
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Hnx_ZxCqZOggDAd3yOtQQw59WBs.roa
File: Hnx_ZxCqZOggDAd3yOtQQw59WBs.roa (raw, json)
Hash identifier: B1LCRWdrpVxyTchPWklwSK0kKjtvAd6AwFGJ1G/qbzo=
Subject key identifier: 1E:7C:7F:67:10:AA:64:E8:20:0C:07:77:C8:EB:50:43:0E:7D:58:1B
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 175F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Hnx_ZxCqZOggDAd3yOtQQw59WBs.roa
Signing time: Tue 31 Mar 2026 08:03:41 +0000
ROA not before: Tue 31 Mar 2026 08:03:41 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.192.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5983 (0x175f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:03:41 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=1E7C7F6710AA64E8200C0777C8EB50430E7D581B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5f:4d:4d:0b:e6:d3:c6:d7:0a:b9:37:b8:4a:
8a:94:85:cb:af:e5:63:5f:5b:7d:45:bb:09:1d:e4:
c6:7e:06:b9:fd:ab:bf:f7:39:cc:88:f0:e6:11:7e:
5f:3a:81:06:f5:e9:03:16:c6:31:81:44:3b:da:e3:
ff:72:f0:dc:e8:fc:5d:48:96:c6:43:7a:af:fa:41:
0f:58:37:c3:af:9a:8a:95:3d:64:b9:78:ac:da:53:
0d:ed:18:96:8b:bd:00:23:d2:bc:4c:a8:ed:d4:a9:
0b:30:eb:13:97:c5:17:d9:67:f0:62:02:a0:35:f2:
e5:d1:99:9c:62:20:0f:7a:b6:49:8d:1e:b2:8c:94:
0a:75:b6:30:bd:d0:17:99:e8:2a:98:83:9f:9e:05:
bb:7e:98:c2:94:51:95:64:ae:25:b4:0a:88:d4:76:
6a:f9:23:07:da:1a:e4:c3:28:69:7d:1e:07:36:b4:
ff:71:5a:b0:91:f9:80:00:43:d8:17:d3:2b:bf:92:
7e:b7:a6:06:51:44:f3:e0:2c:4b:0e:71:8f:21:3e:
33:85:d9:4b:ef:b3:a7:8f:a0:fe:ca:96:b3:ed:be:
fd:92:1b:67:f6:5d:ec:59:a1:43:b4:e2:33:16:44:
fb:2f:14:0d:93:5b:d3:b0:c3:26:f9:39:dd:df:f2:
16:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7C:7F:67:10:AA:64:E8:20:0C:07:77:C8:EB:50:43:0E:7D:58:1B
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Hnx_ZxCqZOggDAd3yOtQQw59WBs.roa
sbgp-ipAddrBlock: critical
IPv4:
49.106.192.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:2c:41:25:b1:be:f3:69:62:8e:38:61:62:5b:8e:04:b1:cd:
fa:4c:5c:4c:e2:36:d0:f6:be:54:0f:39:6d:31:1a:e6:7d:df:
0f:e1:b6:6a:ae:7a:77:c8:16:d3:3c:a8:b3:21:90:a5:96:4a:
2b:68:24:a7:e0:d6:11:3b:8d:23:5e:29:40:cb:e7:5a:17:0e:
0f:4c:b5:1b:9a:a1:98:d6:4e:29:a6:cc:dd:f1:3c:f5:c6:f6:
44:41:77:f9:8a:33:47:bd:e3:e4:92:8d:c3:4a:46:28:f2:bb:
67:41:ef:e6:bf:4a:51:f0:16:01:a3:96:d5:c4:73:02:54:95:
29:63:31:a6:f7:8a:b7:f2:b5:36:f6:56:37:44:a7:75:4f:da:
57:82:1b:69:9a:62:f5:c7:8c:70:8f:a1:d6:d5:bf:35:31:e3:
97:a7:2f:5d:0b:f5:fa:76:94:f7:cf:46:65:41:bb:30:0b:b9:
e0:72:a1:43:e5:a6:90:f1:f4:fd:ea:d4:55:b0:74:f9:16:e9:
4e:c6:be:14:f1:24:df:be:d6:8c:80:86:11:4f:77:74:f1:67:
1c:6a:78:31:dd:8b:f1:96:bf:85:ec:51:d8:97:39:71:7c:44:
d3:ff:66:e7:db:49:b8:c2:b3:09:9c:a2:2c:be:d9:b0:38:d1:
13:2c:55:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:48:11 2026 by rpki-client