
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/zGwFut1UQjehcTAD9QspNXtOLYA.roa
File: zGwFut1UQjehcTAD9QspNXtOLYA.roa (raw, json)
Hash identifier: O30stCi301PxM39L4FswCsw+B3NQCfuhEedpTpfx9VY=
Subject key identifier: CC:6C:05:BA:DD:54:42:37:A1:71:30:03:F5:0B:29:35:7B:4E:2D:80
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1644
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zGwFut1UQjehcTAD9QspNXtOLYA.roa
Signing time: Tue 31 Mar 2026 08:01:29 +0000
ROA not before: Tue 31 Mar 2026 08:01:29 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.104.40.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5700 (0x1644)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:01:29 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=CC6C05BADD544237A1713003F50B29357B4E2D80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4c:00:64:fe:8f:14:be:8b:8c:66:a0:36:49:
ea:49:b6:bd:c1:6c:c3:98:e9:f0:e2:eb:96:74:a5:
3e:64:da:5b:a0:b1:28:7a:e6:6d:f2:0d:38:83:8d:
c8:32:ab:cf:8c:c8:5b:c2:10:ac:4b:d9:f9:f5:4f:
b0:63:7e:cb:73:52:60:f2:f4:d6:2a:57:c4:b5:e7:
1d:03:13:a4:89:e9:a3:4e:7b:96:c8:d4:3b:89:d1:
c1:01:58:50:dc:e2:9b:dc:e2:06:ed:00:01:31:36:
42:3f:fb:b5:f1:44:df:cd:b7:1d:ac:28:40:9a:62:
08:e0:cd:ca:ae:32:72:c1:38:b4:4c:01:0d:a9:78:
fe:5c:3e:a5:8c:72:27:e4:68:9f:c6:77:47:03:45:
ff:60:fc:62:2b:69:f3:3e:49:e8:ea:ab:b3:0d:a1:
a7:1d:33:c6:8d:4b:eb:13:90:2d:49:21:c1:69:c3:
06:d4:e7:03:d3:dd:ed:fe:ca:4f:58:e9:59:56:14:
e1:b4:d9:04:78:36:79:8a:f3:f6:dd:13:da:c8:03:
c0:72:cb:d1:00:56:3f:ac:b7:d7:0b:bd:1c:9a:b1:
18:84:2e:f5:63:0a:c4:f3:84:72:70:f0:38:c2:42:
b8:ff:f9:99:e1:3c:a7:b3:79:b3:b7:0f:5b:cf:37:
e7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:6C:05:BA:DD:54:42:37:A1:71:30:03:F5:0B:29:35:7B:4E:2D:80
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zGwFut1UQjehcTAD9QspNXtOLYA.roa
sbgp-ipAddrBlock: critical
IPv4:
49.104.40.0/23
Signature Algorithm: sha256WithRSAEncryption
c8:72:67:87:4e:ac:7c:7f:cd:e0:f8:56:4a:47:27:03:30:07:
78:ff:5b:97:d0:db:b7:c1:c4:99:98:6d:93:12:20:29:16:93:
70:be:57:14:99:fb:c6:75:81:c0:af:ce:05:71:c5:8a:b1:c3:
a7:a4:8e:d7:73:5b:55:fa:77:b0:bc:a8:00:6a:5b:50:de:4e:
58:11:73:3a:4e:41:05:89:e6:4b:73:ce:f3:18:83:85:84:e6:
a4:01:b6:8e:47:20:d9:81:08:a1:56:9d:a3:8f:4a:99:99:c8:
88:bb:06:8f:18:96:dc:28:c4:8f:b7:1c:39:27:73:7a:2f:1d:
c8:7f:73:ba:cc:da:f9:5b:e7:fe:41:88:28:5a:a3:61:de:46:
b6:a4:99:d6:7b:54:b9:f3:a2:a9:94:c8:7b:09:16:94:74:9b:
3b:ce:1a:a6:98:71:95:07:48:e0:c4:13:4b:9f:c4:91:70:e5:
f1:a6:a3:92:35:e4:7a:93:d0:d1:d0:e5:86:47:13:eb:96:8d:
c4:b3:c9:b6:5f:e9:00:0a:15:11:f2:d2:63:05:4c:85:b2:0b:
a4:5a:71:36:c1:1d:45:15:b5:c4:25:ef:10:b1:2c:fa:df:6e:
3a:8d:5b:15:d7:77:a4:bc:2a:c0:d7:e6:75:26:61:c8:66:fd:
12:39:b0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:53 2026 by rpki-client