
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/2phu35qYYQOWjnt1bB0vmG0qk0o.roa
File: 2phu35qYYQOWjnt1bB0vmG0qk0o.roa (raw, json)
Hash identifier: dh3SABNyFup/2jewNmWMp8JIE7oSv+lwupk/iMO0fsI=
Subject key identifier: DA:98:6E:DF:9A:98:61:03:96:8E:7B:75:6C:1D:2F:98:6D:2A:93:4A
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 11AF
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2phu35qYYQOWjnt1bB0vmG0qk0o.roa
Signing time: Sun 01 Mar 2026 02:36:19 +0000
ROA not before: Sun 01 Mar 2026 02:36:19 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.104.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4527 (0x11af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:36:19 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=DA986EDF9A986103968E7B756C1D2F986D2A934A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:15:1e:ea:c0:4a:1d:fb:4d:74:d6:e2:6a:1b:
a3:5e:03:47:f8:de:a9:fa:af:94:5e:cd:b5:0c:dc:
6f:0c:2c:cb:47:5d:a1:b0:af:7f:34:23:d8:0f:b6:
00:1d:d6:98:c6:fd:83:60:85:d1:1a:fa:64:a0:ba:
de:a9:a5:74:08:54:e1:b7:cb:7c:81:8f:3a:6d:21:
4e:b3:73:66:b2:9d:09:0f:64:2c:1c:98:a0:d7:1e:
c1:b2:53:f9:64:a5:b1:5e:26:97:b8:1d:9f:87:2f:
ce:6e:8c:80:ca:6c:a9:ee:14:cd:34:6e:19:0a:51:
26:80:b4:94:40:0b:1a:9d:e3:80:02:5a:da:70:90:
8a:cb:b5:6f:40:43:b9:16:0a:05:d0:4b:b6:6f:54:
e2:ab:34:13:29:f4:5f:9b:d3:c0:ba:8d:5a:1d:4c:
64:61:3b:dd:21:85:4d:6a:47:8b:0a:4c:60:02:56:
66:62:31:52:ae:f3:f3:c6:ff:4f:b9:94:7f:d2:8e:
d2:61:cf:5f:31:a2:38:44:8d:d0:45:c0:f7:12:97:
4c:45:63:77:e7:ad:7e:2d:e9:c8:08:26:15:9c:92:
3a:02:0c:01:13:5f:b7:cd:55:92:5c:e2:8d:a9:ce:
44:f7:3e:06:80:29:c8:09:66:f4:83:7e:e8:51:2f:
7b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:98:6E:DF:9A:98:61:03:96:8E:7B:75:6C:1D:2F:98:6D:2A:93:4A
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2phu35qYYQOWjnt1bB0vmG0qk0o.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.104.72.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:98:e8:05:4a:80:cf:3b:e8:fc:c5:01:7b:15:1b:71:8b:08:
44:83:ce:4f:b3:c5:31:cd:11:5e:b1:6e:45:25:b9:be:cc:ff:
c8:e4:ff:19:2f:33:40:b6:84:ca:f9:4b:f4:16:12:e3:aa:4f:
89:c6:a9:ee:b8:bc:af:ee:5e:0d:2c:87:60:05:95:a0:6b:51:
00:7d:2c:62:f0:2f:bc:83:96:ed:41:6d:dd:7b:be:a7:43:7d:
44:ea:7d:55:87:63:ba:2c:d2:de:ba:30:e3:08:06:55:dd:f2:
ec:96:e2:00:02:b0:53:78:e7:ce:b5:04:2e:15:0e:39:00:9a:
f4:7f:db:22:88:c0:4c:59:ba:8f:f3:18:57:ce:59:f5:ac:c9:
a7:95:f2:27:4f:9c:c2:2a:e2:f1:33:62:2c:89:32:dc:3f:dd:
46:63:16:00:36:97:be:b8:b0:88:fb:44:00:74:b8:0c:ee:9d:
26:a5:aa:59:b5:c2:c7:bd:29:1a:35:61:12:ca:de:8f:20:7b:
cb:e8:08:a0:1a:b3:3b:18:f3:59:2b:7b:d7:a8:b1:bb:52:b7:
e9:58:90:68:de:92:1c:ea:01:40:05:c0:4e:8a:31:ea:01:f3:
80:d4:ed:01:0e:d3:9c:95:40:31:30:8d:0d:3a:a3:ab:7b:59:
1c:0f:e3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:47 2026 by rpki-client