
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/GxfMD8bFJX_W397DEJIzx1Aw__w.roa
File: GxfMD8bFJX_W397DEJIzx1Aw__w.roa (raw, json)
Hash identifier: Q173NQ2aEcAqqkchhTd3IMMZd7pdTlw7wLFombG8ZwI=
Subject key identifier: 1B:17:CC:0F:C6:C5:25:7F:D6:DF:DE:C3:10:92:33:C7:50:30:FF:FC
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1688
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GxfMD8bFJX_W397DEJIzx1Aw__w.roa
Signing time: Tue 31 Mar 2026 08:01:58 +0000
ROA not before: Tue 31 Mar 2026 08:01:58 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.104.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5768 (0x1688)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:01:58 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=1B17CC0FC6C5257FD6DFDEC3109233C75030FFFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1b:35:f7:7c:3e:22:45:8d:e9:e4:64:a9:c9:
c9:9b:cb:26:df:70:a9:5e:50:47:af:73:fe:11:a2:
8b:41:6a:ab:38:7d:17:d8:e6:df:ca:f5:d5:69:0c:
f0:8f:82:cd:db:54:e2:2d:ad:5c:45:57:e3:3e:bf:
90:76:b9:74:7b:88:7c:08:2b:30:8c:f5:c0:e7:f0:
25:3a:ce:07:56:d6:76:64:2d:ea:27:f2:ef:ef:b0:
94:41:b0:19:57:2b:d0:f9:8d:7a:e5:97:9a:be:12:
12:ee:5a:c0:9c:fc:10:ab:34:d4:fc:ea:60:81:28:
c7:2a:fd:67:03:f2:46:30:1c:0d:84:ea:b1:f8:fd:
be:4b:c3:2e:c8:1f:4a:de:13:23:a1:07:40:aa:f5:
a0:17:94:d4:61:c9:fa:da:2e:b2:2c:88:0a:7f:62:
92:bb:3b:14:fc:6f:2c:92:bf:32:3f:19:b0:06:78:
38:21:58:05:ab:21:42:cb:d9:49:7a:e8:ae:a0:cc:
53:95:ad:3b:d2:cb:96:44:5a:0e:71:00:e1:a4:63:
a8:b3:be:02:0d:37:68:2d:ea:9d:ac:99:94:ef:10:
a1:ce:a5:e3:1b:9f:2b:a6:2f:41:7d:cc:8f:83:f5:
b6:d7:bc:1d:7e:8d:60:66:0c:cc:91:08:30:38:3c:
55:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:17:CC:0F:C6:C5:25:7F:D6:DF:DE:C3:10:92:33:C7:50:30:FF:FC
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GxfMD8bFJX_W397DEJIzx1Aw__w.roa
sbgp-ipAddrBlock: critical
IPv4:
49.104.128.0/18
Signature Algorithm: sha256WithRSAEncryption
c8:a4:e6:44:c4:9c:93:29:e2:53:92:49:66:55:6c:65:1d:b1:
24:34:09:a3:1d:33:e5:fa:1d:88:cd:ba:cf:1a:5d:50:d0:05:
cc:06:69:1c:c0:d5:3e:84:30:8e:5f:42:ed:96:62:2d:4d:1b:
75:e6:b9:a0:80:e0:46:41:cd:4f:f4:58:b3:ef:c7:5c:7f:df:
74:9b:6c:bd:8c:71:a9:98:b7:91:54:79:71:56:7f:fa:38:7a:
cf:7e:9e:5e:fc:ca:01:cd:1f:8a:8d:a7:82:3f:21:39:25:10:
62:ff:0a:66:0f:f6:d3:32:ba:9c:ba:4e:b4:84:7d:9a:ad:0f:
3d:6d:c0:ef:f7:16:93:07:21:59:b6:ef:bc:df:38:a2:62:b3:
61:64:6a:cf:9d:9a:76:66:b9:82:a1:98:51:63:ac:d1:a9:4f:
dd:69:af:3c:59:b4:79:be:98:58:f2:54:7e:f2:bf:0d:3d:c1:
6c:20:71:ec:60:c5:f2:b5:2f:f1:94:df:98:aa:d1:5e:71:4b:
36:ee:0c:68:f4:84:0a:66:a2:78:87:53:46:56:1e:de:91:36:
2b:e7:39:2b:e9:cb:9f:dc:11:2f:47:76:76:44:64:de:6b:ed:
09:97:49:c3:5f:6e:b5:78:fd:aa:5d:06:0b:31:f9:f8:4c:43:
25:ea:d9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:27 2026 by rpki-client