
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/AWGk612bPlryeWecr8mWWUNONvw.roa
File: AWGk612bPlryeWecr8mWWUNONvw.roa (raw, json)
Hash identifier: XnYqF62q0WZ1dzb2OOvn6CV7yW/zQ1ilZNuFC0t5AQ0=
Subject key identifier: 01:61:A4:EB:5D:9B:3E:5A:F2:79:67:9C:AF:C9:96:59:43:4E:36:FC
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 02CF
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/AWGk612bPlryeWecr8mWWUNONvw.roa
Signing time: Tue 31 Mar 2026 07:34:50 +0000
ROA not before: Tue 31 Mar 2026 07:34:50 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 7684
IP address blocks: 49.212.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 719 (0x2cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Mar 31 07:34:50 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=0161A4EB5D9B3E5AF279679CAFC99659434E36FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:26:e4:57:9a:85:c0:31:59:49:5d:53:c1:b4:
80:a9:55:49:88:35:0a:f8:82:b6:e4:00:25:43:13:
a3:9d:0b:a9:64:dd:00:78:93:14:a8:3c:fd:3a:c7:
96:71:65:cb:8f:1e:26:a3:10:48:f8:17:c8:69:15:
71:d0:9f:61:a3:22:2c:ac:b1:1f:08:cd:06:ac:67:
c7:70:8c:d9:68:31:cc:0b:b9:d8:6f:a6:5b:6e:ee:
af:e3:df:8a:02:9d:93:cc:2d:2a:6d:5d:6f:d9:aa:
64:b8:1c:d2:da:98:16:4a:36:9d:7f:96:11:01:18:
23:e6:67:3f:f6:01:b7:b2:28:0f:7e:b8:84:ce:8b:
2c:55:47:3c:4a:d8:9f:63:bd:1c:8c:7b:71:d8:b4:
d4:17:a6:e3:f9:0b:3d:94:49:7f:f5:f0:0a:ee:f2:
d8:8a:12:59:cf:1f:66:8c:1b:b7:16:52:f6:df:93:
bf:ff:7f:7d:69:68:f2:49:00:a0:e3:03:20:f1:8f:
84:4c:ea:2b:08:f3:bc:f6:2d:85:c3:6c:d5:7a:67:
76:21:bb:cc:a7:66:42:d5:73:e0:a9:37:3e:e9:04:
20:bb:61:b0:d8:59:db:e2:66:93:fa:5e:ca:a6:da:
67:4c:85:f7:67:32:45:69:c3:8d:a3:ab:17:a7:e0:
bb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:61:A4:EB:5D:9B:3E:5A:F2:79:67:9C:AF:C9:96:59:43:4E:36:FC
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/AWGk612bPlryeWecr8mWWUNONvw.roa
sbgp-ipAddrBlock: critical
IPv4:
49.212.246.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:73:b7:ab:7f:ea:21:db:93:aa:de:ca:03:1e:28:04:b2:90:
0a:0f:56:91:20:7f:f5:9a:2d:7a:c4:6d:b8:b7:2a:0c:8e:af:
a7:3c:e3:14:65:e2:c5:f7:c5:91:48:33:9e:72:1c:0c:04:0f:
17:ab:48:d7:77:08:35:80:bf:38:4f:55:06:cf:03:66:b6:27:
f4:e2:8a:25:f3:d0:d6:79:9a:fc:0a:0b:c8:05:25:93:09:45:
0c:af:ea:1e:67:f9:c6:9b:a2:35:4c:46:be:f8:a0:e9:05:37:
db:0d:30:a6:0f:cd:12:8c:9b:91:18:a9:b8:2d:90:91:86:05:
8f:13:80:a0:78:57:69:02:77:14:77:39:e1:e1:69:56:36:5f:
fb:48:64:04:10:a6:33:70:06:f2:d9:67:97:1b:e4:a8:84:5b:
91:74:f9:5c:63:65:35:0f:5e:33:79:10:67:91:64:0b:b0:bc:
1d:6f:75:eb:ac:52:fe:e9:fd:36:21:c2:9b:ed:68:2b:f4:25:
65:9f:a6:83:88:39:09:8c:81:f5:73:ed:3e:3d:1a:21:f1:26:
ad:ea:ac:b4:6a:6a:9d:5d:9d:bc:ed:6f:d6:6d:3b:11:46:de:
37:7c:4d:c4:3d:48:48:eb:0f:f3:60:4b:28:5c:1c:33:66:33:
a6:38:ec:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:57:59 2026 by rpki-client