
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/K2vGL5uf9o5TVux-VvOA9z4licw.roa
File: K2vGL5uf9o5TVux-VvOA9z4licw.roa (raw, json)
Hash identifier: FMwLRsGBKIaOHOUvKmPrpv1k1yC+ecn9LjAiW38B6xY=
Subject key identifier: 2B:6B:C6:2F:9B:9F:F6:8E:53:56:EC:7E:56:F3:80:F7:3E:25:89:CC
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1596
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/K2vGL5uf9o5TVux-VvOA9z4licw.roa
Signing time: Tue 31 Mar 2026 07:59:56 +0000
ROA not before: Tue 31 Mar 2026 07:59:56 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.102.156.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5526 (0x1596)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:59:56 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=2B6BC62F9B9FF68E5356EC7E56F380F73E2589CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ea:8f:12:a3:88:32:11:35:e8:bd:4a:89:4c:
56:f2:58:42:8f:4c:48:58:04:6f:29:a6:7d:47:86:
94:3d:5c:12:52:61:90:b8:2f:e2:33:c0:a4:8e:50:
f5:2a:05:d9:5e:38:47:05:28:b2:cb:7e:71:e1:73:
2e:9c:d6:45:da:30:ad:6e:b0:3a:57:d5:17:05:3f:
b9:d6:e3:00:27:b2:20:d5:5c:20:4f:b9:c0:76:fd:
73:e0:0b:c6:29:f8:f2:7f:2e:bf:53:05:12:f7:a2:
e5:c9:dd:5b:28:e1:bf:2d:bb:20:45:97:19:73:85:
92:ef:4d:d5:08:73:c2:f8:66:c9:22:7f:2d:d8:f9:
30:b3:18:3d:04:87:4e:d5:f1:65:14:0a:77:f6:87:
85:67:b0:94:60:d5:12:55:e3:fc:1c:7c:e5:38:da:
1a:b3:d8:d6:39:c1:28:71:f7:aa:aa:bb:fb:7f:41:
ba:b3:6d:09:a3:4f:b2:82:45:c4:43:ca:4c:d1:33:
46:2d:65:c0:71:43:88:96:61:76:eb:4d:b6:e3:d5:
32:5a:e6:09:85:11:86:80:e1:37:c3:56:64:fd:3e:
a9:d1:56:f3:c1:ff:2e:b3:68:bc:c8:ff:05:84:63:
6b:63:a3:c0:69:fb:b8:3b:a9:73:04:39:46:47:51:
79:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6B:C6:2F:9B:9F:F6:8E:53:56:EC:7E:56:F3:80:F7:3E:25:89:CC
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/K2vGL5uf9o5TVux-VvOA9z4licw.roa
sbgp-ipAddrBlock: critical
IPv4:
49.102.156.0/23
Signature Algorithm: sha256WithRSAEncryption
ce:89:ee:91:4c:24:0b:6f:b2:1b:13:0e:5f:00:fa:0d:eb:5b:
93:d8:e8:88:e4:36:9a:94:c9:fa:f5:01:15:f3:1e:fa:c8:a1:
74:ed:37:31:d1:69:cf:33:46:b3:03:b0:be:3a:68:33:82:41:
0b:bc:f6:51:7e:4b:28:4c:c3:35:88:21:8b:c2:1c:bf:e1:08:
c2:46:e0:10:10:19:75:0f:6f:67:8a:3d:85:9d:2b:da:88:84:
4c:06:da:df:46:eb:b6:33:98:e7:54:94:14:78:db:ea:fa:97:
4a:32:81:02:65:25:2e:be:84:1d:73:b5:66:88:64:c3:1d:b3:
75:bd:1d:92:c4:5c:00:e9:62:38:77:64:92:9a:44:61:c4:aa:
81:3e:d2:67:2c:48:65:2b:c6:f2:cc:d9:1a:5f:ec:b8:86:1c:
e2:52:aa:8f:06:b9:00:fe:de:05:f0:13:d3:98:dd:6b:5d:21:
cb:68:b6:8c:c4:70:c7:14:9d:c8:06:fd:96:13:01:79:90:c3:
06:6f:dc:c1:8e:ba:89:42:da:01:96:83:7e:0c:9b:2c:af:b4:
8c:fe:48:e6:9f:47:dd:0b:f0:06:2c:0c:e8:fd:0d:cd:a9:ba:
b9:0c:c2:10:99:2b:f0:ad:37:37:6a:37:d0:7f:23:38:90:1d:
93:00:31:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:32 2026 by rpki-client