
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Mu4fQZF3-eGG90Gwe1lVf3Za6co.roa
File: Mu4fQZF3-eGG90Gwe1lVf3Za6co.roa (raw, json)
Hash identifier: Cb2k0Xzo1kaC/XiXnXKTaPOOyGkKHcaf1iRYFS+Y2FU=
Subject key identifier: 32:EE:1F:41:91:77:F9:E1:86:F7:41:B0:7B:59:55:7F:76:5A:E9:CA
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 104C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Mu4fQZF3-eGG90Gwe1lVf3Za6co.roa
Signing time: Sun 01 Feb 2026 01:32:38 +0000
ROA not before: Sun 01 Feb 2026 01:32:38 +0000
ROA not after: Fri 15 Jan 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.96.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Feb 2026 12:38:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4172 (0x104c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Feb 1 01:32:38 2026 GMT
Not After : Jan 15 01:30:02 2027 GMT
Subject: CN=32EE1F419177F9E186F741B07B59557F765AE9CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fc:d1:25:37:02:b0:a4:a3:ea:66:7d:fe:49:
24:94:da:60:5f:6f:61:50:86:80:65:d6:3c:bd:d0:
a9:d8:7c:45:15:b6:c8:2e:e3:ce:a0:20:25:79:1c:
21:35:c3:51:b0:01:29:88:e9:06:db:ea:aa:25:0a:
82:91:73:b2:36:b6:f4:98:38:f5:64:01:ea:c5:f7:
c2:0e:b1:c1:f1:98:c2:70:28:3d:2d:d4:ad:16:f8:
12:42:98:36:32:26:60:a0:80:a8:7e:41:97:62:27:
d3:b2:af:a7:5a:d8:2a:fc:05:87:95:8f:5f:ee:d8:
55:6f:36:16:d9:21:7e:a6:86:76:da:cc:d7:d9:a9:
bc:7d:e2:4a:a5:b6:ea:49:fb:36:77:69:bf:1d:5c:
bc:e9:42:cd:2e:50:74:c6:fc:c2:c3:54:5f:47:5b:
cd:10:fd:74:e9:d5:8b:12:45:72:ba:86:c9:5c:bb:
8d:85:81:35:9f:44:23:6f:34:6c:7d:d8:70:c3:50:
37:fd:1c:ce:93:f8:1f:f2:b4:f5:3f:7d:bc:89:24:
f1:1f:9f:7e:58:7b:01:14:10:16:8e:43:8c:e4:16:
a3:0d:41:60:29:39:c4:a0:8d:34:63:eb:b6:01:da:
49:4d:8e:91:25:ae:a7:e3:61:6e:f1:fb:a9:ab:f1:
9a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EE:1F:41:91:77:F9:E1:86:F7:41:B0:7B:59:55:7F:76:5A:E9:CA
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Mu4fQZF3-eGG90Gwe1lVf3Za6co.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.96.147.0/24
Signature Algorithm: sha256WithRSAEncryption
31:b9:b8:63:71:81:e8:4b:41:0d:95:2b:d6:e9:2c:8d:41:fb:
12:de:3e:42:ca:a4:1a:be:ae:db:8e:a2:d1:47:6f:d0:61:9d:
26:9a:7d:1b:ab:fd:7e:78:13:f4:c1:b6:07:35:d0:d8:e1:c5:
35:7e:77:23:ef:2d:63:4f:68:ef:f1:04:6e:b7:c4:d7:b7:1e:
49:73:28:d6:a5:9c:2b:2c:c3:d0:7b:3a:65:ee:45:56:86:54:
2f:b6:9a:e2:cc:4a:22:21:f8:4c:6d:1c:d6:6e:ea:17:67:d0:
62:a9:09:e3:c0:e2:0b:46:ac:ee:b1:e3:55:5b:5a:4d:b6:d6:
a0:9a:e4:ae:5a:d6:05:38:d1:80:69:09:03:09:98:5c:db:6c:
37:75:c3:5e:75:9c:5e:a2:70:cf:55:14:b0:7f:3a:6a:47:54:
9a:20:eb:c0:b9:f1:1d:18:6c:69:46:7d:9d:43:86:5b:ff:c7:
c4:62:28:ce:3f:1b:95:52:3f:11:f5:22:a1:bf:58:4e:ed:1d:
3e:3d:0f:de:40:a1:ea:d6:21:e0:4f:ae:91:9d:c2:d2:2d:71:
e2:29:24:cf:10:b8:2f:59:1d:8d:d4:21:ea:4a:fb:bc:0e:81:
7a:a8:c9:0f:35:a4:a2:66:d7:7b:d0:bc:13:2f:1d:42:38:65:
af:a2:4a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 14:59:07 2026 by rpki-client