
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_ouixg84j1htxZ5nq3oDjaB1Eag.roa
File: _ouixg84j1htxZ5nq3oDjaB1Eag.roa (raw, json)
Hash identifier: cf8HXYIuxvhK6dcaolhEyItAdvgh2Tx5uIo04DZgOK4=
Subject key identifier: FE:8B:A2:C6:0F:38:8F:58:6D:C5:9E:67:AB:7A:03:8D:A0:75:11:A8
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 13E5
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_ouixg84j1htxZ5nq3oDjaB1Eag.roa
Signing time: Tue 31 Mar 2026 07:56:30 +0000
ROA not before: Tue 31 Mar 2026 07:56:30 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.170.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5093 (0x13e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:56:30 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=FE8BA2C60F388F586DC59E67AB7A038DA07511A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:03:3e:96:8c:ef:cb:a4:d3:72:29:80:88:34:
3c:c4:fd:9b:70:7b:f0:aa:6e:ab:05:c3:ee:2c:f0:
42:e0:65:b0:3d:c9:d4:45:fa:d4:6c:f3:20:34:89:
9d:4f:1b:6d:37:23:06:09:df:35:ff:23:2e:65:59:
69:0d:9e:42:c3:08:84:c8:ac:e0:46:cf:9b:1f:fc:
91:88:9d:f5:c7:ef:9c:a6:c6:03:cb:78:f4:b9:62:
27:05:16:da:1e:7b:05:52:28:49:7f:4b:15:17:4d:
0b:95:ed:a9:78:1a:3e:2b:80:1a:85:fd:19:7f:24:
44:cb:3f:de:25:58:f6:26:7e:05:2a:4a:ea:a6:ea:
bd:d9:ee:6f:d1:1b:d9:8f:49:77:54:2e:e6:28:30:
4b:de:5b:ef:e4:76:f5:32:96:b0:16:d5:54:df:89:
74:0d:bd:8f:58:52:4e:d8:fd:6f:6a:a4:fb:9d:f0:
1d:5c:c7:41:9d:9d:58:9f:14:06:d5:3d:fb:82:f1:
d1:6b:2c:b2:21:99:bc:e6:8a:be:64:b7:18:66:0e:
c1:c8:4e:f5:7d:05:9c:be:6a:10:4a:b6:2d:72:ab:
ed:0c:ea:8d:07:d3:00:bc:91:91:dc:56:15:86:2a:
0f:d1:64:61:f7:31:c1:7f:e9:36:2d:6e:84:39:f2:
32:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8B:A2:C6:0F:38:8F:58:6D:C5:9E:67:AB:7A:03:8D:A0:75:11:A8
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_ouixg84j1htxZ5nq3oDjaB1Eag.roa
sbgp-ipAddrBlock: critical
IPv4:
49.98.170.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:f8:d3:08:da:a5:90:dc:eb:d7:2c:7d:42:7f:62:39:b6:99:
3f:86:df:c7:f4:0f:4c:6b:34:1b:be:fb:f7:dd:96:95:5d:57:
62:f8:9a:3d:15:36:34:6e:43:51:28:99:7a:92:22:c9:a6:b1:
b2:1f:1c:df:01:7e:b5:23:57:2f:14:49:c8:58:f1:66:3c:0b:
8d:41:e7:04:03:46:8a:18:52:06:08:22:e4:0c:aa:30:50:70:
7d:81:66:11:72:66:92:32:ba:2e:b1:fc:ed:97:fb:4c:9d:5a:
15:32:01:43:f0:d1:21:39:bd:45:d2:72:5e:a5:f5:8c:6e:07:
8b:31:df:f6:16:33:e7:96:5f:c5:a8:b4:5d:62:e2:57:c0:83:
64:46:fc:b5:f9:3b:35:10:62:6b:c1:0a:17:4e:9f:24:16:2f:
d0:90:ea:4a:59:41:2d:8a:69:87:2a:ab:40:45:b9:a8:69:00:
e3:e6:2d:5b:36:91:16:9b:46:84:3f:d0:38:7e:4b:2c:03:90:
95:7d:58:db:94:89:8a:6c:36:e2:fb:09:dc:ff:d0:54:a6:87:
5c:06:df:5f:c7:d5:5f:19:d7:ad:b4:5b:49:d7:77:e0:b2:3c:
2c:2e:f7:ea:90:aa:13:a4:64:5d:27:46:17:bf:ef:2f:18:aa:
e0:96:36:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:07:03 2026 by rpki-client