
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-ox89swVwc57e70AQj0-Nz3Gn6Y.roa
File: -ox89swVwc57e70AQj0-Nz3Gn6Y.roa (raw, json)
Hash identifier: fpFRluBdnlkP+IoYDivnxRE50kxDR8FbFkZwyKGK6IA=
Subject key identifier: FA:8C:7C:F6:CC:15:C1:CE:7B:7B:BD:00:42:3D:3E:37:3D:C6:9F:A6
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 118B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-ox89swVwc57e70AQj0-Nz3Gn6Y.roa
Signing time: Sun 01 Mar 2026 02:27:07 +0000
ROA not before: Sun 01 Mar 2026 02:27:07 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.73.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4491 (0x118b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:27:07 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=FA8C7CF6CC15C1CE7B7BBD00423D3E373DC69FA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fe:03:b5:94:3d:5b:e0:76:ef:d6:0c:64:ae:
12:7b:13:81:3d:ea:04:6e:f3:7e:e2:37:ad:c7:92:
a5:48:cf:28:85:e3:d3:6a:29:ed:a2:63:d8:4d:df:
a4:37:e6:92:39:5e:c6:3e:23:da:6e:8c:9a:a7:17:
38:c7:8b:e3:5a:7b:97:3a:32:fa:5a:3b:db:7f:e9:
b1:62:5e:64:0a:5d:e0:97:4b:88:1d:16:0a:7b:64:
e9:78:23:57:97:6e:0d:20:7f:3c:20:c9:a4:16:d1:
5a:2a:a4:10:94:17:20:59:b8:af:ae:ff:86:aa:f8:
37:80:ce:7e:99:ef:b2:8f:85:d6:9e:ed:ae:93:1f:
40:c0:81:ba:40:7a:d6:5a:87:c5:93:21:20:e0:65:
3f:1d:0f:41:ad:6c:96:00:b8:c7:87:05:d5:1d:27:
56:a3:3e:6e:ef:04:cc:37:a9:bb:24:ec:22:54:84:
2d:9e:de:f7:78:78:61:57:c6:b1:ff:23:41:57:bf:
bf:08:6a:6f:07:ef:69:02:d1:da:d5:60:41:7d:e0:
d3:d7:89:53:26:e4:61:51:0e:a6:9b:01:5a:8d:3c:
7e:0f:4f:c9:d3:50:3a:f9:7f:5d:b7:b5:b9:c8:91:
34:8d:c9:38:34:66:ca:b9:31:8d:51:3c:47:98:b4:
9d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8C:7C:F6:CC:15:C1:CE:7B:7B:BD:00:42:3D:3E:37:3D:C6:9F:A6
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-ox89swVwc57e70AQj0-Nz3Gn6Y.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.73.208.0/20
Signature Algorithm: sha256WithRSAEncryption
39:b5:4c:5f:bc:c2:b5:72:74:48:38:44:81:ed:ac:f2:05:ed:
81:9a:f1:0f:ed:51:eb:0c:d0:84:3f:e1:f3:05:d6:52:02:22:
04:43:16:42:a6:da:4f:aa:af:20:1d:f3:49:e1:51:2c:af:64:
60:8b:e7:57:7c:b2:f4:31:d0:56:a0:dd:46:7f:0f:2f:f8:f7:
a2:db:dc:1d:7f:be:78:76:3e:05:52:06:84:33:3c:30:73:af:
4f:7a:19:26:72:02:e6:52:48:f6:fd:9d:01:86:1a:a3:5e:48:
89:9f:a3:aa:93:38:ba:d1:65:f0:bd:79:b3:52:29:2b:ac:87:
8f:8b:0f:47:58:67:f3:bc:c2:42:ae:c5:ea:67:d5:7f:38:66:
ba:ad:66:f6:0e:e7:89:da:5e:21:e8:f0:10:09:21:00:80:27:
f0:95:20:cf:62:ec:4d:7b:44:36:92:f3:d0:68:be:da:a6:8c:
09:6a:85:70:47:b0:56:63:6d:b1:bc:07:fb:26:c3:b0:d6:f8:
34:78:b7:8e:57:a7:71:03:d5:52:1f:7e:bf:e5:5e:34:47:16:
57:86:0c:7b:71:83:55:8c:44:e9:30:78:96:e3:d9:8f:0f:9b:
27:5c:e9:0d:c5:cd:34:ef:0c:8b:e9:13:66:93:63:53:4e:52:
7b:11:04:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:38:38 2026 by rpki-client