
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/RKn5hcKhwQN2y3TmBC4qWT-TLPM.roa
File: RKn5hcKhwQN2y3TmBC4qWT-TLPM.roa (raw, json)
Hash identifier: qWcQzaW1psODKDQbB/0/rXHeyP64oFXe98jOK7Cvy00=
Subject key identifier: 44:A9:F9:85:C2:A1:C1:03:76:CB:74:E6:04:2E:2A:59:3F:93:2C:F3
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 17FB
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RKn5hcKhwQN2y3TmBC4qWT-TLPM.roa
Signing time: Tue 31 Mar 2026 08:04:55 +0000
ROA not before: Tue 31 Mar 2026 08:04:55 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.238.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6139 (0x17fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:04:55 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=44A9F985C2A1C10376CB74E6042E2A593F932CF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:39:cf:b7:aa:a8:2f:9d:63:84:98:a0:49:1b:
19:f2:5c:f5:d0:6f:cb:31:02:5d:23:ed:5a:96:ca:
16:cb:45:a5:3a:ae:05:8d:77:1d:5b:0c:c7:54:ef:
39:5a:0f:05:12:5e:df:f8:62:93:e0:42:45:af:88:
c4:52:45:4d:94:52:44:da:17:3d:b8:14:e0:f6:d7:
9e:e2:29:a6:6f:49:3f:1f:ab:7f:36:68:dc:4e:30:
be:09:51:1d:f7:93:1e:48:10:75:71:9f:50:b9:69:
c7:14:0c:cc:41:6a:7d:1c:dd:4b:30:eb:8f:dd:4b:
bb:36:d2:89:49:30:d9:12:1b:14:f5:4c:2d:1c:8c:
cc:6c:e4:f2:e4:45:2b:1e:f6:b1:71:59:53:b0:8c:
f5:bb:ab:63:60:2c:0a:1d:b0:b9:87:72:91:7b:63:
af:b6:bc:f6:d3:78:be:ac:ae:a9:ba:f3:22:a1:bc:
15:0b:d7:72:bd:63:74:cb:e7:14:b3:2f:4c:d1:6c:
b2:e1:da:d4:89:d7:4b:ed:2d:35:86:85:1f:11:66:
af:f6:99:aa:b7:1a:12:65:38:87:cc:2b:79:f4:c3:
99:18:af:81:1d:56:5e:bc:8f:bf:7c:35:18:7e:2a:
84:c9:ed:c1:98:48:09:c1:45:46:6e:c6:ea:81:be:
8e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A9:F9:85:C2:A1:C1:03:76:CB:74:E6:04:2E:2A:59:3F:93:2C:F3
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RKn5hcKhwQN2y3TmBC4qWT-TLPM.roa
sbgp-ipAddrBlock: critical
IPv4:
49.106.238.0/23
Signature Algorithm: sha256WithRSAEncryption
cc:04:67:07:57:70:d9:d7:fb:a4:75:f4:32:97:55:10:89:d8:
3a:af:6b:0f:aa:92:ef:96:6a:4d:35:66:e7:19:f3:87:42:c1:
5f:fa:1d:7c:60:de:ab:61:75:69:27:b1:64:ad:b2:1b:17:99:
3e:f0:79:bf:ec:df:1c:ec:b9:64:36:96:83:97:0b:8e:a7:af:
f9:62:c6:b2:13:a8:f9:a6:38:d1:24:aa:13:8c:39:98:f0:31:
30:28:69:40:fe:de:dd:2c:b8:f4:15:7a:5e:73:48:2e:22:46:
c7:03:be:42:6e:cb:27:f4:26:05:b4:8e:28:2a:9a:39:63:69:
b0:37:d7:24:74:88:cd:6e:3d:09:4c:75:7d:32:25:3d:f2:71:
6e:bd:81:94:a7:06:dc:18:0f:2f:1e:f6:68:7c:a1:32:b6:20:
ec:d2:a3:4c:1c:80:e0:5f:bd:91:82:59:68:c3:35:c7:c5:af:
bc:51:51:a3:a1:ff:bf:43:1b:fc:09:b8:e0:e0:60:f0:a4:69:
08:24:75:1f:f6:18:8b:17:52:f7:16:22:d8:aa:c4:9c:68:6a:
0b:16:20:f0:d8:3b:82:10:18:48:36:9d:98:2b:2f:9b:61:9f:
5b:55:ad:ce:0c:69:d9:b9:7b:b7:d6:67:49:66:cf:c4:45:22:
07:e2:84:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:02 2026 by rpki-client