
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/vezg4euzFKThSnIGx3TJsKzZN1U.roa
File: vezg4euzFKThSnIGx3TJsKzZN1U.roa (raw, json)
Hash identifier: quH5kFW7yH8tHDbPFpp2EgnIFwjyOSViMeJHfKhWJMo=
Subject key identifier: BD:EC:E0:E1:EB:B3:14:A4:E1:4A:72:06:C7:74:C9:B0:AC:D9:37:55
Certificate issuer: /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial: AD
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vezg4euzFKThSnIGx3TJsKzZN1U.roa
Signing time: Tue 31 Mar 2026 07:55:18 +0000
ROA not before: Tue 31 Mar 2026 07:55:18 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 160.249.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173 (0xad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Validity
Not Before: Mar 31 07:55:18 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=BDECE0E1EBB314A4E14A7206C774C9B0ACD93755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:04:8a:0c:95:28:da:89:7c:8b:f3:64:b1:be:
d1:6e:70:c8:5b:70:d6:7e:bf:98:6f:57:c6:d8:11:
06:b6:03:ea:0a:ce:9d:bd:36:4d:70:2f:c5:6b:48:
c7:cf:9b:77:e3:3d:8c:14:eb:d8:19:f3:76:bf:db:
d3:db:d9:d5:c9:f5:a5:df:f9:37:64:4b:dd:ba:76:
2e:c7:9b:97:0c:0b:7b:56:38:34:da:7c:d2:9d:7b:
64:55:8c:83:5f:18:57:37:f4:8b:5f:31:e8:6c:db:
66:1d:44:4b:62:8f:c8:74:9c:94:36:bc:fe:ee:24:
c7:4c:6e:ff:60:c9:af:6a:27:0e:08:8a:67:fa:f4:
69:41:74:5c:e8:4d:f6:f3:0b:7f:88:c9:be:ec:8c:
f7:f0:2f:91:f9:dc:33:c9:ab:8a:be:50:20:c7:2f:
6c:28:81:af:cb:d4:94:52:79:45:24:82:a3:10:6b:
7f:c8:59:bf:d2:d9:e4:d6:1e:8d:8c:6b:b4:6c:b9:
0c:7b:02:19:a6:8b:44:dc:c5:d1:6a:69:39:a2:05:
54:d6:d3:af:06:00:6d:e4:cd:07:35:d1:ae:90:36:
cc:01:27:e5:7f:32:53:aa:b2:0f:bf:24:2c:e6:dc:
e0:78:60:b1:60:72:4c:a5:bd:0c:0d:52:f7:31:66:
fc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:EC:E0:E1:EB:B3:14:A4:E1:4A:72:06:C7:74:C9:B0:AC:D9:37:55
X509v3 Authority Key Identifier:
keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vezg4euzFKThSnIGx3TJsKzZN1U.roa
sbgp-ipAddrBlock: critical
IPv4:
160.249.64.0/20
Signature Algorithm: sha256WithRSAEncryption
b0:40:ea:35:43:cc:85:2f:10:ac:f8:ce:6f:dc:79:42:56:8f:
63:6f:81:15:cc:67:8e:05:ab:51:af:b3:ad:b9:5b:5a:95:ed:
06:ab:c0:43:87:c1:7b:14:34:73:ec:9b:6c:21:57:e1:f5:3a:
23:4a:94:0d:1e:91:76:d5:a5:48:d9:10:77:88:30:2d:27:63:
5f:b7:8d:b0:58:94:28:9e:ee:42:01:95:fb:93:f0:5a:32:ea:
38:89:ff:20:89:63:02:5b:9f:70:57:81:4a:69:cd:34:e3:13:
24:34:0e:56:a5:b6:ef:11:4d:87:8c:01:a5:8f:6f:53:29:e7:
ff:55:ca:db:91:26:47:ef:40:1f:3a:c1:9e:1d:c0:6a:01:41:
34:85:90:96:cc:14:f0:1a:db:6e:14:a0:b7:04:c3:5a:82:3f:
ed:65:88:4e:d5:cd:4d:03:ae:d4:6c:fa:4f:fa:92:d9:e9:26:
77:21:96:ec:86:c8:a2:d5:c0:4b:8d:79:b4:1e:b3:91:26:73:
65:f8:54:81:23:27:fb:4a:3f:b6:ae:dd:a6:5f:ee:66:fe:c9:
22:04:e7:2d:27:7a:7b:c9:e2:de:e0:fd:9f:aa:8b:d1:79:be:
70:1f:d1:8f:7d:f4:7c:15:19:30:7c:f8:b5:96:44:ef:b5:e5:
c9:e1:11:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:23:34 2026 by rpki-client