
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/WRxnel62nI10clj-OcttVvuVFYA.roa
File: WRxnel62nI10clj-OcttVvuVFYA.roa (raw, json)
Hash identifier: AzR4xZQCYAHXK/ZYaBs1BIl12NYTMgQ2StYWcUSSA24=
Subject key identifier: 59:1C:67:7A:5E:B6:9C:8D:74:72:58:FE:39:CB:6D:56:FB:95:15:80
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1593
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WRxnel62nI10clj-OcttVvuVFYA.roa
Signing time: Tue 31 Mar 2026 07:59:54 +0000
ROA not before: Tue 31 Mar 2026 07:59:54 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.102.148.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5523 (0x1593)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:59:54 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=591C677A5EB69C8D747258FE39CB6D56FB951580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:83:3a:44:71:15:4f:88:d9:f4:0f:34:94:4d:
d0:66:a3:bc:c0:45:9e:30:b4:9d:74:c8:6a:85:98:
bd:4e:5c:73:ce:2a:d4:4f:5b:0b:0a:79:df:8a:ba:
76:37:35:23:07:f4:b9:94:38:d1:ab:df:79:ba:04:
9b:aa:e8:74:15:39:e1:6e:8e:5d:c0:80:82:b0:85:
37:f5:7a:18:ef:85:c2:4f:fa:cd:44:95:95:ed:56:
4b:5f:62:af:b2:b4:08:37:8d:8c:c9:f7:2d:05:6e:
94:fa:37:1d:b4:8b:64:50:01:db:92:81:67:b0:36:
5f:d8:11:19:8f:51:87:82:67:f8:fc:25:10:52:50:
ec:b7:e5:d5:c8:bf:7e:5f:3f:33:fd:01:de:c6:46:
09:b9:46:84:84:5d:85:f9:15:55:fa:59:40:13:20:
4e:53:6f:1b:72:81:ce:5b:e1:de:6f:ac:07:ed:c9:
73:b1:5c:5a:68:1e:86:bb:72:80:4d:d3:5f:89:87:
92:41:40:87:11:e8:ab:c3:2a:6c:d9:e9:1d:95:b4:
70:c1:ec:3b:fb:77:3b:67:f9:77:51:c5:28:4d:69:
2e:d6:91:2f:1c:3e:8d:d2:99:05:54:73:b2:4b:61:
b9:60:3e:39:91:2a:6b:10:ed:a4:84:2e:7d:ce:49:
68:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1C:67:7A:5E:B6:9C:8D:74:72:58:FE:39:CB:6D:56:FB:95:15:80
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WRxnel62nI10clj-OcttVvuVFYA.roa
sbgp-ipAddrBlock: critical
IPv4:
49.102.148.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:38:3a:7d:13:e9:83:89:c8:e0:12:13:a6:dc:48:0d:c3:c2:
06:c7:99:74:40:39:6c:77:04:3d:9d:31:06:49:a1:e3:2f:51:
3e:21:ff:ec:d1:e2:85:20:67:4b:0a:4e:ac:5f:e8:f9:ca:85:
4b:78:a2:f3:ef:5f:f0:94:91:de:7c:5d:31:9d:d9:81:e3:85:
9f:41:5c:7e:76:6a:4f:1c:55:a7:26:03:83:22:35:aa:0b:da:
e0:4f:cc:cb:39:92:fe:47:46:b0:69:fd:ba:28:2e:c9:2e:b6:
10:f0:12:50:9c:15:36:a4:7c:b0:47:da:b8:19:c3:7b:e2:1b:
8e:20:fd:a3:d2:05:e0:5f:22:4c:0d:9e:ac:22:7e:1a:22:88:
3e:8f:cc:06:91:b9:2a:3e:3b:b5:01:14:44:3f:fb:a4:7c:86:
4d:96:da:d7:5b:d7:4d:f0:f2:8a:d5:e8:e4:08:9c:7c:34:4f:
6b:c5:ea:d0:32:ac:96:78:36:87:e4:86:40:8d:ae:af:0b:66:
ab:7d:b4:08:a2:13:00:e4:ed:43:36:1e:51:52:b7:77:f8:1e:
b1:b6:26:ec:cb:07:dc:31:0c:e4:d8:2b:6a:d9:6e:bc:53:1e:
8c:e3:70:09:17:89:10:23:2b:8b:0b:32:8f:d6:27:1f:c2:6c:
02:e4:3d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:27 2026 by rpki-client