
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/vTxoeeEHTyyoMiyQC9I6WsS4Lfc.roa
File: vTxoeeEHTyyoMiyQC9I6WsS4Lfc.roa (raw, json)
Hash identifier: EhbCGGZsE2rp2UtFKazjCJZ8i0STPG5HWD1rGUVi+A4=
Subject key identifier: BD:3C:68:79:E1:07:4F:2C:A8:32:2C:90:0B:D2:3A:5A:C4:B8:2D:F7
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 13E8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vTxoeeEHTyyoMiyQC9I6WsS4Lfc.roa
Signing time: Tue 31 Mar 2026 07:56:32 +0000
ROA not before: Tue 31 Mar 2026 07:56:32 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5096 (0x13e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:56:32 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=BD3C6879E1074F2CA8322C900BD23A5AC4B82DF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:86:f9:3f:24:48:6d:6f:99:65:b3:5c:be:cd:
18:d9:1e:02:be:af:4a:4d:4f:37:5e:8a:c8:9a:48:
9d:43:38:25:3c:f3:44:bb:49:48:0e:e7:d7:8b:60:
62:30:54:f0:56:11:77:60:17:21:9b:f9:8c:84:0c:
e3:0b:c7:3b:93:c6:a8:e8:6d:87:4c:5b:77:99:a5:
d0:30:d2:5e:e4:26:e1:89:f1:e7:96:4a:a0:38:e9:
9b:cc:68:9c:62:92:07:8e:bc:12:0a:a2:97:9b:c7:
fd:f1:8f:13:2a:07:7d:5c:75:17:10:49:9d:14:61:
62:9a:ec:09:25:a3:26:1c:b8:93:b5:9a:75:1e:3c:
bd:48:52:7e:64:05:c5:60:64:7b:d3:ca:76:e7:bb:
ba:26:25:dd:b7:d8:bc:c6:3c:1a:b2:18:f2:13:1c:
b4:e5:20:47:7e:a3:80:9e:c3:fe:54:51:49:09:5e:
d9:8f:cd:74:14:ab:c8:c2:8a:90:f8:3d:1d:d7:84:
7c:a7:cf:60:28:80:dc:38:3d:56:45:cc:00:1c:17:
6f:22:4a:25:14:14:1d:49:e4:17:f5:72:8c:95:88:
b5:83:1c:c1:dd:10:9d:bf:95:3f:3a:c0:0c:09:88:
d5:98:86:8d:1a:d0:e2:26:2f:f1:55:7f:15:51:9f:
69:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:3C:68:79:E1:07:4F:2C:A8:32:2C:90:0B:D2:3A:5A:C4:B8:2D:F7
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vTxoeeEHTyyoMiyQC9I6WsS4Lfc.roa
sbgp-ipAddrBlock: critical
IPv4:
49.98.23.0/24
Signature Algorithm: sha256WithRSAEncryption
df:29:49:97:94:0a:ee:4d:1d:36:88:31:66:60:58:d6:fc:da:
f6:26:e1:f4:67:c7:1c:d2:f7:40:aa:4a:2a:e3:17:92:12:76:
37:9b:a8:0d:db:c6:24:0f:8b:6b:af:34:a5:40:b7:30:cc:b2:
c3:0e:c3:41:4e:09:66:d0:eb:6b:4e:fb:b1:a8:82:0c:a7:75:
42:45:a5:ce:9e:69:fc:84:6c:49:2b:f2:ba:78:72:09:27:25:
ca:63:57:b3:7a:72:94:b3:f6:e0:6d:44:3c:5d:af:b4:de:83:
12:fc:bd:6d:b1:21:d3:18:bc:f2:d9:e5:33:93:d7:8a:56:c7:
1d:91:e9:c1:94:5a:45:61:54:2b:0d:e1:42:00:fb:0a:c1:f0:
0c:2b:eb:ec:c4:95:0a:0b:5d:24:15:69:8f:55:23:8e:5c:3f:
e3:3b:ff:23:aa:a7:98:9d:22:9b:c9:9b:ed:9d:43:f7:ab:bb:
c6:70:62:6d:99:41:73:f6:3b:3f:20:18:08:8c:c1:81:e6:03:
11:13:99:39:27:9e:f7:62:68:18:51:8f:24:a5:8d:4a:b2:36:
b1:e6:b6:90:0c:fa:ca:30:96:ae:c0:e9:7e:99:55:83:26:5e:
37:4d:cf:32:7e:fb:ca:83:a1:da:29:49:91:b3:f2:03:41:96:
de:33:4f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:46 2026 by rpki-client