
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ilFvyLkPOl7gkRR9Tgoh4Ozr5gY.roa
File: ilFvyLkPOl7gkRR9Tgoh4Ozr5gY.roa (raw, json)
Hash identifier: rJnXToJLMJ7Z6FtvYm6RvZDjMvJgwM6FntdVC/9dx9U=
Subject key identifier: 8A:51:6F:C8:B9:0F:3A:5E:E0:91:14:7D:4E:0A:21:E0:EC:EB:E6:06
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 15A1
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ilFvyLkPOl7gkRR9Tgoh4Ozr5gY.roa
Signing time: Tue 31 Mar 2026 08:00:01 +0000
ROA not before: Tue 31 Mar 2026 08:00:01 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.102.160.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5537 (0x15a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:00:01 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=8A516FC8B90F3A5EE091147D4E0A21E0ECEBE606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:38:fc:33:c2:e1:42:7d:12:0a:e8:ea:dc:26:
4c:89:68:32:cc:cb:c4:1d:9d:8e:92:f3:8d:cf:ad:
4c:fc:69:fd:27:0d:1b:9c:d4:27:cd:4d:dd:9a:b1:
83:79:79:73:47:8f:6a:32:37:1f:c4:9e:f2:bd:9c:
2a:fd:dd:35:75:24:cf:c4:7b:19:25:99:44:5b:16:
34:94:89:7b:93:16:53:1f:6d:24:d6:3a:38:69:a5:
2d:28:b0:43:c6:bf:f0:3c:99:b7:8c:5d:48:f0:3e:
a2:8e:84:c5:1e:a8:71:0d:a4:a0:52:04:1b:1e:cd:
c6:b2:d8:57:8e:20:38:c4:5c:9d:82:f0:e3:d9:23:
1c:5c:14:f6:6a:c8:82:49:5c:62:93:57:3f:88:31:
8f:7d:27:d7:27:f3:41:4e:61:25:15:6f:58:a2:36:
5e:31:9b:51:7f:df:8f:75:a5:a3:68:a8:e4:56:25:
5a:ff:0f:c6:7c:e6:99:e1:05:fe:97:ff:27:97:2b:
33:c2:8c:27:ec:f2:5f:b4:94:54:95:c1:90:08:06:
55:22:31:c4:3c:ce:8d:cd:d9:9e:f0:9d:f7:07:05:
18:2a:d0:3c:c5:67:8b:0b:6b:5c:41:4d:92:b7:3e:
93:59:7f:ab:c4:8e:1b:0a:20:53:fa:da:27:d5:4a:
10:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:51:6F:C8:B9:0F:3A:5E:E0:91:14:7D:4E:0A:21:E0:EC:EB:E6:06
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ilFvyLkPOl7gkRR9Tgoh4Ozr5gY.roa
sbgp-ipAddrBlock: critical
IPv4:
49.102.160.0/23
Signature Algorithm: sha256WithRSAEncryption
33:80:22:8d:63:89:32:95:dc:46:72:d3:2e:10:81:f2:a3:c3:
8f:48:8d:23:82:16:f7:e6:65:74:30:4d:30:f1:47:f9:93:e6:
aa:2b:5c:3b:72:4c:c5:6a:f5:d1:7e:86:85:6e:ae:c5:2a:15:
5f:3d:69:f3:37:dd:3d:c8:7d:3f:c1:95:87:21:1d:36:8b:76:
9a:55:e5:17:12:90:d0:2a:21:a7:7d:af:30:2a:25:71:95:b6:
ec:f3:92:58:d2:91:bd:f7:0a:7e:43:15:c1:ab:5f:b1:4e:ea:
f3:bb:2f:90:58:6f:18:30:7e:e0:12:57:69:8d:ce:37:4d:1d:
61:97:93:30:e7:e7:2b:6f:ec:8a:c4:10:76:8b:13:18:e9:ac:
f1:d5:60:81:dd:cf:02:0e:8d:a9:1f:60:82:b4:5d:09:d2:12:
85:29:05:66:75:39:53:3c:1a:78:8c:d5:3a:fe:15:a0:a4:a5:
62:12:be:b8:25:85:fb:b3:70:7e:cb:63:dc:1c:37:27:e6:fc:
5a:1e:d6:3d:c1:be:e1:ed:d7:21:5d:a0:31:f8:ac:3a:6f:fe:
20:8a:10:04:2b:03:9a:d2:24:76:6c:90:77:4e:3c:f9:e7:ca:
93:20:af:0d:f2:bd:d8:29:b9:88:d9:2b:a7:5e:dd:01:2d:7a:
c7:96:34:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:26:37 2026 by rpki-client