
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/N63L2ehhiSNszp8po_r31WmyJrs.roa
File: N63L2ehhiSNszp8po_r31WmyJrs.roa (raw, json)
Hash identifier: ESJTH7zq+D0PHIyQpzDcrQE4whtU0loPHV/HobKIhgg=
Subject key identifier: 37:AD:CB:D9:E8:61:89:23:6C:CE:9F:29:A3:FA:F7:D5:69:B2:26:BB
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 185D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/N63L2ehhiSNszp8po_r31WmyJrs.roa
Signing time: Tue 31 Mar 2026 08:05:51 +0000
ROA not before: Tue 31 Mar 2026 08:05:51 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.96.136.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6237 (0x185d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:05:51 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=37ADCBD9E86189236CCE9F29A3FAF7D569B226BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3a:dd:fe:92:21:cb:50:dc:70:3d:d3:fd:b7:
bd:4f:23:69:48:91:61:23:90:3a:e4:c2:11:0b:7a:
4e:6b:5b:00:aa:e9:fe:ac:0e:ed:52:4f:fe:f3:96:
cc:97:33:f7:4c:52:fa:67:6e:47:0e:d7:b5:0c:d7:
50:9a:46:ba:d8:ea:8a:ca:19:7d:e1:6d:56:0a:13:
8a:80:37:8e:6c:5f:9a:6b:36:1a:3c:71:91:45:a1:
c1:23:32:e9:b0:22:e8:ff:34:39:f9:39:78:3f:4c:
f1:09:fa:d4:64:36:43:2f:61:8c:c0:a3:18:39:31:
b7:b4:70:90:18:0e:c7:fa:4c:88:83:6d:ee:69:0e:
6b:dd:1f:5f:33:99:f4:af:7b:68:fc:e0:54:3e:d9:
c1:6e:8e:e6:b1:ff:70:ff:47:6c:c6:fe:9c:a4:24:
09:30:6e:22:67:7d:e8:7c:fb:7b:67:24:60:35:1c:
f7:fb:f2:da:7a:cf:3c:f6:9a:90:2d:83:27:8f:7c:
9c:d5:fa:7d:5c:7b:69:8f:9e:16:52:14:14:d0:b2:
40:22:5f:e8:d9:17:b1:11:bb:9f:31:c5:d9:d9:48:
34:31:7a:ce:a0:47:3e:ad:fc:30:ed:e2:8b:e1:17:
65:78:60:ac:d3:bf:ac:ac:7e:63:81:cb:8c:69:59:
b8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AD:CB:D9:E8:61:89:23:6C:CE:9F:29:A3:FA:F7:D5:69:B2:26:BB
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/N63L2ehhiSNszp8po_r31WmyJrs.roa
sbgp-ipAddrBlock: critical
IPv4:
49.96.136.0/21
Signature Algorithm: sha256WithRSAEncryption
42:16:f0:0c:45:a7:1a:e3:14:35:6b:73:2b:f9:e2:82:0b:16:
0f:8f:12:a2:0b:19:00:39:da:45:34:51:bd:cc:7c:79:50:62:
48:dc:b0:fe:d8:01:85:a3:60:77:31:03:3b:61:b8:9e:eb:95:
5f:d8:ec:08:2d:b1:4b:e1:15:1b:1a:f7:60:fb:89:f8:f6:33:
fe:68:90:22:d1:72:05:24:47:74:de:95:4a:5c:ae:b9:0d:a9:
2b:b9:5b:ca:f0:e4:fb:94:9e:a1:c6:cc:ac:0f:78:13:cf:1e:
28:cb:0a:9e:d2:0d:bf:05:f1:d8:6c:25:1b:1f:60:1b:29:3f:
49:02:ab:44:03:99:13:cb:cb:46:0f:d6:4b:9d:02:2e:ea:12:
80:27:78:97:04:d0:a9:ac:02:79:cc:4b:51:92:b7:59:7c:39:
30:ab:49:b6:db:cf:2d:4d:a9:d5:83:9b:0d:7a:78:2a:be:e5:
85:e2:91:ec:e5:7c:a4:7f:41:54:6a:1e:f7:a9:0f:b4:30:72:
b0:b0:b4:19:44:40:73:c5:03:2a:ae:f2:8a:1f:81:e1:06:66:
c9:11:0b:a8:f3:5b:96:2d:c6:a8:9f:c8:d9:59:b3:cd:be:05:
bb:b2:47:0d:1f:39:42:61:83:7a:2f:43:4c:b1:f5:cb:f7:e5:
f5:62:ce:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:41 2026 by rpki-client