
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/2NyJ87ldCkYRPIiUGcy4IiqPUoI.roa
File: 2NyJ87ldCkYRPIiUGcy4IiqPUoI.roa (raw, json)
Hash identifier: LqSpI+cWpEf98dtYTPf5ecBgvTg7QEk+a2iN/Ck8DEM=
Subject key identifier: D8:DC:89:F3:B9:5D:0A:46:11:3C:88:94:19:CC:B8:22:2A:8F:52:82
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1307
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2NyJ87ldCkYRPIiUGcy4IiqPUoI.roa
Signing time: Sun 01 Mar 2026 03:28:05 +0000
ROA not before: Sun 01 Mar 2026 03:28:05 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.184.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4871 (0x1307)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 03:28:05 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=D8DC89F3B95D0A46113C889419CCB8222A8F5282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e8:7f:5f:4d:b3:c9:48:32:f8:86:b0:b1:f4:
2c:58:19:9c:b7:86:56:4e:d5:3c:f1:fa:bf:5f:cd:
47:3d:7d:aa:aa:5b:a0:35:97:ae:54:ef:f3:ae:2c:
5b:4f:24:fc:a2:3c:5e:b0:f9:b2:f8:d1:f1:35:d2:
d1:bf:18:7d:d6:18:d9:96:72:98:43:eb:d7:33:2f:
03:de:4a:94:e4:90:29:99:24:6b:3b:3d:95:18:6c:
d7:67:37:e6:08:07:15:7e:d5:1e:1a:5b:99:21:c4:
8a:c8:8a:57:de:e0:c9:0f:2b:62:dd:6c:23:73:82:
6d:0d:16:6b:35:8a:c8:02:b3:c3:a3:2c:90:2a:04:
33:2b:c8:ea:8f:97:cd:a2:d2:32:96:ad:cf:e9:ac:
1a:8b:ff:63:87:3d:e3:d0:9e:25:f2:3a:07:78:0a:
43:d8:a5:68:a6:e2:f5:39:6f:b2:26:86:0d:b1:5a:
e1:5d:68:2f:7d:44:f5:1c:bf:d4:4d:7a:a9:af:76:
34:e8:4c:02:09:29:93:3c:70:1a:5c:ea:3d:f1:0c:
3e:a2:a7:f9:fd:25:db:ca:de:66:68:d2:66:84:25:
50:b5:ce:47:ff:73:67:72:19:3a:ec:5b:19:1e:90:
b5:32:14:a5:e1:f3:d1:d5:a1:5f:8c:2e:4a:32:6b:
4c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:DC:89:F3:B9:5D:0A:46:11:3C:88:94:19:CC:B8:22:2A:8F:52:82
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2NyJ87ldCkYRPIiUGcy4IiqPUoI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.184.0/23
Signature Algorithm: sha256WithRSAEncryption
90:2e:e8:50:ac:e0:2c:ad:97:b2:08:ad:48:02:2a:75:50:99:
72:7a:a8:49:e4:85:95:a9:be:eb:13:a4:c0:e1:c8:26:ce:cd:
42:7e:f9:ab:24:85:ad:53:9c:ff:bc:1c:f1:e5:7a:a6:88:bc:
da:5b:9e:ba:fb:cb:f3:b5:66:b9:2e:bb:17:2f:26:48:b4:c3:
e1:9b:ed:a3:8a:56:ec:2e:4b:88:65:1b:93:58:18:9d:e3:69:
6a:ab:cd:e8:b8:e8:a4:b5:17:95:53:af:34:6b:9f:18:1b:06:
f0:e8:22:27:c8:c6:ff:96:1d:5b:09:66:b3:3c:15:0b:9a:1b:
01:0b:b7:f6:8f:2b:1d:83:4c:af:7c:47:20:4a:c3:86:d4:2f:
df:b4:11:2b:69:02:75:53:66:37:cf:f0:bf:5b:d5:00:60:5f:
df:7a:e7:b6:b1:f0:f4:d5:44:60:12:1b:aa:67:ef:4b:6e:e8:
f1:64:0c:e7:f8:6f:90:73:52:bd:3e:02:1a:41:62:bf:9c:7f:
3d:b3:27:d2:47:7b:95:2b:25:77:a4:7f:b4:8a:47:1d:37:b2:
cd:49:6b:74:8c:16:32:98:5c:6f:5c:f9:1a:f2:6f:fa:95:36:
65:69:f8:6b:47:0c:f2:b2:db:dd:ce:18:a7:a4:47:40:f3:96:
1d:a1:8f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:26:31 2026 by rpki-client