
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/QyOBJl4_OREBkvT8-ESTYugsBd8.roa
File: QyOBJl4_OREBkvT8-ESTYugsBd8.roa (raw, json)
Hash identifier: 86y51RzDNZi91nmhVMAyV6sSsawMXDqDzHsYXuF9HVA=
Subject key identifier: 43:23:81:26:5E:3F:39:11:01:92:F4:FC:F8:44:93:62:E8:2C:05:DF
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 17D4
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QyOBJl4_OREBkvT8-ESTYugsBd8.roa
Signing time: Tue 31 Mar 2026 08:04:38 +0000
ROA not before: Tue 31 Mar 2026 08:04:38 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.110.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6100 (0x17d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:04:38 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=432381265E3F39110192F4FCF8449362E82C05DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:52:93:8b:eb:2a:18:f3:d7:ee:75:b4:63:f4:
cb:38:3d:42:a7:52:8d:10:d8:f4:3a:71:6e:dc:3f:
1f:2d:e7:07:8c:85:71:9e:35:05:f3:b2:02:29:bb:
ee:ce:9d:0e:57:bd:9a:8f:fd:52:47:1e:eb:c9:9b:
a2:cd:3e:9e:58:7b:f7:ff:fb:fd:ae:4c:b8:d0:fb:
f4:5e:62:94:34:0b:67:be:df:68:de:f8:8d:0f:99:
d4:b5:ef:14:2b:43:1d:de:81:c9:89:18:9f:25:0c:
dd:85:5b:a0:d2:f3:92:4c:d3:59:93:38:ff:79:0e:
ff:0c:df:12:c9:eb:e4:e4:2c:dd:03:0a:2b:8d:16:
aa:50:61:24:50:ad:a7:81:b8:08:d3:21:99:ee:16:
20:f4:da:bc:3c:ef:98:60:76:14:f8:79:bc:62:98:
8d:7e:8f:68:12:6a:e0:4e:ca:59:c4:8a:7a:47:e6:
6b:d3:ab:2a:ad:10:49:6a:ee:f4:ed:70:6e:38:26:
63:fc:7a:85:80:c8:a4:9d:65:77:81:13:9f:b4:be:
4b:b4:65:9e:37:61:a5:51:6c:b8:ca:49:c1:21:47:
9c:f5:11:f2:86:72:5c:38:8a:a0:43:04:d3:c3:52:
b4:75:c2:ea:89:68:da:02:cb:17:0c:b2:19:d1:e4:
3a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:23:81:26:5E:3F:39:11:01:92:F4:FC:F8:44:93:62:E8:2C:05:DF
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QyOBJl4_OREBkvT8-ESTYugsBd8.roa
sbgp-ipAddrBlock: critical
IPv4:
49.110.128.0/18
Signature Algorithm: sha256WithRSAEncryption
3a:cf:91:e6:cb:17:bd:25:81:9f:92:fc:93:86:d3:a9:1b:fe:
ce:f5:60:18:e4:6a:c4:00:7f:42:6c:2a:bc:d1:f6:9b:8a:33:
7e:1f:17:70:54:49:c2:25:53:30:9c:6e:b1:31:cf:e7:89:52:
94:4d:09:be:b2:76:01:2c:1a:1c:58:eb:48:c9:c3:96:3f:cc:
b3:78:25:b3:86:9a:43:be:5e:4a:ba:d9:8a:11:5e:e0:bb:45:
20:d5:a7:c7:e5:a5:66:8a:41:60:4c:3b:94:6f:23:1e:fb:3d:
89:5a:69:69:b3:c0:42:23:82:45:5d:92:f9:00:69:5b:43:50:
7b:ee:16:76:ff:ec:6a:81:01:58:5c:f3:82:d1:ab:ac:b0:85:
2b:34:91:48:29:e4:89:18:2d:7a:5d:c1:e7:e2:9c:a8:5b:7e:
25:79:2f:5b:a4:56:09:6e:9f:1d:98:3f:31:1e:7b:f9:c9:47:
48:66:e1:d3:59:b7:09:d9:8c:68:0d:2f:49:62:c0:be:8f:11:
d1:c2:f7:e2:18:8b:55:2c:39:2a:c2:21:b9:84:3d:62:1b:b9:
2b:a3:5b:99:55:90:2e:63:7b:d6:b3:2f:3c:a1:35:a6:d7:d6:
ad:0a:d9:af:2f:28:6f:8c:27:8e:ab:1a:82:dd:4d:57:fe:e0:
69:74:08:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:58 2026 by rpki-client