
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/wSDYybsfFtsoETkaw-FvFECJ-Yo.roa
File: wSDYybsfFtsoETkaw-FvFECJ-Yo.roa (raw, json)
Hash identifier: DXizbdP8Ertu7bUyTqI9IH2rKVi7pKy5F9WVtovHTQ8=
Subject key identifier: C1:20:D8:C9:BB:1F:16:DB:28:11:39:1A:C3:E1:6F:14:40:89:F9:8A
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1769
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wSDYybsfFtsoETkaw-FvFECJ-Yo.roa
Signing time: Tue 31 Mar 2026 08:03:45 +0000
ROA not before: Tue 31 Mar 2026 08:03:45 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.102.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5993 (0x1769)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:03:45 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=C120D8C9BB1F16DB2811391AC3E16F144089F98A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b8:e8:79:97:10:a8:fb:24:36:4a:44:75:ca:
47:32:39:4a:ad:b3:6d:9e:64:b0:87:1e:9f:b1:6d:
bd:11:77:b5:00:74:25:93:84:1a:34:2a:55:90:76:
f5:81:d9:de:a2:2b:4a:00:83:04:29:13:73:97:c1:
fe:b2:a0:8a:9c:37:a4:f5:56:95:41:41:5f:97:a3:
6a:db:72:7c:6c:94:cf:d1:5b:83:1a:df:5a:a0:d8:
9a:ef:57:98:ea:f8:90:3c:3e:16:de:c5:0f:86:33:
de:48:3d:60:1a:1c:87:d6:6e:1e:2a:b6:b6:5b:91:
98:d7:0c:ee:60:66:d3:c4:ce:27:b0:d0:c0:19:3e:
a2:d0:e7:2b:29:40:19:7b:9b:c0:45:9b:d9:bc:15:
44:82:3a:d7:66:36:94:b1:8d:99:a4:c3:07:f5:cd:
31:a3:e2:7f:0a:ef:8b:05:93:cb:a8:44:32:21:89:
80:e7:3c:8a:4b:94:99:4e:c1:a3:a4:6a:1d:f4:b4:
5a:53:c6:4e:d1:d8:3a:2d:dc:7f:13:2d:63:d0:c7:
04:cb:52:6c:4d:ca:09:77:d4:41:41:13:b8:7d:7d:
26:2a:bd:5f:b6:05:3a:55:6c:c3:59:24:33:2f:8b:
ae:f1:76:78:40:d7:e3:01:35:8c:6d:1e:01:b5:f9:
1e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:20:D8:C9:BB:1F:16:DB:28:11:39:1A:C3:E1:6F:14:40:89:F9:8A
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wSDYybsfFtsoETkaw-FvFECJ-Yo.roa
sbgp-ipAddrBlock: critical
IPv4:
49.102.159.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:ee:43:cf:3c:a9:7f:8e:70:1b:e5:00:25:cd:34:5f:a9:7b:
c6:64:6c:fd:2d:8a:0d:b2:6a:9e:f6:60:33:7b:f5:10:c4:7f:
a9:c6:22:97:77:a0:af:70:25:26:83:09:50:c7:fd:24:7f:f0:
bf:e6:08:12:c2:7f:e6:84:4b:54:7b:76:b7:8f:f1:26:60:db:
86:14:e4:7d:2c:fc:b3:5f:25:65:58:a8:8e:03:f6:b1:89:3e:
43:fb:08:86:0e:ff:75:2f:93:6e:0b:6f:cc:41:3f:08:e9:4f:
a3:fd:17:66:dd:30:fd:21:4b:e1:a1:98:34:a0:d8:fc:08:52:
a1:57:ca:33:93:30:8c:8f:1b:92:34:37:94:4f:9e:b2:cd:50:
43:53:53:1e:42:16:05:6a:d5:8e:9b:30:c5:15:2d:22:be:cf:
f7:c6:78:93:c8:b1:57:38:0b:86:5e:8e:98:3c:f2:61:4c:6f:
d3:c9:8a:4c:6f:d4:72:a5:3e:2d:2d:9b:6a:31:ac:47:2b:b6:
01:70:43:a1:2c:9b:c9:7f:b1:ea:32:d6:45:88:5a:31:09:ad:
a6:4f:69:15:c1:85:51:14:b6:15:14:f2:7e:14:9b:61:a0:c6:
9e:76:00:b0:00:e3:ba:23:21:65:46:67:27:1c:de:04:2e:3f:
73:42:d3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:32 2026 by rpki-client