
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/03jbVE7r1jT8hUQ7Y9VbjZAtgJ4.roa
File: 03jbVE7r1jT8hUQ7Y9VbjZAtgJ4.roa (raw, json)
Hash identifier: UE5YVBvIoXDpACNU+FYdSs1OBezFz3LFE0MSWX260Gg=
Subject key identifier: D3:78:DB:54:4E:EB:D6:34:FC:85:44:3B:63:D5:5B:8D:90:2D:80:9E
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 133D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/03jbVE7r1jT8hUQ7Y9VbjZAtgJ4.roa
Signing time: Sun 01 Mar 2026 03:40:35 +0000
ROA not before: Sun 01 Mar 2026 03:40:35 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.120.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4925 (0x133d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 03:40:35 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=D378DB544EEBD634FC85443B63D55B8D902D809E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:25:8c:87:34:68:2b:ee:7d:86:5e:95:43:73:
f9:e7:8f:fe:10:56:8f:d1:de:f3:28:f8:62:65:0b:
5e:54:40:d0:ec:68:42:67:3b:52:59:f7:25:05:6a:
7a:99:04:73:51:09:c2:c3:c4:b2:a4:24:51:38:a0:
7d:8b:7d:2a:21:8a:84:3c:58:6b:84:42:66:b5:fe:
b1:c3:e5:36:15:51:bd:e4:fc:ea:51:8a:27:08:91:
22:bf:77:3f:4e:ef:99:ca:2f:60:8c:a5:2d:88:94:
b5:fb:95:a8:86:ac:ab:d4:f1:7d:ef:bf:dd:cc:ea:
75:32:c2:b2:6d:3d:b4:7b:29:3a:05:86:f3:f6:5d:
3a:b9:ce:ec:e7:e4:a5:8e:ba:03:3e:32:27:86:cc:
2c:29:ed:39:b0:d8:ec:6b:a4:4c:49:f6:04:e4:eb:
33:fb:ea:2e:3a:8a:1b:36:b5:a8:d6:36:46:80:8f:
fa:8a:a3:10:f4:db:e4:53:94:fb:b7:db:81:a2:e2:
0f:f5:6c:1a:dc:79:b6:f0:f4:fd:b7:13:1e:73:2b:
f6:74:d2:f1:6c:6d:bc:75:be:d6:d0:ba:1d:b8:4b:
68:2b:96:57:24:d7:3e:c9:6a:7b:8d:c0:02:6a:ff:
7b:a8:e3:8e:24:d7:47:48:9a:59:b8:af:33:64:1f:
05:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:78:DB:54:4E:EB:D6:34:FC:85:44:3B:63:D5:5B:8D:90:2D:80:9E
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/03jbVE7r1jT8hUQ7Y9VbjZAtgJ4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.120.0/23
Signature Algorithm: sha256WithRSAEncryption
76:5c:87:ec:7b:af:b6:06:5e:a6:3a:4b:4f:c0:d7:57:2a:75:
37:0e:41:0c:d3:5e:01:d4:c7:a7:ed:1c:d9:60:57:17:1f:6a:
9b:23:db:75:ec:c5:77:e8:7a:85:e1:69:ee:15:5c:25:41:eb:
23:4b:90:da:40:21:23:6a:c2:a4:27:2f:5d:5e:98:21:86:23:
79:28:bf:bc:cc:f0:f4:25:f4:cf:ea:f3:6f:2f:af:57:67:c1:
c2:4b:ca:0b:42:10:7a:86:5e:83:8a:8e:7a:49:18:af:72:9c:
15:d0:19:24:84:70:f4:ae:22:4a:79:52:ac:ad:e6:e9:d8:5a:
db:41:01:47:b0:c1:7b:94:17:84:aa:43:55:58:c0:ef:68:df:
af:46:e5:8a:3b:3a:21:55:44:1b:39:d3:fd:31:81:5a:37:53:
78:b9:21:b5:9c:72:56:6e:77:ad:fc:07:44:68:51:f6:1c:68:
75:e0:5a:6c:b9:3f:f0:a4:74:ed:7c:bf:7a:6c:5d:9d:e1:ca:
d0:f4:85:52:1f:c8:3e:9b:13:4a:f3:f5:93:9f:4e:d7:59:0c:
f6:de:52:7e:14:aa:44:8a:e3:2d:ea:6d:4e:99:5e:f0:3e:35:
60:91:3c:ef:fc:c3:b1:7f:23:3e:25:2c:2c:ce:b9:64:55:55:
ab:75:81:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:18:34 2026 by rpki-client