
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/M3-z_0sTxgvV3Sm64tXgzdQNNvw.roa
File: M3-z_0sTxgvV3Sm64tXgzdQNNvw.roa (raw, json)
Hash identifier: bhNMxIoqTe+7mR50NEV9awNrDubjmusAKQ8RS5ocj2Q=
Subject key identifier: 33:7F:B3:FF:4B:13:C6:0B:D5:DD:29:BA:E2:D5:E0:CD:D4:0D:36:FC
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 139F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/M3-z_0sTxgvV3Sm64tXgzdQNNvw.roa
Signing time: Tue 31 Mar 2026 07:55:57 +0000
ROA not before: Tue 31 Mar 2026 07:55:57 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.96.248.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5023 (0x139f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:55:57 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=337FB3FF4B13C60BD5DD29BAE2D5E0CDD40D36FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:95:81:41:96:b1:5e:0d:d7:10:93:23:33:a9:
e2:d1:f7:c4:d1:04:1d:41:e4:b8:19:b2:34:a6:06:
bd:e2:90:01:fd:28:5a:63:c3:30:1b:d4:dd:58:a7:
62:b7:e6:30:25:4f:72:45:76:da:6e:aa:e7:9e:e5:
92:c5:ad:b0:0d:ff:21:1e:d3:b2:df:da:81:94:5f:
53:bf:7f:d7:85:85:90:bc:e0:c3:8c:6f:55:2f:5f:
a1:03:d1:db:62:01:3a:aa:b1:37:88:a0:79:bf:4c:
9b:e3:dd:f8:ef:af:57:3a:99:97:01:ba:d2:35:07:
77:b2:b7:e8:15:14:eb:79:1f:6f:63:e2:2c:71:df:
3e:70:f1:9a:ea:02:89:d2:55:b8:7c:16:91:c2:06:
1b:38:fd:e6:c8:47:35:a5:c8:27:bb:db:77:d6:54:
c9:08:f1:bb:25:49:5c:17:73:07:a1:08:7f:9c:ce:
27:79:28:ef:86:21:17:07:e7:75:a6:24:6c:d7:49:
8c:1c:c0:73:2c:96:4e:0f:ac:3f:38:0e:40:e8:cd:
e0:2e:e2:00:91:e9:2b:2b:28:2a:ed:34:f2:e8:6b:
b7:b7:01:de:7b:aa:47:15:b6:81:04:e3:e4:03:5a:
bb:19:fd:b5:5f:d3:e4:47:9e:11:ad:4b:8b:fc:3f:
4c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7F:B3:FF:4B:13:C6:0B:D5:DD:29:BA:E2:D5:E0:CD:D4:0D:36:FC
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/M3-z_0sTxgvV3Sm64tXgzdQNNvw.roa
sbgp-ipAddrBlock: critical
IPv4:
49.96.248.0/23
Signature Algorithm: sha256WithRSAEncryption
69:e3:70:db:c9:21:30:08:1d:88:a4:18:aa:42:5b:01:ea:02:
9c:c8:4b:01:f6:64:d8:10:49:94:72:41:db:7c:68:56:65:b6:
3c:95:53:08:2f:3b:35:97:40:eb:af:1c:08:83:ec:24:8c:d2:
31:34:15:39:f5:65:d7:f7:61:27:5c:e7:3a:83:ba:f3:8d:f6:
83:cd:dd:9b:6f:56:3d:68:23:40:4b:cc:82:b0:d8:f7:86:a4:
4c:7a:f0:eb:a9:32:e9:36:69:7e:e9:0a:28:d0:6d:78:e5:13:
d3:00:5f:08:ff:d1:72:a3:d8:e3:77:2b:cc:04:e4:e3:aa:f8:
67:3b:6d:19:b1:28:7a:f7:4c:bd:03:ee:08:21:32:90:a2:ba:
3c:10:2e:b6:61:31:37:58:2e:09:71:92:93:55:49:15:0a:a8:
c7:7f:53:78:79:6e:20:cc:b1:7a:57:55:6e:29:b9:3b:e9:bc:
bb:3d:a9:f2:c1:4f:27:8b:77:22:c6:71:de:25:73:28:e3:4f:
9b:9b:6d:1b:f3:c4:a8:2e:8c:35:0b:bb:d8:59:81:0c:e7:b7:
9e:c1:c0:68:c2:82:15:a0:cf:c2:12:38:38:64:87:b1:b8:a7:
c4:2e:4f:44:98:64:e4:5b:6d:0a:ff:6a:81:8c:02:e5:80:18:
43:46:c2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:03:26 2026 by rpki-client