
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/RNB1wQqGP_Oad_CqKmmqua_6Oy4.roa
File: RNB1wQqGP_Oad_CqKmmqua_6Oy4.roa (raw, json)
Hash identifier: ZxRmrdpOjwiCunLYrU3vaRE5+WUpqYDJDL74abf8gtk=
Subject key identifier: 44:D0:75:C1:0A:86:3F:F3:9A:77:F0:AA:2A:69:AA:B9:AF:FA:3B:2E
Certificate issuer: /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial: B3
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RNB1wQqGP_Oad_CqKmmqua_6Oy4.roa
Signing time: Tue 31 Mar 2026 07:55:21 +0000
ROA not before: Tue 31 Mar 2026 07:55:21 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 160.249.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179 (0xb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Validity
Not Before: Mar 31 07:55:21 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=44D075C10A863FF39A77F0AA2A69AAB9AFFA3B2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4f:d6:e8:66:b0:48:e8:fe:15:14:26:cc:21:
c5:45:68:1e:52:64:b0:45:cb:23:26:3b:c3:d9:a9:
30:18:16:d5:5a:c2:d7:49:0a:13:7a:c4:8b:21:16:
ce:65:9a:5e:16:d0:65:09:64:73:81:77:01:e0:e2:
c2:51:3a:2b:80:dc:f2:9a:37:da:79:e5:41:2f:0d:
68:49:c2:6b:37:80:8f:39:b9:59:29:e7:72:1c:48:
b1:4a:db:ff:9d:85:be:77:ad:99:ea:3b:ec:7c:cf:
8c:19:40:f8:ab:a5:10:96:00:62:1c:e8:d3:30:d2:
a3:53:a1:bb:c9:ba:43:9f:31:36:c6:0e:86:2e:18:
be:d3:54:9f:6f:c7:70:70:0e:ba:26:39:70:e7:63:
66:ab:c2:87:17:26:88:b5:61:02:f3:a8:ac:42:56:
aa:34:6a:81:34:7f:0e:e3:3b:e4:9f:ca:80:09:7e:
b6:a3:1b:c0:f0:4b:24:dd:61:f6:d5:28:64:93:94:
62:23:60:34:24:d6:a7:77:09:b8:f6:65:e7:5e:64:
e9:e7:14:32:cc:81:f0:4e:4f:f9:1b:27:67:59:d0:
4b:70:f9:03:c1:be:b0:a9:3d:84:26:80:43:fe:1e:
aa:2e:e7:a8:66:de:82:15:ce:f4:0b:3d:ef:15:85:
58:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D0:75:C1:0A:86:3F:F3:9A:77:F0:AA:2A:69:AA:B9:AF:FA:3B:2E
X509v3 Authority Key Identifier:
keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RNB1wQqGP_Oad_CqKmmqua_6Oy4.roa
sbgp-ipAddrBlock: critical
IPv4:
160.249.95.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:d5:bc:89:d5:fe:34:17:d0:d6:9e:d6:ef:02:9b:0d:23:72:
c4:b2:3d:e0:2c:35:26:69:f6:4a:55:79:86:0f:8a:dd:bd:8d:
65:68:40:39:4a:41:5c:23:50:cf:a0:d4:d5:56:73:bc:6b:49:
5d:b4:5e:26:4b:f3:13:74:44:2a:56:97:94:8c:0a:82:8d:97:
72:3e:6c:30:e4:7f:6d:44:f8:4e:aa:9c:e4:29:ca:99:87:67:
41:35:1d:6f:17:17:26:ff:9b:7a:7c:07:6a:b0:e4:63:d5:5d:
d1:e2:de:3d:1c:9b:54:af:21:d5:1f:a2:f9:06:97:7c:a6:30:
c5:9a:94:bc:1d:ec:6c:7a:f0:94:8d:7b:c1:93:93:d6:a7:bb:
1f:e8:61:a2:40:0e:89:e1:54:18:11:29:34:c2:ec:78:fa:a7:
60:e1:77:96:f8:39:ae:ef:d3:b4:11:be:ad:94:de:4a:fa:57:
9d:8a:53:bc:07:5c:8e:f1:03:b9:de:ff:ab:e0:17:70:20:3b:
dd:4d:51:c5:13:8e:fd:43:83:bc:00:87:d8:ce:5b:8e:79:75:
a1:42:3e:05:36:64:7f:5a:00:0e:63:fc:d8:25:99:32:17:c6:
fe:93:4c:c2:a6:57:18:79:72:ee:6c:18:d9:c6:36:84:9c:2b:
9c:c1:9a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:24:59 2026 by rpki-client