
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/S7o2kcozdWa6Yul9qsGrfnf8MKw.roa
File: S7o2kcozdWa6Yul9qsGrfnf8MKw.roa (raw, json)
Hash identifier: a6lwXyu4MilIGhPkXw64XDGSe1KQd0Q6JRptcXLF7r0=
Subject key identifier: 4B:BA:36:91:CA:33:75:66:BA:62:E9:7D:AA:C1:AB:7E:77:FC:30:AC
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1401
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/S7o2kcozdWa6Yul9qsGrfnf8MKw.roa
Signing time: Tue 31 Mar 2026 07:56:41 +0000
ROA not before: Tue 31 Mar 2026 07:56:41 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.156.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5121 (0x1401)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:56:41 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=4BBA3691CA337566BA62E97DAAC1AB7E77FC30AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fd:76:29:c7:bb:93:17:12:99:6e:8b:c8:3c:
ae:04:1b:9c:3a:24:61:34:9a:87:ec:d5:0f:b4:e4:
cd:f5:c1:5a:af:2b:a5:71:f1:f4:48:c9:0c:c3:e9:
d2:f5:19:37:22:73:76:6f:53:bc:49:fa:11:13:21:
c8:71:fe:e2:ff:6a:6b:2c:22:00:0a:19:61:97:81:
51:1d:fc:00:56:69:c3:0e:d0:f7:58:e2:e1:63:16:
59:ed:92:52:ae:c2:74:db:a8:f1:b6:fe:27:ea:2e:
a6:38:67:5c:65:54:60:4d:11:88:d1:41:9c:31:89:
0f:3f:0f:d1:4b:35:2a:61:ba:76:bd:8b:df:c7:5c:
63:77:57:95:72:ee:76:67:62:13:4d:52:79:c9:7d:
16:1d:67:04:2e:a6:e2:66:a1:16:71:54:d2:e6:a5:
05:b3:33:67:a2:e7:15:99:30:33:c2:35:98:45:d2:
5c:cd:af:92:36:4f:5c:46:b0:b9:74:ff:8e:30:af:
87:b1:d5:8d:45:59:71:e6:0c:eb:9c:5d:a6:24:20:
f1:7b:55:4e:d7:47:75:7c:3e:66:93:10:68:19:a2:
af:58:20:40:40:06:cc:6b:9b:04:db:6d:07:39:a2:
34:c5:a3:34:a4:10:c7:f8:e0:af:71:7d:52:8e:9a:
dd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BA:36:91:CA:33:75:66:BA:62:E9:7D:AA:C1:AB:7E:77:FC:30:AC
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/S7o2kcozdWa6Yul9qsGrfnf8MKw.roa
sbgp-ipAddrBlock: critical
IPv4:
49.98.156.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:d1:61:f7:0c:d7:fe:65:74:7d:24:2d:47:89:29:54:cb:23:
05:93:d1:cc:e9:4b:3d:07:ad:9b:d2:0e:3a:a5:8f:22:7b:52:
dc:b0:56:0a:2d:b7:7a:b8:54:b8:ba:4c:3c:5c:0b:be:d4:40:
c7:18:12:f1:84:f2:92:4a:f7:4e:23:dd:a0:38:fc:9c:03:a5:
ed:0e:a9:cd:6d:89:50:50:43:75:13:d7:dc:79:2d:0c:5d:ae:
c5:bf:76:c5:9b:13:a0:d7:dd:42:18:88:56:50:70:1a:0a:0e:
d0:e3:81:38:42:8d:52:b2:6a:a3:46:18:04:07:1f:b1:69:9b:
34:d8:a8:1a:48:11:6a:20:ef:70:7a:6c:fd:f4:79:20:a6:f9:
f8:ce:2b:dc:08:2a:d3:57:24:3e:48:e5:f4:bc:74:8c:60:3d:
cb:ac:c7:32:8d:a9:f7:e0:0d:5a:93:91:14:7a:60:0e:81:33:
ea:a8:27:c2:44:2d:c9:8d:db:0a:72:6d:2f:27:d4:c1:13:82:
e0:0c:ae:15:a6:48:27:d9:e2:af:a6:84:41:44:28:cc:69:00:
1c:3f:4d:d0:ed:f7:2d:07:76:04:bc:5a:9d:85:fb:5a:f3:e3:
89:9f:06:e0:48:fa:9e:c4:c8:55:1f:5b:b7:d9:7d:cc:56:42:
84:8d:dd:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:02:14 2026 by rpki-client