
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/I71hJlG_AbTJOQCy1OElYbE1FC0.roa
File: I71hJlG_AbTJOQCy1OElYbE1FC0.roa (raw, json)
Hash identifier: DsEIGwtD9ZJlEhHm7TYsrsnIFgjl5D6soju5DbYVoCA=
Subject key identifier: 23:BD:61:26:51:BF:01:B4:C9:39:00:B2:D4:E1:25:61:B1:35:14:2D
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 16BF
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/I71hJlG_AbTJOQCy1OElYbE1FC0.roa
Signing time: Tue 31 Mar 2026 08:02:26 +0000
ROA not before: Tue 31 Mar 2026 08:02:26 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.103.20.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5823 (0x16bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:02:26 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=23BD612651BF01B4C93900B2D4E12561B135142D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f9:b5:0e:8b:a1:f3:f3:22:29:24:73:a4:67:
11:5a:76:d7:db:2f:2e:ac:d4:45:c7:a2:9b:c4:82:
20:cb:eb:60:79:e0:de:02:37:04:d4:5d:52:06:fa:
91:da:ec:fa:55:d9:0a:ac:76:9e:87:ac:ff:1e:14:
8e:a7:82:7a:76:a6:75:f9:ad:be:95:15:0c:80:87:
ec:d4:e3:40:c8:a9:ba:1d:0b:d0:de:e5:f0:57:e5:
f8:b0:d9:3d:72:2d:1c:ef:c4:89:35:80:ee:a5:fc:
2b:b8:3e:58:5d:15:2b:77:25:f2:5a:6c:fd:77:a9:
ee:49:36:5e:5f:25:d3:e5:a7:ee:e6:cd:e2:54:01:
bb:56:e0:b2:f9:73:6b:de:e2:42:88:3a:0c:b3:bb:
32:07:34:d7:61:57:99:b7:45:33:ff:d3:96:d3:a4:
c1:e9:f1:00:38:07:e9:1c:16:5a:7f:d2:f5:ce:ce:
f9:7f:83:e1:fe:75:1f:5c:3a:75:50:01:e3:f9:1e:
52:f9:c3:98:a9:24:6c:ac:b0:01:0d:43:e7:80:ee:
b8:da:3f:43:91:e9:80:f8:4b:fc:22:be:13:0d:06:
0f:99:bb:7a:6d:dc:25:b1:d5:dc:f0:61:66:95:03:
24:5a:ea:95:89:c8:ea:8d:4e:58:a5:b2:44:af:46:
a2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BD:61:26:51:BF:01:B4:C9:39:00:B2:D4:E1:25:61:B1:35:14:2D
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/I71hJlG_AbTJOQCy1OElYbE1FC0.roa
sbgp-ipAddrBlock: critical
IPv4:
49.103.20.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:ed:5d:d0:71:9a:c8:24:b9:69:12:f4:43:19:37:ac:44:2d:
f4:74:b7:75:5e:55:d4:11:50:0f:10:32:e4:46:17:7e:5a:84:
e2:ca:ca:22:dd:c5:42:3a:8d:08:5e:0f:bc:6e:10:dc:04:9c:
d7:52:49:27:4e:0b:27:46:cd:19:36:47:f8:00:01:4d:6a:22:
9d:2e:ba:8e:42:85:2b:33:f3:8a:75:3c:b1:50:7a:1b:43:fb:
3b:3c:15:4e:f4:95:ca:96:5a:18:1f:61:9c:c2:5f:4b:42:fd:
42:2d:58:53:71:e0:9f:9a:fa:33:d4:9f:9a:b9:8e:2a:50:9b:
ad:ff:7b:4d:86:22:2b:8f:85:2c:50:45:31:33:c1:11:d7:5a:
63:41:a2:b5:35:80:26:77:0e:03:81:75:c1:04:22:cf:43:ff:
e6:ce:04:6a:77:a4:9a:01:20:ab:9b:3b:af:be:ba:37:c9:96:
8e:4d:97:07:5c:d2:ed:e4:fc:0d:52:04:ab:09:5d:a6:59:00:
f0:39:35:ff:0a:f4:09:df:3e:e9:b2:08:b6:68:56:81:97:5a:
f5:8b:d8:e7:d9:ce:b0:51:c3:b5:2e:5d:cb:c9:c7:6e:53:20:
8f:d2:6f:7d:0c:fd:2e:b2:ef:0b:bc:aa:60:9a:a7:61:7a:79:
75:de:03:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:33 2026 by rpki-client