
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/iQ5IhZOhKqMDw0x9nNxeBIc8rzg.roa
File: iQ5IhZOhKqMDw0x9nNxeBIc8rzg.roa (raw, json)
Hash identifier: GP7FFRudWCddza0uPUKpRgRENsITmTlCDUTcWK6RKgc=
Subject key identifier: 89:0E:48:85:93:A1:2A:A3:03:C3:4C:7D:9C:DC:5E:04:87:3C:AF:38
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 17E1
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/iQ5IhZOhKqMDw0x9nNxeBIc8rzg.roa
Signing time: Tue 31 Mar 2026 08:04:43 +0000
ROA not before: Tue 31 Mar 2026 08:04:43 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.105.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6113 (0x17e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:04:43 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=890E488593A12AA303C34C7D9CDC5E04873CAF38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:64:04:c6:77:d6:fc:e1:21:8a:6d:37:18:59:
3a:15:6a:3e:42:50:46:06:2a:d6:fe:fc:72:57:38:
e2:f9:44:30:cc:32:1b:c3:bb:96:e2:7b:54:05:b4:
d5:5f:7c:f0:a4:1a:6a:ac:5d:ec:54:8b:72:c4:d2:
49:78:1b:e6:39:19:48:b8:12:1b:30:92:2b:0d:31:
19:aa:70:3d:fa:d3:a1:e7:8b:aa:ab:35:a4:a6:8b:
6f:eb:32:64:1f:cd:e5:70:21:b1:5e:fc:f1:7e:52:
51:92:b6:6d:ad:2a:83:81:f5:52:c1:d8:10:a4:13:
20:df:cc:40:35:37:8e:3e:e1:92:95:3b:be:ef:e4:
7f:b6:19:cb:cf:5a:19:da:6a:18:da:5d:d9:23:dd:
ea:4d:61:a9:76:4c:f7:f1:7b:a8:96:2f:00:40:38:
0a:16:5d:f0:df:aa:72:8d:b2:84:64:a6:5c:c1:4b:
cc:ec:ab:c5:f9:72:8c:ae:6a:28:d9:5a:cd:a6:14:
6d:0b:59:3d:cf:93:b5:b0:a5:b1:85:08:b0:51:e1:
d7:2f:5d:df:ac:13:a5:b0:2b:4f:1f:0d:48:34:db:
32:4d:b8:d1:f7:a0:3f:ef:dd:7a:e9:71:e3:2e:69:
86:a5:fd:25:19:91:70:85:2c:ad:ce:45:aa:b7:61:
97:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0E:48:85:93:A1:2A:A3:03:C3:4C:7D:9C:DC:5E:04:87:3C:AF:38
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/iQ5IhZOhKqMDw0x9nNxeBIc8rzg.roa
sbgp-ipAddrBlock: critical
IPv4:
49.105.87.0/24
Signature Algorithm: sha256WithRSAEncryption
27:b0:77:d7:58:c5:dc:ff:b6:40:cb:ab:a7:ef:9e:f8:6a:63:
2a:2f:be:50:d1:25:03:81:7a:1e:a2:c6:03:fa:cd:ae:aa:62:
d7:75:46:16:58:a5:6e:e5:c9:80:5d:50:02:ea:17:61:50:ba:
15:1a:3a:1b:d1:33:68:62:69:5a:70:22:90:68:78:fc:ef:a5:
8d:fa:92:4d:20:1a:b6:4c:42:ad:2c:dd:7b:c2:4c:d2:25:fe:
3a:dd:e2:b3:f5:9d:ff:39:73:d4:3c:9a:98:4f:1e:4c:ee:96:
3f:d5:42:f7:4b:d7:c6:95:2b:0f:54:4c:59:7e:54:a4:89:91:
81:f8:be:11:84:80:99:a9:a7:39:5c:8d:27:de:55:54:c9:56:
82:03:05:16:10:9e:39:88:b1:46:db:9f:82:9d:87:e9:2d:82:
c4:3e:ef:14:d3:80:7e:53:6b:81:85:be:44:f4:03:a0:c7:42:
bc:c7:c1:c8:ea:da:88:05:48:64:90:bc:88:75:16:9d:b8:9b:
05:49:94:81:32:34:0c:d6:03:4c:b8:ba:7c:fb:18:9e:9b:f0:
5d:0b:68:cb:c8:bd:7b:bd:3c:dd:ee:a9:22:5b:ef:39:47:f9:
b8:9c:f2:cb:01:67:be:f0:31:5e:d2:a4:8e:84:18:a7:35:bb:
e5:b3:61:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:48:11 2026 by rpki-client