
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/tqSMgpmm19D0RgT5QMaR1u4A6NE.roa
File: tqSMgpmm19D0RgT5QMaR1u4A6NE.roa (raw, json)
Hash identifier: SUEx0DUyVhX892e2dfHhDcYYQEREDgPdBD5icwvOYdk=
Subject key identifier: B6:A4:8C:82:99:A6:D7:D0:F4:46:04:F9:40:C6:91:D6:EE:00:E8:D1
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 160A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tqSMgpmm19D0RgT5QMaR1u4A6NE.roa
Signing time: Tue 31 Mar 2026 08:00:59 +0000
ROA not before: Tue 31 Mar 2026 08:00:59 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.126.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5642 (0x160a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:00:59 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=B6A48C8299A6D7D0F44604F940C691D6EE00E8D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:69:ea:70:e2:c4:d5:a8:55:0c:3a:aa:7a:a5:
e2:e2:23:ad:97:9d:78:82:47:aa:74:36:8a:81:8a:
ee:63:b7:35:a8:b7:20:c2:55:15:be:3c:f4:81:ab:
7c:2e:2d:6c:0b:21:9e:74:e7:6e:56:c5:ba:de:13:
4b:a6:18:a9:3e:13:fd:76:f8:af:5e:11:f6:1f:ad:
b9:5d:f9:1f:96:e9:80:87:b8:ff:02:78:ad:d7:10:
ac:0b:10:0a:89:e6:d0:d4:dc:c9:f1:f0:c0:bb:d4:
52:50:46:de:06:a7:82:dd:17:c3:e5:26:d8:1c:a2:
e1:4c:88:08:21:0f:07:71:70:9a:6f:be:30:4c:9d:
f3:da:76:0a:06:a6:30:71:01:9a:3f:bb:9e:e4:40:
f9:18:24:a2:d4:f6:46:b1:c3:1d:50:dd:78:a8:a0:
60:2a:30:69:73:8a:90:5f:7f:4e:16:cc:1f:c9:aa:
51:5a:71:ea:cb:4a:68:0b:ba:0f:c8:f2:b9:5f:87:
86:79:15:30:76:c4:12:ab:38:43:cb:f1:05:72:7e:
c1:54:f8:03:75:02:f1:4f:a8:ea:96:12:38:37:c8:
98:70:9b:33:37:bb:c0:d7:25:d1:ad:7d:9c:41:be:
0c:96:f1:3a:3e:09:76:fd:ba:24:11:f4:7e:45:ec:
b6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A4:8C:82:99:A6:D7:D0:F4:46:04:F9:40:C6:91:D6:EE:00:E8:D1
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tqSMgpmm19D0RgT5QMaR1u4A6NE.roa
sbgp-ipAddrBlock: critical
IPv4:
49.98.126.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:e2:0f:c3:e2:ba:4a:e6:4a:45:ee:ef:fa:8f:20:ba:5e:d8:
63:94:2b:c4:1f:01:2e:10:29:bd:c0:db:12:f4:0e:c7:a9:03:
4b:98:e5:88:c1:09:e9:13:a9:49:ee:98:b9:14:dc:23:63:7b:
d1:da:82:f0:93:20:f0:51:81:9f:12:22:d8:e9:ac:f4:15:17:
bd:16:96:c0:7b:ad:aa:ce:c0:00:1e:5a:7e:3d:f6:a4:67:1e:
b2:a8:e7:c4:4d:9c:38:2b:85:4a:28:ed:c5:66:cc:89:d5:3d:
64:ce:20:fd:7c:b4:2d:65:fd:bc:5b:5c:83:be:bf:28:6c:40:
1d:4d:38:5a:1c:72:2e:0f:fc:1f:fd:30:8a:e4:9a:53:b3:ad:
95:c1:21:18:8a:a2:9f:1c:95:13:5d:2e:37:9c:e9:d5:5d:40:
45:da:8b:fc:f3:a0:dd:12:74:b5:4d:e1:01:95:6d:7e:ff:75:
79:bf:96:79:ee:c0:5d:ee:6b:0b:af:a8:94:89:09:fb:b0:00:
71:1a:87:0e:a5:9e:d5:18:da:ef:3e:d0:72:c3:8d:10:85:9c:
ee:9c:e4:f1:38:b5:4e:48:10:16:6b:ab:23:2b:ef:50:fd:e4:
d2:21:49:58:20:7c:23:6d:bc:e8:8f:2e:ab:ab:03:97:0f:0c:
4f:a2:3c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:28 2026 by rpki-client