
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_oX-zuFnvUxFRgvZFPG-qdr1RNQ.roa
File: _oX-zuFnvUxFRgvZFPG-qdr1RNQ.roa (raw, json)
Hash identifier: DZkzDqAmO6l0DYqA0IuWZ9Urve0Q5R2GbCNiSB+eEKA=
Subject key identifier: FE:85:FE:CE:E1:67:BD:4C:45:46:0B:D9:14:F1:BE:A9:DA:F5:44:D4
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1451
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_oX-zuFnvUxFRgvZFPG-qdr1RNQ.roa
Signing time: Tue 31 Mar 2026 07:57:20 +0000
ROA not before: Tue 31 Mar 2026 07:57:20 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.105.90.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5201 (0x1451)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:57:20 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=FE85FECEE167BD4C45460BD914F1BEA9DAF544D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9b:87:ca:8f:52:82:ef:25:65:21:40:1d:9f:
af:01:87:09:fe:c2:b5:c1:92:62:07:ba:8a:e3:4a:
2b:52:9a:79:2d:75:4e:14:1e:97:c5:e8:46:eb:d9:
6c:5d:25:43:6f:b1:fb:5f:a7:81:40:d9:62:71:a7:
79:5f:95:5c:ce:78:e3:e5:67:c8:27:52:d2:02:66:
85:14:9f:67:a8:74:ff:5a:b5:75:3f:e5:07:32:89:
6b:b3:5c:5d:e8:eb:8c:db:80:51:7f:f0:2a:20:f3:
43:68:67:91:6c:67:f9:ce:d9:b9:52:58:04:57:d8:
17:35:b3:41:b4:75:2a:91:25:76:f1:b6:e4:39:07:
a7:2a:d5:f6:89:cb:56:47:0f:51:a1:fa:c1:03:07:
93:1b:11:6b:ea:86:98:0f:fb:74:db:92:69:96:58:
fc:c1:5c:d1:4a:8e:f9:50:99:85:36:1b:78:32:09:
37:d3:17:1c:d1:6f:ce:c5:da:f6:7f:45:cd:79:7f:
dc:36:dd:20:2c:21:17:6b:30:f3:a2:0b:39:bb:d5:
40:bc:f4:f5:e0:90:f2:78:80:d4:33:92:38:48:b5:
67:0a:a9:54:93:42:83:a4:3b:87:0a:50:88:ae:24:
1b:7c:3b:2b:09:ac:25:0f:17:51:18:6e:43:02:1a:
09:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:85:FE:CE:E1:67:BD:4C:45:46:0B:D9:14:F1:BE:A9:DA:F5:44:D4
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_oX-zuFnvUxFRgvZFPG-qdr1RNQ.roa
sbgp-ipAddrBlock: critical
IPv4:
49.105.90.0/23
Signature Algorithm: sha256WithRSAEncryption
40:da:71:75:a3:8d:d7:2e:02:61:ba:22:73:72:00:5d:99:f6:
aa:b1:03:8f:26:ae:33:7e:f9:7b:ae:86:22:e4:b5:74:d0:cf:
9b:55:c2:e1:1e:7e:f8:7f:75:e0:a2:88:d6:ec:e9:ee:75:9c:
57:e8:1f:9e:4c:c9:05:e6:1e:04:c2:e4:40:1a:ec:bf:f5:40:
15:d3:4b:24:3d:81:7f:ab:f7:d6:cb:bf:25:9f:08:9d:0f:90:
17:c3:d4:37:2f:5a:5a:33:c6:cf:49:c7:a0:0e:9c:44:49:e4:
b5:b0:27:96:92:e8:5e:3c:49:49:57:2b:cf:e5:6e:82:82:d5:
7b:78:62:93:49:55:be:cb:50:b5:e0:36:e0:fa:8c:a6:4c:ad:
91:b2:fd:9c:2e:b7:4e:ca:6e:98:04:7c:58:e5:dc:f5:5c:91:
84:8c:2f:71:9a:49:b4:df:de:ed:8b:bf:39:43:96:41:96:bb:
50:57:57:e6:2d:d6:a7:fa:22:c1:54:98:ff:86:11:5c:1c:04:
14:5c:a3:30:90:19:17:78:f6:30:19:26:45:60:a3:ff:6d:7b:
8b:09:7e:de:a2:58:c5:19:2c:ec:62:b1:47:37:68:d4:2b:48:
21:2d:62:59:c1:c6:f1:85:fa:15:45:e5:d3:b5:14:2d:9c:58:
69:fc:3d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:43 2026 by rpki-client