
Signature Algorithm: sha256WithRSAEncryption
80:31:9c:38:9e:c0:c6:c7:94:59:6f:d1:32:15:60:98:ac:c4:
d3:5b:00:9b:94:b0:e4:69:e4:0d:cc:8b:10:6e:cb:4d:8a:2d:
54:5b:bf:90:00:c8:80:01:16:61:24:20:9a:9b:50:22:b6:7b:
e5:7f:c8:0f:0f:7b:19:9b:96:4f:ee:3a:ff:85:10:12:28:5e:
ef:c2:fd:54:b5:5b:e5:cb:59:fd:1e:20:62:ee:1a:7f:3d:a0:
01:0f:1f:14:3e:b8:a6:a2:18:f1:13:4e:ff:36:7b:35:f3:5d:
e6:1c:b7:2a:3f:89:ae:d7:6d:bf:bd:35:e0:2e:cb:97:d5:6b:
9a:07:04:40:61:31:c5:fd:46:a8:dc:21:79:3f:5f:a3:bd:7a:
1c:d6:4e:7c:b5:fa:ce:d6:2f:df:5d:ac:e9:76:9d:72:83:f1:
9f:e8:33:87:96:01:c3:24:68:4d:50:07:2d:72:b3:b0:4e:29:
09:c1:05:ee:b8:3c:32:63:9e:1d:65:90:9e:97:33:b4:eb:6c:
17:5d:53:a8:26:4c:54:94:4b:de:38:83:d3:a2:c2:15:d3:fd:
55:d9:21:bc:0a:55:af:03:5d:65:e5:57:9c:5a:80:9f:0a:7e:
7e:83:42:b4:9b:f7:2e:7b:e4:7b:d5:78:84:f5:62:18:29:a2:
89:8d:28:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:42:53 2026 by rpki-client