
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/MRfU6agPy-yl2mlN0atuVfW0Zk8.roa
File: MRfU6agPy-yl2mlN0atuVfW0Zk8.roa (raw, json)
Hash identifier: WkJnuUwjNEm/UBVFIk+i8Mh2Q/DahS6crYOiHz15IEM=
Subject key identifier: 31:17:D4:E9:A8:0F:CB:EC:A5:DA:69:4D:D1:AB:6E:55:F5:B4:66:4F
Certificate issuer: /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial: 9A
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MRfU6agPy-yl2mlN0atuVfW0Zk8.roa
Signing time: Tue 31 Mar 2026 07:55:09 +0000
ROA not before: Tue 31 Mar 2026 07:55:09 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 146.99.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154 (0x9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Validity
Not Before: Mar 31 07:55:09 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=3117D4E9A80FCBECA5DA694DD1AB6E55F5B4664F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f6:49:4e:1a:87:7e:68:0d:85:28:b5:e8:45:
03:b2:b2:97:55:7f:66:07:83:6d:e8:ba:f2:ba:6e:
ad:84:1b:c7:25:e6:4e:bb:c9:4b:69:21:20:4e:93:
b0:cb:71:05:6f:ca:3a:ca:71:3d:9f:ad:26:c3:5b:
09:8c:88:e6:07:65:21:86:21:11:2a:c4:0c:f4:97:
d4:84:ae:fe:ba:5c:ed:14:69:16:6d:12:65:52:78:
4e:4f:de:be:4f:85:62:66:a5:a2:6e:be:95:16:c9:
9e:4e:dc:dd:b6:ac:e1:29:db:88:bb:49:d2:7e:8a:
ce:7e:c0:be:da:ff:da:da:bd:ae:68:7b:34:2c:ec:
82:75:70:83:ce:d3:3f:b8:25:1a:33:91:68:07:a7:
e3:ec:f9:b5:57:fb:a8:0f:01:f2:5d:a7:88:8e:ee:
12:89:73:12:5b:65:da:18:9a:b5:50:53:dc:d9:68:
5f:44:5a:5f:e6:9d:70:bf:b4:8e:31:05:92:ea:fe:
e5:be:dc:0e:62:d9:4d:d8:11:39:66:c1:f7:75:3c:
c3:99:a0:02:c1:4a:e4:c2:93:e0:52:f0:66:ef:32:
b4:7e:50:54:8e:0f:c7:d9:b5:ac:1c:52:79:8d:95:
21:ea:7b:7f:22:92:95:e3:f8:d5:ad:a6:f5:7c:a2:
36:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:17:D4:E9:A8:0F:CB:EC:A5:DA:69:4D:D1:AB:6E:55:F5:B4:66:4F
X509v3 Authority Key Identifier:
keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MRfU6agPy-yl2mlN0atuVfW0Zk8.roa
sbgp-ipAddrBlock: critical
IPv4:
146.99.0.0/16
Signature Algorithm: sha256WithRSAEncryption
14:c7:9e:fb:ab:76:de:d8:28:f8:0f:8b:25:ca:1b:4d:e3:fa:
8b:56:08:3f:15:0f:15:68:af:da:f6:7e:82:e9:6f:66:7d:cc:
4c:66:15:31:89:99:c1:ff:34:61:0c:bb:91:33:ea:3b:b3:8e:
f6:ed:3e:de:e7:85:cb:41:d0:f6:46:cf:92:9a:5a:c6:25:e8:
71:45:66:d3:ca:1b:47:53:ba:64:39:00:74:fa:b8:bc:e8:62:
8f:20:c6:8b:1b:2b:9b:ae:10:48:25:16:78:22:ba:a6:bf:d2:
b9:da:55:f6:54:6c:3d:fb:39:bc:af:27:82:dd:a9:70:33:29:
96:1a:6f:4e:44:c4:97:3e:43:69:6c:76:59:4b:9e:f1:d2:fb:
48:b3:cf:43:38:a8:c3:4e:07:2d:ed:76:e2:bf:02:f1:4b:3d:
71:5d:eb:39:25:2d:ff:ab:cb:ab:41:b4:dd:85:cd:2c:d1:6c:
ed:8c:da:05:fb:ed:7e:d9:6a:84:d7:e6:ed:8e:26:0e:72:07:
72:17:5b:83:c4:8b:a4:67:4b:98:e3:26:8a:b3:e6:00:9c:1e:
14:5a:b5:57:cf:d7:ed:2a:b3:3c:be:f1:2d:58:6d:ad:b1:49:
4d:09:f6:84:8f:65:3a:c2:62:07:b0:60:0f:f9:96:06:f3:61:
be:d6:bb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:23:39 2026 by rpki-client