
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/gWsDHbSnSe4u8m44-TDee2joRLo.roa
File: gWsDHbSnSe4u8m44-TDee2joRLo.roa (raw, json)
Hash identifier: ukkcS1f8CU/RvPQJjC4NlbLTG7P7xVOJM/AQKKiY7Bs=
Subject key identifier: 81:6B:03:1D:B4:A7:49:EE:2E:F2:6E:38:F9:30:DE:7B:68:E8:44:BA
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 13D2
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gWsDHbSnSe4u8m44-TDee2joRLo.roa
Signing time: Tue 31 Mar 2026 07:56:23 +0000
ROA not before: Tue 31 Mar 2026 07:56:23 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.208.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5074 (0x13d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:56:23 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=816B031DB4A749EE2EF26E38F930DE7B68E844BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:62:e5:5d:8d:81:1f:a2:c8:ea:77:f0:52:80:
b1:64:29:d7:7f:a1:68:9c:6e:45:7d:40:f8:69:76:
c3:fe:90:4a:f8:41:a6:86:a3:43:f6:d8:69:70:a0:
dc:1b:07:df:5b:d2:b6:e6:88:01:b3:ff:32:72:7c:
d8:75:7a:53:58:46:c1:17:de:7c:11:64:32:ec:0f:
e0:d6:ec:c9:6c:8e:ab:ec:52:bb:b8:02:61:04:87:
69:06:b6:b0:18:4d:4b:db:88:87:9f:b9:49:dc:02:
60:01:ac:cd:b8:14:ae:f2:2c:4a:7f:03:ce:27:dc:
a7:22:2b:00:a7:f6:02:4c:6d:9b:d9:fa:8d:2b:b9:
21:5a:3a:35:07:99:a3:3b:59:69:d1:07:9e:b5:26:
07:86:ff:1b:58:be:3a:97:18:c1:4f:87:14:3c:58:
10:1c:ef:eb:47:1c:d2:aa:2d:70:44:b7:12:68:9c:
d0:9c:73:97:31:59:6b:14:4d:fa:bb:27:a7:ce:61:
8a:ca:aa:9d:aa:6a:a7:d2:78:82:62:b9:53:7e:21:
fb:34:31:b5:5d:11:74:99:00:7c:6a:f3:e9:68:27:
24:61:21:99:5b:a1:17:f3:36:54:99:13:0b:8f:88:
7c:10:45:d1:0a:2a:5f:e5:ea:cb:fe:e5:0a:a7:ee:
75:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6B:03:1D:B4:A7:49:EE:2E:F2:6E:38:F9:30:DE:7B:68:E8:44:BA
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gWsDHbSnSe4u8m44-TDee2joRLo.roa
sbgp-ipAddrBlock: critical
IPv4:
49.98.208.0/22
Signature Algorithm: sha256WithRSAEncryption
d6:04:9a:e5:6a:3e:1e:88:1f:29:c6:fe:8e:dc:84:41:5f:52:
d3:58:60:4b:25:10:88:0f:f5:4c:01:a7:0f:66:47:bf:0e:58:
e9:18:f1:9f:1d:c7:25:df:a7:f1:d6:bf:4b:6a:10:47:7f:6c:
f4:8e:d4:fc:59:ae:e7:7e:28:3c:bd:fe:00:82:76:f7:20:9d:
ec:5e:19:ec:58:91:75:5b:a1:a8:8e:5e:d9:fc:c7:b7:a3:d8:
3a:b1:f9:bd:5e:ca:a5:10:52:10:60:e1:40:42:06:c5:ec:17:
8a:4d:2a:88:39:46:c1:63:3b:58:96:e3:e4:a9:fb:d2:9c:63:
e3:83:50:3c:9e:1c:99:dc:7a:d6:0b:1d:b6:d5:0c:33:c2:87:
27:6c:c0:22:8a:4f:99:51:66:b8:7e:88:34:46:53:f9:63:d5:
ed:ac:35:d3:0c:8d:52:fe:d0:90:65:9a:be:65:b3:ca:9a:ff:
75:43:65:79:e4:7a:e9:b2:64:f7:f8:0f:ea:85:a7:7d:ee:f4:
3b:6a:d0:d9:23:05:cd:13:79:23:56:a1:1f:08:fe:3d:ac:49:
a4:41:8d:9f:bc:61:65:95:90:7e:17:7a:01:c1:36:1d:d8:30:
1e:73:07:75:1c:74:56:7d:20:00:8e:73:1c:f1:fd:4d:91:b3:
60:e2:e2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:42:58 2026 by rpki-client