
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/fW8FoX5l3R9xNi3bXoprCvjugTU.roa
File: fW8FoX5l3R9xNi3bXoprCvjugTU.roa (raw, json)
Hash identifier: H1QE5Uz4a4KEAnNEV/sJFukJzS25GFDjZQUn90/JYOU=
Subject key identifier: 7D:6F:05:A1:7E:65:DD:1F:71:36:2D:DB:5E:8A:6B:0A:F8:EE:81:35
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 138C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fW8FoX5l3R9xNi3bXoprCvjugTU.roa
Signing time: Tue 31 Mar 2026 07:55:49 +0000
ROA not before: Tue 31 Mar 2026 07:55:49 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.109.0.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5004 (0x138c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:55:49 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=7D6F05A17E65DD1F71362DDB5E8A6B0AF8EE8135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e4:7e:0f:c0:c4:48:67:91:dc:90:5f:68:15:
3b:36:c7:0e:21:9a:df:f2:37:e2:95:9b:13:78:62:
59:5d:19:a0:5e:5c:28:86:07:aa:2d:97:89:0d:e0:
12:6d:2e:f4:29:26:68:ac:af:f5:24:74:24:ab:c8:
3d:80:ef:45:5f:89:6a:7e:f3:cb:10:6e:6f:c9:58:
57:ab:d4:db:2b:d2:dc:67:a4:6c:00:77:b8:eb:4f:
ac:4c:2a:97:02:27:94:ca:a0:02:9b:61:5b:4a:ed:
2c:ef:63:90:53:af:9b:e7:58:7e:df:83:97:04:23:
2f:9a:26:bc:49:72:81:38:e7:6c:21:9a:49:09:37:
3a:bb:bf:ff:36:79:81:4d:8d:63:0f:3b:23:30:c6:
27:3e:17:74:38:e5:06:69:51:b7:12:25:21:0a:eb:
a7:f9:07:0b:e8:16:08:0e:6f:c7:41:fe:e5:de:9e:
1b:bd:81:32:b5:27:fe:15:8a:ac:a5:04:43:69:bc:
09:ca:02:ae:a5:5b:ad:26:ed:62:23:37:2b:40:c6:
5e:07:0f:85:6a:e9:30:e5:2f:73:c7:13:7b:13:66:
2f:ab:7a:e9:b9:35:88:ab:0e:a3:ba:19:ba:e1:17:
77:3b:b9:3d:f2:53:c3:ac:17:da:85:04:6b:b4:ec:
0a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:6F:05:A1:7E:65:DD:1F:71:36:2D:DB:5E:8A:6B:0A:F8:EE:81:35
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fW8FoX5l3R9xNi3bXoprCvjugTU.roa
sbgp-ipAddrBlock: critical
IPv4:
49.109.0.0/21
Signature Algorithm: sha256WithRSAEncryption
57:55:7e:88:ef:50:d8:dd:7f:85:81:78:04:b6:9b:da:93:d4:
2d:cb:4b:e6:af:af:2d:5c:88:61:6c:82:4b:fe:48:5d:92:59:
c7:b7:02:4b:c1:f6:ce:12:e3:74:a7:c5:2c:db:b5:ca:0a:0a:
82:60:1d:3d:09:5d:55:f3:b2:f5:fe:19:34:ef:0a:ba:5e:9f:
1e:19:8a:82:76:93:ac:d3:0a:fa:93:55:81:7e:30:3e:3b:b4:
6e:52:9c:2e:e6:0d:7a:80:85:97:5f:28:1c:0d:5d:da:1c:0c:
39:86:63:b8:c5:91:59:ac:10:6f:5e:ad:6d:fa:f2:61:d1:a1:
ff:3e:5c:d3:72:d2:2e:8a:b3:80:25:60:37:fb:5b:0b:59:9f:
70:a5:3a:14:7d:3a:2b:ac:de:15:2a:67:0b:1f:35:19:38:31:
9f:eb:33:fd:93:97:24:70:63:d5:f4:39:67:ab:c4:f2:6f:3b:
60:50:af:6f:64:00:ff:5d:d7:ee:7d:fa:e6:c5:dd:1f:49:36:
2b:56:13:ee:62:4a:0e:6c:a5:28:2f:66:57:9a:3a:43:3c:e8:
91:c3:89:aa:7d:ba:a0:fe:48:00:02:c3:2e:9e:50:03:4c:d9:
84:1d:23:f8:84:26:e4:45:15:43:80:5a:09:ac:56:5f:e4:55:
d8:48:9f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:38 2026 by rpki-client