
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/GdQc4jp5PqvKMw3Dp2vhnm-e_FM.roa
File: GdQc4jp5PqvKMw3Dp2vhnm-e_FM.roa (raw, json)
Hash identifier: ACWcGaMcprXbQbNFx3EX34ONO0dfsKMNiouaEs82zMU=
Subject key identifier: 19:D4:1C:E2:3A:79:3E:AB:CA:33:0D:C3:A7:6B:E1:9E:6F:9E:FC:53
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 13FC
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GdQc4jp5PqvKMw3Dp2vhnm-e_FM.roa
Signing time: Tue 31 Mar 2026 07:56:40 +0000
ROA not before: Tue 31 Mar 2026 07:56:40 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.168.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5116 (0x13fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:56:40 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=19D41CE23A793EABCA330DC3A76BE19E6F9EFC53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9b:b9:d6:9b:bd:85:ae:4c:f7:01:3d:64:1e:
08:1f:98:c8:5b:d2:0a:bd:ca:87:47:56:a0:de:94:
f7:68:38:bf:cb:ac:d9:95:43:34:64:e3:e9:05:5e:
d9:0b:bd:0b:81:ea:2d:2f:15:e8:01:fa:4f:e6:d1:
c6:00:96:e4:71:3c:ee:92:3d:a3:cd:f9:c2:5b:0c:
69:1a:1e:41:d2:c7:f5:45:68:40:3a:ec:a6:76:b8:
95:fa:03:ee:fd:ce:31:cb:a7:3b:f3:60:eb:9c:c1:
e9:d4:e8:91:3b:d6:45:c4:ec:71:1b:2e:67:95:1e:
ad:41:26:39:fd:84:28:fb:5a:89:89:12:58:c0:55:
e9:cd:43:2d:92:7b:86:b5:e4:ab:59:25:bf:0a:06:
68:23:53:12:cb:da:c9:45:ff:3f:ab:70:57:12:b7:
30:d5:4d:e2:30:bd:98:f3:69:0b:f7:99:57:55:ba:
27:71:2f:7c:ad:00:60:7c:40:14:3a:83:ad:e8:47:
36:37:73:0b:fe:44:44:b1:ae:44:36:17:76:58:ea:
31:15:c8:7e:12:28:83:c4:de:d7:65:c5:6d:56:05:
6a:48:26:57:9c:e1:e3:9e:4c:16:34:a2:22:c4:04:
0b:66:a0:f3:70:0f:ae:40:d6:93:ef:c2:5d:de:d6:
4f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D4:1C:E2:3A:79:3E:AB:CA:33:0D:C3:A7:6B:E1:9E:6F:9E:FC:53
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GdQc4jp5PqvKMw3Dp2vhnm-e_FM.roa
sbgp-ipAddrBlock: critical
IPv4:
49.98.168.0/22
Signature Algorithm: sha256WithRSAEncryption
cc:89:d5:b1:3a:c4:7a:e5:15:5b:38:64:a8:7e:52:89:30:31:
28:72:00:c4:f0:0d:33:87:64:22:1a:9c:d8:8f:44:63:1c:35:
9a:16:36:a0:be:bd:5d:65:bb:ce:f2:35:d5:17:41:26:0d:ae:
b0:a9:da:2d:ef:bb:fb:e6:5f:b3:7a:60:a4:f5:49:7a:c5:f5:
40:41:1b:49:95:c3:fd:b8:95:fe:4d:6f:b6:70:0f:8e:53:8b:
f0:0d:c5:95:06:8c:8e:28:d9:6d:7d:61:a5:3d:c9:38:47:97:
44:5d:96:18:60:70:86:9e:2b:72:0e:be:36:ce:75:7a:d2:2e:
5b:9d:34:b5:19:f7:14:0d:1a:38:8b:a1:e8:95:84:6a:25:5f:
69:94:f5:f7:76:92:f3:f9:5f:c8:af:33:4e:ed:cf:60:14:70:
e1:27:36:ee:f7:25:98:78:b0:6d:b1:06:10:ba:13:ad:d5:36:
57:e6:6d:6c:39:e4:a3:29:c3:d7:c3:d4:57:e3:d4:1f:73:72:
f5:c5:f4:5e:44:1d:09:57:4c:3c:48:dc:15:04:98:0d:b5:3e:
2c:1f:15:e4:12:c3:1e:63:47:04:a1:d3:95:98:bc:16:eb:0c:
82:04:5e:e2:cf:29:ab:da:7e:05:31:29:45:75:52:92:c2:bb:
01:80:9b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:04 2026 by rpki-client