
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/NwT5IPMR7ubpe0-fCpcAsJJgCGU.roa
File: NwT5IPMR7ubpe0-fCpcAsJJgCGU.roa (raw, json)
Hash identifier: MYzONTrlov/wo1cVMicvsfBqWajs9Uq6EylEXtwZ56M=
Subject key identifier: 37:04:F9:20:F3:11:EE:E6:E9:7B:4F:9F:0A:97:00:B0:92:60:08:65
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1399
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NwT5IPMR7ubpe0-fCpcAsJJgCGU.roa
Signing time: Tue 31 Mar 2026 07:55:55 +0000
ROA not before: Tue 31 Mar 2026 07:55:55 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.97.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5017 (0x1399)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:55:55 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=3704F920F311EEE6E97B4F9F0A9700B092600865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fd:43:0a:41:ba:85:e4:c6:96:de:c9:83:ce:
82:3b:46:77:9a:ba:4b:b0:9b:48:a2:aa:45:86:24:
d8:38:24:94:a6:2b:97:92:07:fb:3d:7d:f8:f2:ef:
b3:49:24:c4:81:fe:6d:5b:08:a4:35:ae:ec:d4:98:
68:50:2e:93:f4:e2:36:a0:bb:f1:f1:76:0d:51:fc:
26:8c:0b:db:e1:97:5b:82:da:ca:a6:70:85:33:e0:
33:41:90:ff:69:a2:b3:8e:51:bb:f4:1b:28:13:8a:
f0:42:68:31:72:3b:75:3a:69:f8:75:49:a7:83:e5:
4a:b6:7a:22:38:ba:04:c9:1d:61:fa:c5:bd:e2:57:
4d:f8:84:b6:55:a9:01:62:ae:84:f7:1f:75:bd:3f:
22:89:f6:92:a5:08:ea:01:51:9f:e3:45:59:d6:83:
b1:77:4c:e2:f4:c4:ee:ee:fd:eb:c1:67:29:16:39:
6b:4f:ba:3d:9f:5f:bb:a7:cc:4a:9c:96:ae:1e:5c:
07:1d:44:7a:e7:7b:cb:cf:72:71:f8:bb:c8:31:d7:
f7:de:00:b7:af:15:8a:2a:1d:c4:10:3a:f4:09:19:
ae:fe:5e:e8:c3:db:7c:95:6c:a9:2a:9e:58:b3:44:
c9:55:1b:f7:59:cc:70:f1:0a:05:55:ca:21:98:c3:
9c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:04:F9:20:F3:11:EE:E6:E9:7B:4F:9F:0A:97:00:B0:92:60:08:65
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NwT5IPMR7ubpe0-fCpcAsJJgCGU.roa
sbgp-ipAddrBlock: critical
IPv4:
49.97.104.0/24
Signature Algorithm: sha256WithRSAEncryption
53:0f:49:7e:30:2a:cd:a9:fd:c6:23:68:59:26:0c:02:cf:31:
71:cc:f7:b4:ee:47:28:4e:f3:26:c5:16:99:9b:36:5c:85:89:
a1:2e:af:71:fd:59:6f:a7:ae:b2:a3:c7:9a:1e:14:fe:90:06:
98:ba:bf:43:79:42:b8:35:72:1e:c0:2a:4e:2e:e5:a4:d9:3d:
e5:b2:74:13:10:b4:33:37:f7:d0:14:02:3c:50:2c:f6:1d:92:
eb:08:ff:ad:7e:49:27:f8:c9:a4:3f:36:37:9b:a3:d5:45:58:
12:16:43:ae:f3:c2:a3:06:bc:a6:7f:13:fa:ef:e8:ba:bc:dd:
db:88:27:86:8e:2f:ff:71:63:21:ec:c9:ec:91:31:31:55:a0:
cf:ad:31:f2:d1:cf:b4:3a:7d:fc:d6:bf:f6:03:da:b2:14:2e:
0f:df:3b:5e:3f:08:bb:b8:49:e5:df:65:00:08:77:47:26:79:
11:2e:ce:76:c0:90:4a:6b:54:c2:b8:1a:e0:2b:98:cb:7e:6b:
73:82:23:9b:43:bc:b8:66:ba:a5:7d:42:75:e0:d0:f6:b2:f6:
57:32:98:33:f9:83:0c:ad:ea:cd:2c:c1:9d:cd:85:f4:c0:e0:
cb:f6:9b:67:3a:7b:0c:a7:11:80:f5:a3:1f:fb:72:05:70:a8:
62:45:a0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:13 2026 by rpki-client