
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/3jqm6hcF-peDoECQqJHwX0h5NaU.roa
File: 3jqm6hcF-peDoECQqJHwX0h5NaU.roa (raw, json)
Hash identifier: hz+t6b9EOxTFIg66ZzpSbDUN2tneuZ/nIty7ZeVtZVI=
Subject key identifier: DE:3A:A6:EA:17:05:FA:97:83:A0:40:90:A8:91:F0:5F:48:79:35:A5
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1116
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3jqm6hcF-peDoECQqJHwX0h5NaU.roa
Signing time: Sun 01 Mar 2026 02:07:27 +0000
ROA not before: Sun 01 Mar 2026 02:07:27 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 110.158.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:24:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4374 (0x1116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:07:27 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=DE3AA6EA1705FA9783A04090A891F05F487935A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:a3:ee:b7:93:96:54:3a:1e:ac:26:f7:c8:eb:
c8:0b:92:7f:1f:f7:77:66:a7:4e:6e:e5:6e:1a:ca:
9b:a4:c3:ba:d3:7e:e3:05:01:71:93:66:e7:d7:03:
5f:31:66:bc:08:b5:e8:bd:25:06:c5:b7:11:26:83:
4f:5b:b4:43:07:8f:81:7a:b4:91:7f:77:25:ec:6b:
6f:10:2b:19:32:a0:ad:b6:68:71:12:13:80:6c:26:
6b:b6:e9:ae:17:b2:6f:26:16:b9:45:a9:ed:30:90:
04:f2:b8:31:1a:d0:b6:af:6a:86:43:a6:cc:1d:b7:
c5:d9:ac:76:15:51:e6:7c:bd:f5:a1:70:4b:11:01:
70:62:68:9b:df:4c:4f:24:a5:a9:fb:c4:3d:42:80:
42:50:f9:ba:d0:a3:71:2b:c5:d0:7e:11:2c:fe:09:
0c:61:b6:ca:e9:f0:28:9a:6e:6b:4d:e9:86:15:ed:
ab:51:05:fa:57:56:d6:d5:85:c7:68:d6:e2:cd:c3:
5f:a1:ba:dc:13:13:ca:0a:86:6b:40:64:92:88:f3:
ff:e5:27:c5:1d:cd:c9:c5:49:83:40:7d:04:51:aa:
f8:ba:00:fb:8d:87:06:02:12:a2:6b:22:00:8d:8d:
97:6b:13:f8:d9:50:eb:e8:1a:88:1f:58:6d:48:28:
15:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:3A:A6:EA:17:05:FA:97:83:A0:40:90:A8:91:F0:5F:48:79:35:A5
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3jqm6hcF-peDoECQqJHwX0h5NaU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.158.0.0/17
Signature Algorithm: sha256WithRSAEncryption
50:3d:c7:e4:ec:b9:14:40:8b:1b:c2:ad:49:9b:93:85:7b:da:
55:89:43:b2:fd:5c:ff:80:fa:57:11:fa:77:5f:e3:d1:ca:4f:
0c:5c:ca:5b:a3:ab:c1:b8:f5:ab:f5:8e:57:50:81:27:50:14:
88:ad:8e:c7:99:62:26:ed:f5:e6:73:39:32:a1:e3:df:7e:31:
f7:71:63:57:bb:5a:4f:da:02:3d:f1:bf:8b:bf:82:4e:ec:7e:
b7:b7:fe:e4:1a:ec:3b:e2:50:ba:24:d0:b3:31:a9:1f:e6:f1:
c8:04:7f:da:f2:85:f4:b6:28:d5:96:fe:94:1d:48:57:1c:8e:
62:76:8b:73:34:3b:b2:5c:d8:f9:ae:f9:d9:b3:23:8d:8f:40:
2b:f9:1f:c7:ae:98:86:83:09:a2:e9:43:a6:14:95:e5:5b:8f:
8e:21:36:0a:61:cc:2a:65:4b:06:01:48:48:72:5e:e0:c3:ff:
06:06:47:fc:b0:af:0d:fe:3f:c8:ba:c5:70:21:b2:ed:b9:08:
11:42:90:2e:23:a3:4b:a1:ab:08:80:c9:06:78:d4:0e:f1:b5:
21:7a:34:98:f7:80:92:4b:8f:4d:6a:7a:4b:d7:37:11:c2:d6:
f1:d9:d0:7c:b4:05:00:31:16:5c:3f:ec:4d:39:8d:cf:85:e2:
3d:3c:5c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:55:02 2026 by rpki-client