
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/RhrsMSEy0L0kz5sV1hf0s0-Ovcs.roa
File: RhrsMSEy0L0kz5sV1hf0s0-Ovcs.roa (raw, json)
Hash identifier: h9Nr2fNU6jN0kBtdu6WFqdeT1UuhzRqi+OTpSrNdtv8=
Subject key identifier: 46:1A:EC:31:21:32:D0:BD:24:CF:9B:15:D6:17:F4:B3:4F:8E:BD:CB
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1670
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RhrsMSEy0L0kz5sV1hf0s0-Ovcs.roa
Signing time: Tue 31 Mar 2026 08:01:48 +0000
ROA not before: Tue 31 Mar 2026 08:01:48 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5744 (0x1670)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:01:48 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=461AEC312132D0BD24CF9B15D617F4B34F8EBDCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:39:b3:0d:d0:24:63:7b:c4:10:04:96:a1:04:
1b:a7:30:14:1e:04:31:21:95:cb:4a:49:77:f5:e8:
7b:cc:7d:0a:73:b3:69:da:c5:18:e6:f6:17:5d:0c:
5d:22:9d:cc:ca:8c:9a:8b:ba:c8:a8:49:68:20:96:
b3:12:b2:bc:0e:b9:71:45:33:f2:45:8c:40:70:1c:
d6:bd:97:58:8c:66:1b:f5:1f:59:a9:44:24:62:68:
13:a4:20:72:8d:5e:90:55:7b:81:b8:56:f0:d4:68:
6a:7f:7e:85:d4:2c:45:de:4b:7f:84:e8:29:c5:c0:
e7:42:a2:39:54:d3:63:be:57:97:85:b0:38:e4:27:
50:4b:eb:2c:64:4d:12:ed:ef:41:d8:2a:56:71:2e:
6f:8d:ff:45:02:b9:d5:c0:06:b5:cf:15:bb:52:47:
ba:28:ba:22:ac:e2:7f:56:c8:93:ee:61:3f:23:84:
65:7a:74:9f:0f:8c:67:db:21:24:3e:3f:37:9d:01:
c6:61:3f:34:7c:2c:d0:63:a0:87:6d:e4:6c:9a:c3:
97:11:0d:b6:41:bf:33:d0:93:4d:c1:e9:bc:ea:47:
34:e7:32:3f:0b:70:7d:9f:2c:dc:99:98:f2:59:42:
33:df:92:50:28:ac:a6:ab:b0:69:c1:a1:2f:65:4b:
72:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1A:EC:31:21:32:D0:BD:24:CF:9B:15:D6:17:F4:B3:4F:8E:BD:CB
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RhrsMSEy0L0kz5sV1hf0s0-Ovcs.roa
sbgp-ipAddrBlock: critical
IPv4:
49.106.215.0/24
Signature Algorithm: sha256WithRSAEncryption
12:7a:0b:0d:1b:cb:25:c3:51:ed:e7:04:a0:43:3b:a8:98:33:
ac:96:8d:bf:46:7e:37:16:10:72:d0:a3:43:1b:3e:d1:d8:ad:
55:ec:b2:f1:b9:be:ee:a3:aa:bd:14:4c:85:71:bc:14:1d:bd:
65:74:db:cb:0f:fb:16:34:14:49:57:8a:05:2c:d4:b5:5a:90:
f0:35:90:df:b1:34:ae:3e:6d:78:6a:c8:05:9a:c6:52:d6:05:
39:a5:e7:ab:03:3a:5a:dc:59:9e:d0:c3:90:91:91:96:c0:fc:
3e:34:2f:6a:ac:fb:88:bb:b4:d5:03:17:ae:4d:46:65:44:2d:
ba:8c:43:4a:18:41:0a:d5:ad:7a:70:5d:8f:67:1d:2b:6b:3e:
b8:7f:6e:80:cd:2d:e3:b2:19:03:ed:59:40:01:20:89:d5:87:
a1:d4:ea:58:6b:b1:1a:96:22:8f:bd:ae:9d:c1:3f:00:23:c5:
10:e7:d2:f7:24:9d:4d:0c:9e:ac:3e:b1:7e:8f:6d:f5:58:06:
7e:d6:20:f4:71:0f:88:00:34:1e:13:cc:ed:a0:2f:e5:ad:5c:
97:14:e9:b4:6a:b6:98:df:c7:34:41:c8:aa:48:f8:3d:97:d5:
c0:17:88:59:f3:e3:b5:b3:d0:5c:7d:08:ff:6e:5b:ae:ef:6b:
5b:05:ba:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:44 2026 by rpki-client