
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/cngbb6ylsCllZ9i87SfxFyX-k1Q.roa
File: cngbb6ylsCllZ9i87SfxFyX-k1Q.roa (raw, json)
Hash identifier: pd/vSw3VzozZwbVeUkyDt3DqGGC5dFjaXOdEURSkOhc=
Subject key identifier: 72:78:1B:6F:AC:A5:B0:29:65:67:D8:BC:ED:27:F1:17:25:FE:93:54
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 13D3
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cngbb6ylsCllZ9i87SfxFyX-k1Q.roa
Signing time: Tue 31 Mar 2026 07:56:24 +0000
ROA not before: Tue 31 Mar 2026 07:56:24 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.96.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5075 (0x13d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:56:24 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=72781B6FACA5B0296567D8BCED27F11725FE9354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8c:84:ed:b7:6a:30:94:4b:c6:fe:78:0a:ca:
62:bb:fc:5a:1d:6c:f6:f0:52:e3:ff:d9:14:98:cc:
45:a2:1a:e5:c2:92:3d:98:89:3f:e9:a1:58:5b:c4:
72:9d:7c:61:11:46:19:23:01:96:85:cc:3a:a5:5e:
9b:ba:3f:d1:f2:b9:d7:c7:d1:e3:a3:a8:62:b0:8f:
2d:0c:99:4f:8f:80:6a:28:01:5f:47:cd:b2:a9:93:
bf:00:5a:d0:39:05:86:7e:74:11:49:b5:2d:c9:0d:
79:a4:13:e8:8e:26:f4:a9:e9:f9:9c:42:4b:49:20:
87:10:6c:c3:1b:1e:52:c3:f3:f9:4e:86:af:1e:af:
0b:19:49:99:b8:04:b4:2c:e9:9a:d5:e4:6e:b5:4a:
47:65:ca:31:2d:a5:41:46:7b:a6:1b:0c:03:1e:f9:
d2:b6:79:12:76:6a:12:f1:ad:36:73:7f:e3:8e:41:
5e:59:61:b8:20:7d:f8:73:e0:3e:02:9c:9c:ee:d5:
17:ff:ce:21:6e:b7:d3:c3:47:db:28:1c:26:b1:35:
bf:2a:c2:ad:8c:09:2e:42:23:4d:ec:37:fc:bd:67:
b4:64:e1:a6:95:8a:50:59:e2:55:c5:fd:46:c3:0e:
d0:12:e3:4e:c1:9b:57:23:74:18:96:6e:1f:f6:94:
69:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:78:1B:6F:AC:A5:B0:29:65:67:D8:BC:ED:27:F1:17:25:FE:93:54
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cngbb6ylsCllZ9i87SfxFyX-k1Q.roa
sbgp-ipAddrBlock: critical
IPv4:
49.96.230.0/24
Signature Algorithm: sha256WithRSAEncryption
20:2c:6b:1e:8c:a9:8f:59:47:2e:5c:b8:26:2a:c9:c6:db:1e:
c8:eb:98:90:cc:3e:a9:f0:53:e2:c4:6c:89:f7:c1:c0:10:c7:
31:cd:8b:b8:54:a8:8c:34:88:fe:1e:df:97:b7:47:6b:9e:62:
47:75:7d:28:0e:24:13:a5:a1:70:8a:28:46:2f:6d:66:00:36:
7a:c0:47:ac:04:0a:04:7a:31:ba:77:ee:a6:25:b6:d1:fb:d0:
18:5a:c6:ee:86:e2:6f:35:7f:f9:4b:b9:31:21:0e:13:b5:8d:
ba:96:90:cf:a2:37:8e:2a:86:55:19:22:17:6e:96:63:e1:8d:
8a:a7:e6:d3:76:19:11:5a:62:c5:87:f1:53:f6:a4:d1:bd:df:
b6:1f:b1:5e:09:49:48:00:cd:21:5c:ed:a9:51:34:2c:97:a8:
8f:2f:7d:b2:4e:16:ac:11:f9:a8:46:2c:ba:f2:fc:09:12:7d:
1a:2a:e5:2c:57:8f:23:82:ac:78:0e:01:22:2d:4d:33:44:ff:
e3:22:75:24:77:d1:5f:cb:80:be:92:5e:5f:51:90:1d:01:63:
c5:14:5c:19:3d:7a:7f:fd:f4:11:7d:28:3d:00:49:fe:10:d7:
cf:91:bb:1b:0f:8e:03:95:0f:aa:35:09:df:30:a8:a8:bd:57:
9f:76:b4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:50 2026 by rpki-client