
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/3wOu1bYAvW0bUUi_mUL8Fg4_QH8.roa
File: 3wOu1bYAvW0bUUi_mUL8Fg4_QH8.roa (raw, json)
Hash identifier: c6mTRi8dukkCTzcGPOujaRmH9INpWlJzGJZw9K+s2C4=
Subject key identifier: DF:03:AE:D5:B6:00:BD:6D:1B:51:48:BF:99:42:FC:16:0E:3F:40:7F
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1120
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3wOu1bYAvW0bUUi_mUL8Fg4_QH8.roa
Signing time: Sun 01 Mar 2026 02:07:34 +0000
ROA not before: Sun 01 Mar 2026 02:07:34 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.96.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4384 (0x1120)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:07:34 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=DF03AED5B600BD6D1B5148BF9942FC160E3F407F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:89:fc:ac:f5:64:89:aa:20:ca:68:65:fb:86:
5b:e6:f6:e8:65:65:2e:f3:5c:db:3d:01:f8:0b:2c:
09:d9:2f:a1:e8:b0:e5:08:f5:e4:6a:aa:8c:a1:80:
b2:a1:1e:25:a3:87:9b:4b:d9:33:cb:2a:45:2b:f7:
08:7c:18:fb:0c:3f:06:30:ba:18:dd:26:f3:09:90:
df:32:27:28:44:da:bc:32:30:13:45:f8:ff:67:fd:
08:38:d5:50:9c:c7:40:10:4f:d9:d5:76:83:41:ee:
bd:69:51:08:61:02:0f:d6:1a:a1:b6:7f:ce:40:77:
7d:ad:83:8d:8d:de:90:f8:1e:64:13:6c:af:f3:39:
7b:9a:52:85:91:0d:20:51:86:ef:cb:d6:c5:43:20:
bf:43:c7:8d:60:a4:53:5f:52:bb:b3:c4:4b:fb:bb:
95:6e:96:bc:57:f3:8b:6c:c7:11:17:31:0e:7b:da:
22:c0:82:7d:3a:d0:59:51:72:a2:04:6a:60:da:6e:
92:0f:d2:97:3b:94:40:61:12:fe:26:de:f7:15:92:
87:f8:74:5a:d7:c0:52:1f:2a:cf:96:a1:fc:5f:67:
1a:96:dc:13:78:97:15:ae:3e:c7:35:df:86:04:ea:
75:9c:c4:50:d0:c5:7c:eb:98:86:c3:ed:49:1e:4c:
7a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:03:AE:D5:B6:00:BD:6D:1B:51:48:BF:99:42:FC:16:0E:3F:40:7F
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3wOu1bYAvW0bUUi_mUL8Fg4_QH8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.96.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:2d:21:5d:e5:75:d4:78:9b:59:a0:0d:8d:50:a1:ea:57:f4:
99:1b:ea:ed:47:8e:2c:cc:a4:71:f5:d5:8d:fe:81:fe:04:6c:
a1:a4:2e:e0:71:83:c0:15:a6:16:ef:9f:c6:99:49:42:49:47:
8b:4b:7e:5d:dc:c3:bf:15:3e:1f:5d:af:db:3b:b0:95:a6:be:
d3:9a:1c:f8:0f:8e:3d:f3:6c:ec:59:ab:38:92:61:5f:bc:b8:
48:19:76:ca:b0:e6:fc:8b:c3:8e:77:cf:2c:0f:1c:bb:8b:d6:
e5:b3:17:d7:46:ba:27:41:02:ca:40:91:94:4c:bf:f3:6d:89:
bf:a1:e4:92:cf:18:03:15:72:e3:4d:31:b2:5e:df:e4:5b:02:
93:ef:8d:60:cb:74:ec:a5:ae:5f:8d:dc:3b:d4:14:85:cf:84:
2f:5c:41:8c:22:78:85:a0:2a:45:dc:ef:91:43:f9:89:c5:51:
0f:47:df:ec:80:7a:8a:62:c5:1b:b6:54:18:b8:6d:8d:98:40:
8d:de:c7:a2:d0:9d:cb:9e:19:8b:f2:71:67:ea:ad:4e:33:21:
51:1b:67:65:81:4c:ed:c0:ea:bc:c4:79:83:f7:d7:8b:32:29:
79:28:08:bc:ca:03:e0:2f:f7:fd:9a:e0:b0:9b:65:f6:4f:39:
e4:8a:ed:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:22 2026 by rpki-client