
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-L4eQG4kMXSy0QaD5vSjLm7s-uw.roa
File: -L4eQG4kMXSy0QaD5vSjLm7s-uw.roa (raw, json)
Hash identifier: mXqNyAvPIO0JGHbO3NBcJUm40IJpW/O/Vlgo2dOPCVk=
Subject key identifier: F8:BE:1E:40:6E:24:31:74:B2:D1:06:83:E6:F4:A3:2E:6E:EC:FA:EC
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1091
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-L4eQG4kMXSy0QaD5vSjLm7s-uw.roa
Signing time: Sun 01 Mar 2026 01:44:40 +0000
ROA not before: Sun 01 Mar 2026 01:44:40 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 220.210.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:24:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4241 (0x1091)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 01:44:40 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=F8BE1E406E243174B2D10683E6F4A32E6EECFAEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e6:1e:b9:58:6d:72:fb:aa:50:38:75:e5:f9:
bd:30:61:12:73:6a:44:7a:eb:50:dd:2d:12:ca:05:
2f:64:59:42:7b:0c:e1:78:1d:2c:66:69:d8:c3:15:
03:1a:47:9b:f3:8f:51:81:19:ff:07:7b:d4:73:28:
c6:77:13:af:ae:2c:b7:43:b4:8c:e8:fe:1b:e9:ad:
f4:dd:c9:eb:a1:a4:74:4f:55:a9:bf:8c:d5:68:58:
15:d3:0f:7f:5e:1b:db:47:c0:08:2a:b4:39:b7:0a:
4b:22:39:56:77:cc:77:74:12:08:86:e1:af:ba:bd:
14:84:6a:5d:f1:bc:1e:5a:51:2f:9c:b6:8b:00:10:
4d:07:7d:c6:ce:bf:87:10:61:0b:99:1f:3a:ca:6f:
78:44:0e:3f:41:a7:dd:80:64:7e:8d:4c:51:e3:fd:
21:c8:e1:17:a1:8e:0c:cb:3b:55:70:65:d8:94:47:
ce:32:e6:d3:03:97:74:84:fe:60:30:8d:48:1b:97:
ce:4b:d5:e2:07:fc:a7:46:27:3e:6e:31:b1:38:33:
45:31:e2:a6:d3:73:a7:bf:03:7d:1f:17:7b:c2:11:
28:a3:74:42:e1:68:95:ef:a4:87:00:dd:7a:24:17:
e0:70:5d:9d:2c:8c:9e:5f:bd:92:32:21:37:ca:b6:
3c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BE:1E:40:6E:24:31:74:B2:D1:06:83:E6:F4:A3:2E:6E:EC:FA:EC
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-L4eQG4kMXSy0QaD5vSjLm7s-uw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.210.64.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:c4:eb:41:98:c8:63:ce:83:d4:dd:97:29:44:f4:f1:ae:9e:
92:b1:39:5e:88:b2:10:da:e3:49:90:08:f4:30:6f:97:c1:9b:
c1:b8:f0:d6:fc:b5:d3:e4:d8:5e:c4:64:2b:93:dc:48:24:a8:
48:59:15:85:6d:69:b3:e1:39:4d:19:9d:0f:60:8d:54:a5:91:
34:a0:0c:01:cf:ab:84:30:58:f2:fb:1f:a6:d4:21:5a:5f:b8:
24:f3:ae:19:20:b5:3d:88:4a:ac:9b:5f:49:a9:e0:e0:85:30:
96:ce:37:44:f5:09:da:cf:c3:65:62:16:be:69:c5:01:30:8c:
5f:b1:6a:d8:73:84:85:44:d8:f1:ad:5f:e6:f9:6c:52:d5:08:
ad:2e:67:da:51:0c:a1:f2:8b:32:8f:59:36:7a:76:77:46:0d:
59:5c:5e:15:a0:4e:50:c6:b4:d4:ad:a7:61:92:35:f7:b3:f5:
9f:99:9f:19:50:29:1a:3c:23:ad:03:d8:14:68:a7:ea:be:e3:
d8:9a:1c:2e:26:93:08:39:c0:88:39:97:a9:22:f0:39:7f:2f:
fc:0d:f2:22:eb:27:89:f1:5d:d6:c2:74:bd:a8:a6:84:05:eb:
4e:e4:19:94:a7:cf:76:b3:35:bc:f8:ae:d9:bb:a9:b0:1b:23:
30:47:46:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:54:10 2026 by rpki-client