
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/pSEdC8EO9ZD9Yz5TAT5l6y58A78.roa
File: pSEdC8EO9ZD9Yz5TAT5l6y58A78.roa (raw, json)
Hash identifier: Lr2qKT4f1+Q0BJ6ZHPSPZjOrCwSaNZSUoBul11mtNxw=
Subject key identifier: A5:21:1D:0B:C1:0E:F5:90:FD:63:3E:53:01:3E:65:EB:2E:7C:03:BF
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1367
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pSEdC8EO9ZD9Yz5TAT5l6y58A78.roa
Signing time: Tue 31 Mar 2026 07:55:30 +0000
ROA not before: Tue 31 Mar 2026 07:55:30 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4967 (0x1367)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:55:30 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=A5211D0BC10EF590FD633E53013E65EB2E7C03BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:59:d2:87:9e:38:24:e1:c4:13:db:50:e4:f9:
ff:fe:25:a5:6f:77:18:db:88:a8:d8:9b:87:b7:04:
fd:3d:de:81:e5:8f:45:3f:2e:99:41:ba:5d:1e:f9:
4a:6c:60:b6:c6:e6:9c:37:de:48:42:61:b3:a6:67:
41:c5:ec:2b:34:f4:b7:b1:1a:5a:67:f6:8e:e3:e6:
1d:74:d9:4a:ee:b3:85:6e:dc:c0:5d:f5:b1:e2:16:
45:49:d6:72:5e:eb:82:4e:3c:0f:04:d3:5f:bf:a5:
6f:b3:40:10:41:06:ca:de:48:64:5f:80:58:02:40:
98:bf:46:53:95:fe:34:5e:55:11:3c:7a:fd:c2:d3:
67:c6:cd:c0:fd:bb:29:6b:d0:43:dc:83:a6:6f:16:
e7:87:23:3c:c6:46:6a:cd:8d:a2:a8:33:12:7a:c1:
46:6c:96:eb:b1:af:fe:c2:66:78:63:5f:99:7d:bd:
88:f8:23:21:85:46:e1:c0:d5:65:43:e7:c0:c3:30:
58:c7:43:14:71:94:70:df:d5:03:f0:51:5a:c2:24:
50:0a:34:72:d1:52:9f:76:63:fc:e2:9e:40:4a:2b:
5e:fc:af:23:16:40:db:7a:34:36:aa:b6:3d:b9:e9:
99:2f:85:ed:e7:94:e4:52:ee:96:66:63:f8:d7:2d:
53:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:21:1D:0B:C1:0E:F5:90:FD:63:3E:53:01:3E:65:EB:2E:7C:03:BF
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pSEdC8EO9ZD9Yz5TAT5l6y58A78.roa
sbgp-ipAddrBlock: critical
IPv4:
49.98.24.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:28:b0:24:04:23:be:20:bf:76:da:77:aa:90:1b:96:91:bd:
98:80:2e:bb:00:96:2e:33:39:ad:43:96:78:25:a9:ec:8b:46:
d8:57:f1:33:77:74:fb:77:86:9d:5f:60:24:62:67:7b:d0:9a:
f3:47:05:e7:e4:e2:e5:8b:f0:7b:b8:a7:1e:14:13:af:94:f6:
71:38:02:d5:07:ee:db:1c:5c:8e:40:8b:ea:04:af:ec:0d:00:
6f:5c:1b:3d:c0:b0:bf:58:d1:55:5d:a4:95:3d:b1:00:87:16:
12:fe:09:2b:a3:15:36:86:41:ce:20:56:a3:95:93:fa:37:f4:
89:62:27:19:9a:19:1f:e0:52:ed:90:2b:ee:e6:2a:39:8a:49:
f9:a2:b4:94:e1:71:a3:49:4d:44:6f:2f:63:12:4b:08:b3:43:
1f:6d:c8:11:fb:b2:e6:6a:e9:4f:99:69:31:76:47:96:57:4f:
de:4a:50:3c:94:b7:b0:2b:4b:5e:32:11:23:b0:b8:db:6a:76:
03:96:35:ef:ca:25:cf:0c:49:f4:39:a0:d1:97:24:32:bb:10:
81:f1:fa:69:ce:95:52:3b:74:58:f6:e6:f3:e9:f4:33:0b:ae:
19:fe:68:67:f8:f1:95:93:86:45:00:52:15:ff:ef:5e:85:e0:
ee:4c:d9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:15 2026 by rpki-client