
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/QB8hkTrKBDeRJgVRBvbMAKmuriM.roa
File: QB8hkTrKBDeRJgVRBvbMAKmuriM.roa (raw, json)
Hash identifier: 9ZRoaURaecrMbFdwmzZCdvWThVhahayo0GxUXUjQofM=
Subject key identifier: 40:1F:21:91:3A:CA:04:37:91:26:05:51:06:F6:CC:00:A9:AE:AE:23
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1748
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QB8hkTrKBDeRJgVRBvbMAKmuriM.roa
Signing time: Tue 31 Mar 2026 08:03:30 +0000
ROA not before: Tue 31 Mar 2026 08:03:30 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.105.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5960 (0x1748)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:03:30 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=401F21913ACA04379126055106F6CC00A9AEAE23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a6:aa:69:12:9c:2c:67:a3:67:a4:1c:b4:57:
76:6f:be:3b:0e:b2:8a:31:94:3b:d4:98:99:e4:23:
db:e6:e3:dd:d4:75:63:15:08:f8:65:f9:ac:e6:4d:
b3:7d:8e:46:a6:7d:2c:9d:17:82:5c:e1:a5:f0:1f:
29:88:5a:d0:d7:4f:8a:70:89:a1:74:40:a9:9b:6d:
cd:be:6a:86:0d:e5:57:aa:26:16:30:c1:fc:9a:24:
74:05:c8:83:27:41:4c:28:b3:69:95:13:86:d8:46:
cf:2a:95:4e:19:d0:66:f9:d1:f7:fb:12:bf:08:e7:
1e:f9:06:aa:e5:62:0e:0f:0d:31:04:27:b8:f7:e4:
6f:ff:5f:2e:14:fc:b5:7e:e8:4e:32:73:5b:e3:66:
68:e1:f1:67:d8:b6:32:d7:dc:7f:2c:da:46:c0:36:
75:be:6f:94:e1:81:ba:8f:f8:d7:e9:78:37:7e:91:
8a:e1:27:e1:4d:89:49:66:cc:8c:0b:f3:45:ca:78:
ec:00:c0:3a:99:b4:90:ea:59:a7:62:f0:58:79:e6:
8c:26:06:9a:22:86:62:5e:ca:84:ec:ed:97:21:b2:
3a:32:f9:a1:16:1e:8c:d9:bb:51:d2:45:cd:47:e1:
2b:92:05:b5:30:89:af:ac:7d:4c:46:ed:50:4d:2a:
30:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1F:21:91:3A:CA:04:37:91:26:05:51:06:F6:CC:00:A9:AE:AE:23
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QB8hkTrKBDeRJgVRBvbMAKmuriM.roa
sbgp-ipAddrBlock: critical
IPv4:
49.105.79.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:76:14:b7:14:10:8c:4d:00:62:a8:10:b1:84:1c:e0:72:5a:
6b:3c:50:5a:1d:73:70:47:cd:46:bf:a2:3b:85:22:0e:3b:1c:
19:54:2e:0d:a7:04:27:14:ef:76:91:39:af:30:9f:b6:fa:b6:
c1:e0:3e:84:0d:c1:17:b0:44:2b:86:eb:2c:df:12:83:eb:41:
d5:8f:f1:d1:5d:d6:da:f2:dc:3b:89:78:8d:25:3d:e4:95:d4:
c9:83:37:e3:27:77:00:50:77:63:d8:2b:d8:1d:3c:60:a9:c3:
a3:d3:37:41:4a:c7:1c:c8:57:38:46:29:23:71:d7:82:88:4d:
9d:e4:c1:30:a0:77:2b:b8:f4:0f:c7:f7:9d:58:8e:c4:8f:c7:
8b:71:ca:ee:80:c8:db:64:e4:5b:eb:11:e5:93:72:da:79:bb:
ce:2a:2f:ac:ff:a0:5b:89:65:f1:26:ba:37:ec:13:05:c9:da:
88:1b:1a:f6:8d:15:76:aa:0e:be:91:9d:04:f8:11:b9:33:b3:
cf:4b:cf:a0:0a:97:2a:07:79:29:02:2e:60:48:9f:7e:9c:fa:
e5:ab:36:91:f7:1f:2c:e0:6f:ad:40:eb:92:4d:55:f8:fb:f2:
5d:e9:23:2b:ca:e7:38:9c:7d:fb:23:32:db:62:25:ed:a7:bb:
f2:1d:47:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:07 2026 by rpki-client