
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ys1MMWzlnX8jiJ-oi_VBNp0mwa0.roa
File: Ys1MMWzlnX8jiJ-oi_VBNp0mwa0.roa (raw, json)
Hash identifier: C7oYw/2NkfZBZ4xzskc3KeKC8m3uuJMGioHPDoHV6jI=
Subject key identifier: 62:CD:4C:31:6C:E5:9D:7F:23:88:9F:A8:8B:F5:41:36:9D:26:C1:AD
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1668
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ys1MMWzlnX8jiJ-oi_VBNp0mwa0.roa
Signing time: Tue 31 Mar 2026 08:01:45 +0000
ROA not before: Tue 31 Mar 2026 08:01:45 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.101.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5736 (0x1668)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:01:45 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=62CD4C316CE59D7F23889FA88BF541369D26C1AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:16:6d:81:3c:e9:7d:93:a4:04:80:e4:fb:a0:
61:f1:9f:71:e8:46:9c:04:20:9e:fa:52:35:cc:50:
65:cf:81:c3:10:ca:29:d8:91:fe:1e:90:2c:12:67:
b3:98:d0:dd:69:d9:39:09:6b:87:5b:cb:0e:5c:b7:
77:99:1b:be:e0:d3:f1:90:5e:ee:03:82:be:38:9d:
52:17:f9:67:b6:fb:d3:79:14:5e:e6:10:49:bf:38:
fb:8c:d2:72:3f:f5:06:1e:39:ce:39:87:be:fe:fe:
f6:df:8d:fe:98:ca:74:7e:b8:f9:e1:b6:09:35:09:
7f:74:50:fc:14:e7:93:28:0a:0d:d3:c4:06:11:4e:
f5:6e:43:8b:6f:ac:8e:b6:d5:bf:dc:be:aa:f5:d2:
5d:bb:ee:36:7e:f9:78:42:c8:79:ce:6a:ba:a0:51:
ef:a6:78:61:19:2f:07:0d:84:bc:93:43:0a:41:57:
b1:c7:4e:39:0f:b7:cb:4a:95:ae:e4:c2:89:8d:93:
59:0b:15:f3:d0:1a:e9:06:0d:85:f4:7e:41:8c:eb:
1c:7f:0f:3f:de:59:fa:39:e1:ac:e6:bf:95:6d:ca:
2d:15:4c:b7:9a:ed:47:3f:20:91:e7:72:48:54:1a:
3b:87:2b:bb:14:f4:12:41:bc:84:7a:12:a2:a2:97:
27:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CD:4C:31:6C:E5:9D:7F:23:88:9F:A8:8B:F5:41:36:9D:26:C1:AD
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ys1MMWzlnX8jiJ-oi_VBNp0mwa0.roa
sbgp-ipAddrBlock: critical
IPv4:
49.101.0.0/17
Signature Algorithm: sha256WithRSAEncryption
d3:e9:59:cd:0b:f9:71:2d:86:d2:5d:47:da:03:7b:da:c3:1b:
7c:88:56:43:5f:2a:a0:a4:95:6c:71:e8:ec:00:c9:3d:b2:58:
10:e4:87:27:9f:a0:1d:9e:f9:ab:f7:7b:56:ff:fc:51:5a:7f:
41:37:d2:b7:4e:f6:41:f6:cc:e6:72:d2:5e:b4:a3:71:e9:53:
ba:cd:4d:79:74:cf:33:4e:3d:92:69:07:38:62:e2:8d:a8:01:
c7:d1:03:d4:e4:82:80:7e:a0:35:13:88:f0:75:8c:29:90:f8:
54:5d:69:e3:e1:a0:73:ac:b8:8c:1f:08:4b:3e:51:5a:0f:19:
5b:29:c6:c1:6d:b3:ca:bc:47:e7:57:01:16:fe:46:03:5a:a6:
2d:21:24:04:9f:04:e5:c6:67:cb:9d:b1:93:e5:a9:47:a0:ba:
0e:19:64:3f:90:71:20:96:0a:6f:4b:c4:9b:7d:c5:67:30:42:
d6:1d:79:08:6b:52:8c:44:ea:8e:5e:a8:33:37:73:ad:30:eb:
dc:b5:ae:56:f7:aa:47:ae:6b:76:43:27:a6:61:68:a5:49:61:
e5:34:35:11:08:68:28:a1:c5:03:c6:d4:7e:9d:16:4f:09:b8:
79:be:fe:3e:f0:5e:2a:0b:dd:a7:c6:5b:80:b3:b0:23:5f:c3:
b6:53:95:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:37 2026 by rpki-client