
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/hjS5-DqIQJMmFqR_uymwUYniB8Q.roa
File: hjS5-DqIQJMmFqR_uymwUYniB8Q.roa (raw, json)
Hash identifier: u6QuoamxOVIc8bqseP5APMKFkfLQErbaMJPPs3SoUNg=
Subject key identifier: 86:34:B9:F8:3A:88:40:93:26:16:A4:7F:BB:29:B0:51:89:E2:07:C4
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1175
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hjS5-DqIQJMmFqR_uymwUYniB8Q.roa
Signing time: Sun 01 Mar 2026 02:22:03 +0000
ROA not before: Sun 01 Mar 2026 02:22:03 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.104.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:24:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4469 (0x1175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:22:03 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=8634B9F83A8840932616A47FBB29B05189E207C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:84:38:20:78:4d:07:53:4d:a4:6e:28:e2:7a:
ab:bc:32:31:6c:37:90:c0:be:00:fc:bb:93:cb:e7:
69:13:37:78:9f:28:93:cd:15:e9:d5:49:2a:61:0d:
dd:ed:64:36:55:ac:29:40:f3:d2:a6:1a:67:32:d6:
25:11:58:b7:cc:4b:dd:f5:c7:ab:69:a3:81:e7:1b:
6a:29:dc:62:f4:03:99:d6:21:8b:50:72:b0:69:a3:
53:0d:1f:14:77:79:8e:fc:c6:da:5b:1f:76:ee:49:
70:0c:ed:4e:1a:4b:f9:91:cc:1e:a7:5a:59:25:4f:
d7:c0:9b:19:24:78:23:3b:2f:20:5a:19:5a:4b:d1:
ec:90:62:01:7c:a6:59:32:81:ed:00:80:a9:e1:3d:
30:39:90:14:3f:16:d0:5d:ef:c3:d3:b8:95:ab:f3:
78:1d:d6:6a:09:b5:01:92:2c:a3:8b:26:c2:d7:6f:
80:bf:95:28:75:44:55:61:0c:a0:d7:93:86:9a:84:
a0:ed:6f:7a:3b:a1:35:76:04:ee:f0:34:72:89:b0:
8e:ed:29:13:5b:eb:d5:01:1a:2e:66:6c:f1:f0:ff:
40:2b:c6:e1:2f:8e:2e:f4:3a:4a:26:af:06:16:7c:
7a:5f:11:5c:7d:7e:3c:bc:88:94:cb:36:76:a4:d2:
1b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:34:B9:F8:3A:88:40:93:26:16:A4:7F:BB:29:B0:51:89:E2:07:C4
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hjS5-DqIQJMmFqR_uymwUYniB8Q.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.104.44.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:13:3a:b1:34:d6:2f:c7:d9:3a:84:f2:d3:7c:79:1d:32:25:
eb:6d:5d:26:79:80:ff:f9:73:38:d4:9b:96:c3:29:44:9a:7b:
f5:08:2e:ed:51:ad:28:6e:7a:d5:30:51:3e:89:18:6a:74:2b:
db:f0:36:6f:27:98:b0:3b:b3:5a:c7:c5:3b:c7:0d:5e:1e:4e:
2d:c3:d4:16:63:4d:88:bf:be:77:d6:5a:52:1d:b0:c6:03:a9:
bd:79:88:74:64:d5:af:b9:81:0e:5f:94:e2:3a:d8:a5:96:08:
b5:31:33:22:e6:5e:46:66:ac:c5:bc:f0:d7:96:c6:97:38:39:
0a:c4:f7:7a:a8:b1:28:0d:3a:23:7c:3c:d8:6b:88:10:61:1f:
f3:ee:d2:4d:81:f4:1d:b5:0f:ef:91:c0:91:e5:5f:35:d3:86:
3d:e3:03:39:f4:e8:11:84:86:60:b3:ed:62:e6:9b:07:ff:25:
15:02:a7:bc:90:fb:dc:96:f3:9b:27:0d:d3:74:f4:e0:b3:d8:
c2:62:01:9f:9e:43:32:ea:3c:ef:ec:44:d2:f5:02:75:17:a8:
1e:a1:8f:62:f3:53:47:25:73:be:ed:38:47:f4:18:21:99:9c:
48:8f:3e:e4:8c:86:8b:19:ba:07:48:c9:5b:7f:e1:80:72:7c:
39:cd:76:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:36 2026 by rpki-client