
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/r49a-CEd0x6L8kWTUFVqdlppxjw.roa
File: r49a-CEd0x6L8kWTUFVqdlppxjw.roa (raw, json)
Hash identifier: z5dgXzix+KMCwQnPJLOj8GKdq5BJXktZ/gYhU3TCL5g=
Subject key identifier: AF:8F:5A:F8:21:1D:D3:1E:8B:F2:45:93:50:55:6A:76:5A:69:C6:3C
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 148F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/r49a-CEd0x6L8kWTUFVqdlppxjw.roa
Signing time: Tue 31 Mar 2026 07:57:47 +0000
ROA not before: Tue 31 Mar 2026 07:57:47 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.90.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5263 (0x148f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:57:47 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=AF8F5AF8211DD31E8BF2459350556A765A69C63C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a6:72:8d:56:7c:4f:e2:e8:19:fb:54:6d:9b:
20:46:2e:ae:10:1e:9b:1d:2b:ea:b9:99:02:f8:48:
8d:a4:25:4a:43:49:44:8c:73:7d:d7:ab:5c:8e:20:
5a:de:03:40:99:60:ae:26:87:48:fa:7e:55:41:0a:
ab:d6:f7:1e:e5:09:33:27:ac:0c:e2:05:d3:4a:32:
b7:a7:7e:1c:11:73:b1:c8:f2:35:c2:d0:86:12:61:
2f:ce:ff:cc:89:32:15:d5:60:6f:f9:73:52:86:e6:
aa:53:0c:d0:fb:b4:1f:f9:f0:74:eb:40:39:b4:a7:
42:d4:88:f7:8e:37:a3:84:74:20:02:19:52:c3:1c:
b5:a6:ae:b9:37:23:16:65:cc:3d:5e:e9:5a:eb:6f:
91:a0:16:e7:64:6a:88:f2:6b:06:21:8e:4d:6a:3f:
b0:63:0a:a0:9e:8e:db:21:61:63:d0:af:a7:67:02:
77:12:65:75:b5:51:65:06:07:af:f5:ce:de:70:58:
b0:3e:9e:f6:bd:9e:28:0a:13:f9:6b:75:f9:45:1b:
ac:9e:40:02:e1:b3:09:43:5f:ee:71:01:cc:cb:8d:
2e:a0:ec:d7:2f:34:16:96:ed:45:db:e8:be:81:23:
83:3d:40:bf:28:5f:46:13:8f:7d:c0:8b:db:9d:ba:
b2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8F:5A:F8:21:1D:D3:1E:8B:F2:45:93:50:55:6A:76:5A:69:C6:3C
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/r49a-CEd0x6L8kWTUFVqdlppxjw.roa
sbgp-ipAddrBlock: critical
IPv4:
1.79.90.0/23
Signature Algorithm: sha256WithRSAEncryption
d9:0d:62:13:7a:b3:a1:6e:e3:61:2a:77:b7:d2:cb:e4:78:4c:
a4:7c:f7:00:46:9b:b1:c6:30:1a:6c:64:20:4a:59:a3:bc:12:
2a:17:91:f2:46:cb:b9:4b:cd:5b:d5:0f:46:84:52:1e:8b:dd:
c9:58:9b:15:e2:10:a1:1b:03:d3:fa:13:de:6b:f5:76:91:35:
7a:8d:85:7b:fe:5d:11:fa:e5:7a:33:30:d3:77:7f:c4:59:b6:
f2:3f:c6:01:82:76:1c:dc:38:24:90:5d:db:ff:bc:00:64:30:
f0:5c:56:3a:b9:9f:35:c5:77:75:06:f0:29:d4:db:84:ca:cb:
e4:1e:fb:9f:c9:89:34:59:a9:e4:70:6e:ee:29:94:d4:11:65:
3f:02:83:5c:2a:89:c1:ae:35:58:32:7c:26:70:f2:e2:49:c0:
cf:36:dd:4d:fd:94:c7:75:aa:17:72:b7:31:c0:ef:3e:ef:62:
ca:5d:18:bd:34:00:5d:f7:94:d5:21:fd:f0:cf:bf:0c:6f:36:
27:7e:05:cf:42:af:d3:1f:27:57:f6:e0:9a:ba:72:a9:c2:30:
11:03:d5:40:9c:0e:36:00:37:1c:39:25:75:eb:50:59:36:5f:
9c:97:b0:fd:08:80:54:73:61:1a:1b:a4:2d:0a:55:da:5c:8a:
16:eb:c9:9e
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFI8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
NzU3NDdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFGOEY1QUY4MjExREQz
MUU4QkYyNDU5MzUwNTU2QTc2NUE2OUM2M0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5pnKNVnxP4ugZ+1RtmyBGLq4QHpsdK+q5mQL4SI2kJUpDSUSM
c33Xq1yOIFreA0CZYK4mh0j6flVBCqvW9x7lCTMnrAziBdNKMrenfhwRc7HI8jXC
0IYSYS/O/8yJMhXVYG/5c1KG5qpTDND7tB/58HTrQDm0p0LUiPeON6OEdCACGVLD
HLWmrrk3IxZlzD1e6Vrrb5GgFudkaojyawYhjk1qP7BjCqCejtshYWPQr6dnAncS
ZXW1UWUGB6/1zt5wWLA+nva9nigKE/lrdflFG6yeQALhswlDX+5xAczLjS6g7Ncv
NBaW7UXb6L6BI4M9QL8oX0YTj33Ai9udurLrAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUr49a+CEd0x6L8kWTUFVqdlppxjwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L3I0OWEtQ0VkMHg2TDhrV1RVRlZxZGxwcHhqdy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEBT1owDQYJKoZIhvcNAQELBQADggEB
ANkNYhN6s6Fu42Eqd7fSy+R4TKR89wBGm7HGMBpsZCBKWaO8EioXkfJGy7lLzVvV
D0aEUh6L3clYmxXiEKEbA9P6E95r9XaRNXqNhXv+XRH65XozMNN3f8RZtvI/xgGC
dhzcOCSQXdv/vABkMPBcVjq5nzXFd3UG8CnU24TKy+Qe+5/JiTRZqeRwbu4plNQR
ZT8Cg1wqicGuNVgyfCZw8uJJwM823U39lMd1qhdytzHA7z7vYspdGL00AF33lNUh
/fDPvwxvNid+Bc9Cr9MfJ1f24Jq6cqnCMBED1UCcDjYANxw5JXXrUFk2X5yXsP0I
gFRzYRobpC0KVdpcihbryZ4=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:58 2026 by rpki-client