
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/0C600-dQZqCC1uqeQXa4lEsIzyw.roa
File: 0C600-dQZqCC1uqeQXa4lEsIzyw.roa (raw, json)
Hash identifier: Yf07NCCsDnUmY/yueuAfZr9ct9Licn6KVrQgZt+iYFc=
Subject key identifier: D0:2E:B4:D3:E7:50:66:A0:82:D6:EA:9E:41:76:B8:94:4B:08:CF:2C
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 10E9
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0C600-dQZqCC1uqeQXa4lEsIzyw.roa
Signing time: Sun 01 Mar 2026 01:58:41 +0000
ROA not before: Sun 01 Mar 2026 01:58:41 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.108.240.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4329 (0x10e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 01:58:41 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=D02EB4D3E75066A082D6EA9E4176B8944B08CF2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2b:33:d1:f4:18:40:07:6e:2b:fd:7c:a4:31:
2b:e0:75:b0:81:39:df:22:33:29:46:8c:fb:c6:ed:
75:37:ab:de:34:0c:1c:c7:ce:de:d4:ad:eb:8c:08:
40:91:56:51:f9:9d:e5:82:31:eb:db:ef:8e:2e:0c:
f7:19:52:36:40:32:f5:32:23:cb:ae:0c:80:c0:b1:
71:25:d5:7e:c6:5f:0a:11:1f:c6:dc:89:2a:72:8c:
43:59:e0:01:92:49:96:b0:47:2e:b7:46:4d:7a:e9:
ca:a9:85:73:4e:de:24:95:fe:8a:1a:61:63:95:fd:
81:51:f7:0b:f3:e6:56:7d:8e:fd:06:2d:f1:ea:07:
d4:d2:f6:36:a4:04:e9:8d:85:79:7f:67:0c:31:eb:
56:2b:32:ef:3f:74:0e:e9:63:5a:0b:de:97:83:ed:
30:fc:73:06:e5:5e:82:c6:96:14:cd:01:50:7a:45:
28:0b:2a:6d:27:4d:a6:02:b1:ff:ae:d0:00:5f:dc:
17:97:83:af:b2:5a:9c:a2:93:b3:e2:9e:d2:6f:bb:
0c:92:bf:32:b3:c8:2a:f1:2b:9f:64:0c:d3:6e:45:
bc:97:f2:bd:c4:44:3f:3f:aa:69:38:48:ed:4e:a7:
ae:ba:32:e8:51:24:0c:de:b7:f6:df:9c:43:6e:2f:
af:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2E:B4:D3:E7:50:66:A0:82:D6:EA:9E:41:76:B8:94:4B:08:CF:2C
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0C600-dQZqCC1uqeQXa4lEsIzyw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.108.240.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:a6:71:1f:66:b9:cc:b9:3c:6b:3e:02:d8:65:a7:66:45:50:
e5:a9:8e:c8:d0:17:61:be:de:c0:7f:67:c1:7e:5f:cb:9c:cc:
7d:ca:11:ef:1d:2a:b3:bf:b3:46:68:97:83:58:47:e6:ae:23:
cb:47:a7:ff:11:b3:d5:cc:b3:45:57:b5:64:78:68:fb:8a:3f:
72:31:30:ef:c1:3a:c5:47:70:50:b5:ce:43:7e:37:b8:fb:c1:
b6:77:85:72:86:4b:7e:9c:34:10:d9:00:e4:03:27:ac:09:a7:
40:45:ed:0d:c2:ad:90:fd:2a:4a:e7:8d:27:9c:23:f6:cc:61:
ea:57:62:33:60:ac:93:3b:78:9b:f2:f3:d8:fa:b0:33:dc:c1:
04:1b:4e:22:99:90:29:4d:39:d8:eb:bf:6f:a7:1b:92:3f:49:
ef:21:31:bb:aa:e7:e1:15:bd:cf:5d:2c:2a:99:91:55:35:02:
8c:4c:9a:61:11:aa:53:47:95:3e:6a:95:56:1c:55:24:fe:c7:
25:d0:7e:1f:3e:ff:1f:ac:e7:dd:02:f0:9f:cf:a7:ff:72:df:
3d:54:10:13:03:61:cf:8f:40:22:9b:bd:dd:1e:66:d0:b8:90:
54:fa:6f:a0:5f:bd:0d:d0:9f:de:0e:55:69:b7:b3:c9:a7:30:
41:b7:9a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:55:40 2026 by rpki-client