
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/yPH8xDNcubX9UTMqeaSE89RSUBU.roa
File: yPH8xDNcubX9UTMqeaSE89RSUBU.roa (raw, json)
Hash identifier: dl4+p0KQdnKa2i5EUlkXWcSwoq9mQXAESxRZ7R2VPQw=
Subject key identifier: C8:F1:FC:C4:33:5C:B9:B5:FD:51:33:2A:79:A4:84:F3:D4:52:50:15
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 182A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yPH8xDNcubX9UTMqeaSE89RSUBU.roa
Signing time: Tue 31 Mar 2026 08:05:24 +0000
ROA not before: Tue 31 Mar 2026 08:05:24 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.109.208.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6186 (0x182a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:05:24 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=C8F1FCC4335CB9B5FD51332A79A484F3D4525015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:13:12:c6:06:42:6e:8b:6a:0f:2f:e0:30:f0:
57:7f:b4:03:20:ec:67:94:64:88:a2:f8:4c:88:11:
a1:d2:ef:d0:57:f6:ba:ae:3a:c7:ef:a7:a2:29:4f:
fd:2c:40:26:b5:63:1d:83:bc:bd:fb:6e:ef:ab:d6:
45:aa:07:15:ff:b3:cd:9c:7a:d8:72:d2:37:7b:5b:
f9:fe:a5:a9:4e:10:a3:f6:03:b8:ec:92:ba:8b:6f:
29:12:85:d3:4b:75:9a:ab:ce:f1:28:79:53:a2:ec:
57:17:76:76:f6:b7:ed:28:41:af:1a:37:81:06:0f:
5c:9a:c9:a6:67:d4:39:3d:73:8d:13:fb:a6:f0:5a:
db:a2:e2:11:e9:b9:48:88:dd:78:1b:d8:36:60:7f:
52:86:1c:68:1b:af:e9:b6:27:e1:61:b6:da:b3:fd:
aa:eb:4e:66:8b:da:d1:84:c0:3f:e4:ef:52:ae:0f:
87:99:12:02:ff:14:a2:53:92:bf:8a:c1:6b:6e:e1:
b1:e9:f0:27:1e:df:e4:29:c8:20:97:12:d9:b9:1f:
f3:22:e1:b9:08:d7:02:f0:9c:03:e2:e5:bb:2e:8c:
b0:0b:a0:08:6e:41:a3:ba:9e:02:fb:58:1e:37:a9:
f5:9d:c9:61:30:8d:07:12:c7:01:06:02:27:96:fb:
b1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F1:FC:C4:33:5C:B9:B5:FD:51:33:2A:79:A4:84:F3:D4:52:50:15
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yPH8xDNcubX9UTMqeaSE89RSUBU.roa
sbgp-ipAddrBlock: critical
IPv4:
49.109.208.0/21
Signature Algorithm: sha256WithRSAEncryption
29:df:2a:d0:88:b4:78:cd:e9:62:11:14:97:ff:7e:20:be:c3:
38:53:23:e0:c0:de:10:26:ea:8e:3f:f2:c2:3d:bf:2d:58:44:
aa:95:0f:ca:5e:53:09:b7:64:89:ec:31:e8:12:a2:90:f4:05:
de:91:73:9e:5e:5c:1e:de:e5:7a:71:6d:58:d8:d3:b3:81:41:
1d:9e:dd:70:8b:e1:35:5e:4c:9f:80:b6:1f:69:9b:ae:90:00:
75:02:ba:21:27:d5:1a:0d:17:9d:bc:af:29:78:77:ef:2a:93:
70:3f:78:0c:ce:da:81:d4:b5:e7:5f:18:ee:54:4f:c9:30:c9:
93:86:61:7e:d0:b5:e5:a1:48:b8:25:39:d3:7c:1c:01:b3:3b:
f5:2b:b6:0d:27:d4:8f:d0:1a:a0:70:96:38:ec:19:a0:f0:9e:
f2:35:3e:d7:84:f0:8b:25:4f:e3:e3:f8:7b:e2:c9:22:63:09:
cf:78:9e:17:1d:ba:e2:fa:1e:a4:3b:be:93:b3:11:28:7b:d4:
92:0a:73:53:d0:76:c6:63:a0:e8:ff:85:12:31:ab:85:16:d0:
a9:94:61:c6:52:d3:ab:63:38:89:39:ac:0f:9b:0e:1c:87:6a:
b3:a1:4a:18:e5:f5:b6:c3:68:dc:65:b2:5f:60:15:b5:7f:f7:
de:9d:b7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:32 2026 by rpki-client