
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/g2oxwFArcf3d5d1V6UmzNIvCFJw.roa
File: g2oxwFArcf3d5d1V6UmzNIvCFJw.roa (raw, json)
Hash identifier: B0RJPo777j5lu+sd3MvrmQ8qcXeloZ3IGVVAQa1FJ64=
Subject key identifier: 83:6A:31:C0:50:2B:71:FD:DD:E5:DD:55:E9:49:B3:34:8B:C2:14:9C
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 16C9
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/g2oxwFArcf3d5d1V6UmzNIvCFJw.roa
Signing time: Tue 31 Mar 2026 08:02:29 +0000
ROA not before: Tue 31 Mar 2026 08:02:29 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.102.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5833 (0x16c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:02:29 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=836A31C0502B71FDDDE5DD55E949B3348BC2149C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:66:b6:b2:4a:65:a5:b8:0e:d0:57:62:44:ad:
03:89:20:fe:21:1b:5e:f8:9d:34:86:24:2c:4f:02:
25:2b:4e:06:aa:0d:48:b4:31:d9:81:1f:51:34:ad:
26:7f:81:c0:98:96:dd:4d:25:5f:f8:4e:a6:bd:39:
66:a3:c7:84:17:9a:26:4f:35:53:b0:8d:4d:20:73:
11:4f:f5:23:33:1c:ba:0f:7a:b0:4a:7d:e4:cf:99:
aa:34:7c:a9:85:36:e6:14:a5:f1:eb:e2:12:69:49:
c2:3f:5a:f5:40:d2:dd:91:5b:86:50:ea:93:72:6a:
4f:a9:24:96:5b:9b:1d:9f:28:c9:f9:3f:ac:e7:12:
8d:a3:27:54:a1:a0:ec:8b:c9:6f:15:7e:a0:87:66:
e4:ba:a0:e3:4f:2f:11:fb:ab:f8:2d:fe:aa:bf:54:
9e:62:a3:b1:3c:87:f6:30:69:be:ba:a7:28:5c:11:
79:a2:2a:90:1d:66:a7:a6:d5:8e:4b:aa:94:52:5b:
65:97:ab:13:44:47:c1:f0:a7:fe:a2:9c:ad:69:5f:
01:06:74:71:98:9e:91:d4:b8:0e:d7:e3:42:ff:92:
75:c1:65:f3:cf:7d:22:f8:83:c3:7a:2c:57:b0:46:
5c:cd:c3:f9:3b:43:4d:fb:38:b2:1d:db:1d:69:f0:
4e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:6A:31:C0:50:2B:71:FD:DD:E5:DD:55:E9:49:B3:34:8B:C2:14:9C
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/g2oxwFArcf3d5d1V6UmzNIvCFJw.roa
sbgp-ipAddrBlock: critical
IPv4:
49.102.155.0/24
Signature Algorithm: sha256WithRSAEncryption
76:8b:f0:e6:40:cc:a5:3c:d0:4b:94:12:7d:84:c9:b5:27:fc:
d4:d4:59:0d:b0:ce:4b:20:8e:63:d1:94:8b:23:88:5f:62:30:
0e:66:8c:0f:22:20:4c:46:f5:9a:e4:67:8a:72:7a:0f:43:86:
03:50:2a:5e:a9:dc:33:d6:c0:7e:2c:93:8a:5a:f0:7c:b5:e4:
02:c9:56:4b:d8:44:15:af:49:9e:1e:db:00:ef:ea:0a:b1:0e:
ff:4c:1b:50:ea:41:1c:23:97:5b:8e:30:20:e9:97:88:09:73:
cd:6c:f2:ae:83:e7:2a:2f:c0:e7:64:3c:63:a4:5c:72:51:d8:
29:1c:9f:14:2d:ce:2d:c5:80:31:7d:1a:0d:7f:63:df:76:34:
68:d9:16:f3:b4:4d:40:e7:65:1d:da:6e:96:61:f5:96:67:0a:
2e:b9:4b:19:35:87:38:f6:7e:f5:19:73:63:0c:72:6a:37:68:
92:a8:72:ba:f7:b1:8a:91:d2:d1:d1:8b:2f:77:27:b3:b9:22:
90:28:e6:6e:49:36:f9:dc:59:f5:31:d8:0c:2c:c9:4d:e2:45:
74:9f:de:98:4f:16:9a:3a:17:fa:2a:8b:d6:e2:d1:5e:32:a1:
67:e7:02:c0:67:4b:26:53:e5:f4:51:7a:37:2d:dc:92:fd:8d:
85:10:45:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:35 2026 by rpki-client