
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_jNnWIPKCnwACw7ojQIiVc9HZfA.roa
File: _jNnWIPKCnwACw7ojQIiVc9HZfA.roa (raw, json)
Hash identifier: n725JikOywDvnlR1nnFBuAVHNxFavW83mxJxjnWpOqI=
Subject key identifier: FE:33:67:58:83:CA:0A:7C:00:0B:0E:E8:8D:02:22:55:CF:47:65:F0
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 162E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_jNnWIPKCnwACw7ojQIiVc9HZfA.roa
Signing time: Tue 31 Mar 2026 08:01:19 +0000
ROA not before: Tue 31 Mar 2026 08:01:19 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5678 (0x162e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:01:19 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=FE33675883CA0A7C000B0EE88D022255CF4765F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7c:1b:8c:f2:0b:7b:b0:bd:58:50:ab:86:a8:
af:5a:ea:18:09:5d:ee:d7:ad:29:b4:ac:4c:87:fa:
0c:f5:2b:ac:70:5b:0f:46:53:f7:ef:bf:26:49:1b:
6d:07:75:91:5c:d1:92:c2:64:06:44:7c:f2:23:b9:
a7:0b:95:7a:41:72:7a:73:0f:ca:39:6e:2d:23:08:
c3:54:95:53:45:3c:b0:c4:ca:bb:0d:7e:23:16:2e:
a8:f2:c4:fd:9b:c6:85:1f:dc:4e:0c:8c:94:eb:fe:
21:73:2d:80:04:03:98:a3:7e:a8:af:49:4f:1e:0f:
9c:c2:f2:c8:d5:f3:ef:1d:6a:69:58:09:d9:3f:a3:
95:bc:67:5e:dd:67:da:96:85:8d:4a:1a:7f:55:1e:
5f:43:f9:fb:3d:27:93:ed:50:e7:af:d1:df:1a:76:
db:73:46:92:c0:e8:b6:d3:f4:89:10:e6:27:84:8d:
af:e1:3f:ad:cf:1f:18:d4:76:68:95:59:ae:03:28:
f4:7f:7f:0b:43:14:f6:d3:04:2d:a1:da:2a:41:01:
f1:67:44:92:ab:c9:82:79:e9:30:4b:ed:53:b6:3e:
24:1f:6c:fe:1a:d0:80:31:59:96:ff:21:18:58:33:
9a:d9:21:56:c5:f6:49:6e:b5:5d:64:c4:70:63:89:
b9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:33:67:58:83:CA:0A:7C:00:0B:0E:E8:8D:02:22:55:CF:47:65:F0
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_jNnWIPKCnwACw7ojQIiVc9HZfA.roa
sbgp-ipAddrBlock: critical
IPv4:
49.106.202.0/24
Signature Algorithm: sha256WithRSAEncryption
de:30:75:41:75:b2:65:56:6a:91:4d:cb:8c:ec:a6:ed:12:0d:
fd:ae:24:26:7c:e1:2d:0c:f8:f0:e4:13:0a:a9:fc:e7:cf:8a:
a2:77:8d:b9:c5:69:9b:33:56:66:f3:41:3c:d1:5f:be:e7:30:
aa:09:e4:8f:21:aa:e5:37:90:a0:2e:64:dd:cb:ab:a1:d4:2d:
e4:df:2e:8b:c0:95:c5:d1:3e:c9:8c:fd:00:93:97:18:d5:a4:
e1:7a:34:27:8d:7f:73:3d:3e:62:72:81:21:92:c0:de:89:b5:
aa:8e:57:39:4c:85:7b:69:f0:d2:7a:67:b6:4a:65:76:69:33:
85:22:7c:de:27:42:a9:31:1e:df:42:a4:31:ca:c7:1e:ce:b1:
0c:fd:38:78:ea:5d:5e:37:09:36:a4:68:5f:d1:bd:42:f0:3b:
01:98:f4:8f:86:5d:81:cd:ac:57:50:b1:79:ef:d1:fc:c6:a5:
7f:d5:e6:50:1e:c2:27:e6:95:f7:c1:97:80:6a:7f:50:11:81:
80:71:b4:36:8f:ae:f7:f5:ea:4c:9f:6c:44:55:3b:34:d4:4f:
43:16:e4:39:35:68:c3:e6:7c:43:ca:b1:17:09:12:ec:c8:b8:
73:a6:a7:07:07:25:6e:41:a0:32:53:93:62:6f:f4:0f:73:12:
47:6a:81:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:25:15 2026 by rpki-client