
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IYs9Dd-GnJXR8zU2A91hxAreS2w.roa
File: IYs9Dd-GnJXR8zU2A91hxAreS2w.roa (raw, json)
Hash identifier: S23gRui9jYAMYQh9IbCh6DJBBOLvjyocPm0BcqWY9Ow=
Subject key identifier: 21:8B:3D:0D:DF:86:9C:95:D1:F3:35:36:03:DD:61:C4:0A:DE:4B:6C
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 183E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IYs9Dd-GnJXR8zU2A91hxAreS2w.roa
Signing time: Tue 31 Mar 2026 08:05:34 +0000
ROA not before: Tue 31 Mar 2026 08:05:34 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.109.68.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6206 (0x183e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:05:34 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=218B3D0DDF869C95D1F3353603DD61C40ADE4B6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d1:0f:ca:78:24:92:73:24:55:13:09:10:78:
b7:be:19:27:26:c5:60:38:2f:53:53:1a:0f:0c:a6:
4a:65:b0:d8:26:2f:8f:18:e2:f0:05:a8:41:2e:95:
6a:c0:2a:76:5b:21:1a:8e:35:39:f2:a4:fa:13:49:
81:a0:86:0b:2e:ce:12:dc:61:4e:a8:f7:f8:1f:a8:
41:76:28:0d:7f:69:69:dc:5c:24:6a:5d:9e:2c:5a:
74:28:d7:56:c7:56:96:12:60:f8:35:5b:e3:dd:ce:
d1:a3:bf:75:49:26:8d:a4:84:58:e7:93:83:62:0f:
55:49:97:38:df:bc:53:ef:1d:0c:e5:b4:e9:b8:0f:
a2:b1:68:d6:f1:22:21:2c:1e:d2:9e:0a:c0:16:e5:
55:54:97:b5:40:09:32:39:3e:ca:a2:16:39:97:bb:
1e:c6:9c:c1:24:46:20:74:97:4f:4e:b0:8e:a5:fc:
f5:63:0c:7a:81:46:33:13:0d:fd:78:b8:59:e1:2f:
46:df:30:bc:d6:c1:ab:dc:dc:c3:41:3b:c6:0d:de:
30:1f:22:94:88:f2:5d:1f:8d:a9:0f:e3:aa:22:d1:
d8:75:d1:d3:15:05:bd:b8:d6:97:91:ef:84:65:de:
06:30:29:dd:c3:c2:18:d9:52:70:10:1c:e0:17:df:
86:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8B:3D:0D:DF:86:9C:95:D1:F3:35:36:03:DD:61:C4:0A:DE:4B:6C
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IYs9Dd-GnJXR8zU2A91hxAreS2w.roa
sbgp-ipAddrBlock: critical
IPv4:
49.109.68.0/22
Signature Algorithm: sha256WithRSAEncryption
39:8c:73:46:09:4b:02:f4:7e:e2:eb:25:24:d9:41:e2:9a:10:
78:c2:45:cf:74:be:1d:5a:60:2f:c4:d3:39:f0:bf:62:52:3b:
21:c4:b8:ae:f0:74:45:42:cb:be:0e:eb:c1:79:07:e1:88:19:
85:4d:14:6c:c0:3b:d9:e1:fe:ab:dc:18:06:bf:eb:63:3e:7a:
36:c3:63:87:43:ab:ec:0c:81:cb:1b:9e:a4:65:9c:2e:36:60:
20:75:a0:df:34:88:a1:d3:19:3f:e9:f3:8b:08:24:0a:57:d5:
14:56:43:ac:9b:d2:2e:8a:20:2e:47:1c:1c:a2:b3:36:f4:ba:
c8:90:da:e7:86:0b:b5:da:41:ac:97:0a:85:da:40:06:3d:49:
ad:3e:3e:4d:b5:3c:c2:80:f0:4f:78:21:6a:98:f8:7d:33:a5:
fd:e5:bd:84:e9:3f:a5:90:1d:b4:02:22:b9:56:95:bf:49:4e:
d6:71:b1:81:fa:39:8c:c2:39:17:30:03:6d:16:49:93:89:37:
d9:22:0b:37:33:37:5c:82:ea:b6:84:86:ea:ae:37:b0:e1:a5:
6f:35:c0:ac:d7:04:3c:d7:9a:c0:6c:f6:76:99:7f:c5:87:5c:
6b:ea:37:d8:02:46:91:64:d3:fd:32:60:f3:bf:2d:bd:b9:5c:
c8:38:c5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:27 2026 by rpki-client