
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/8IlSznl8IuMHQDpMqrFCTghH0XI.roa
File: 8IlSznl8IuMHQDpMqrFCTghH0XI.roa (raw, json)
Hash identifier: 1WkDnKYshDFVautY6rxDe+AeiKVl1PuzlaOk2qv3tp4=
Subject key identifier: F0:89:52:CE:79:7C:22:E3:07:40:3A:4C:AA:B1:42:4E:08:47:D1:72
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 10A0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8IlSznl8IuMHQDpMqrFCTghH0XI.roa
Signing time: Sun 01 Mar 2026 01:44:48 +0000
ROA not before: Sun 01 Mar 2026 01:44:48 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.64.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:24:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4256 (0x10a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 01:44:48 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=F08952CE797C22E307403A4CAAB1424E0847D172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:4f:59:e5:64:08:e4:4c:6e:f2:2b:76:23:8b:
6f:b7:08:e0:25:1e:41:18:a9:8e:52:0b:ae:f2:27:
c8:96:86:e9:da:dc:de:60:c7:41:75:6e:6e:93:05:
0c:00:97:98:3f:38:e8:e7:81:f7:b7:e8:f5:3e:b4:
9a:8e:0c:6a:27:ef:11:ea:38:66:d7:3b:49:d4:01:
f4:4a:64:27:4e:3c:87:f9:43:fd:94:23:74:9d:50:
97:7f:0c:2b:ab:a3:ba:0d:66:3c:65:bd:a4:01:91:
3e:3c:ca:f3:e7:e3:c3:22:37:03:79:d2:d0:96:6a:
d1:41:cf:de:d3:cd:85:d9:30:65:14:2b:50:d6:a2:
6b:98:83:6a:48:86:68:79:91:6c:5b:bb:92:3f:f0:
3d:b0:25:19:62:f1:47:fc:59:05:fa:08:ed:3c:35:
7f:0e:b0:ab:63:36:71:af:2e:5d:9d:df:cd:80:7e:
0d:13:1c:de:5a:45:5c:eb:05:d9:93:1e:25:a5:44:
3d:98:dc:3e:12:f2:38:0e:35:f1:7a:b3:0a:35:e1:
fe:22:b5:2e:d4:41:07:40:9d:9d:a9:56:9b:28:8e:
ec:3f:a3:71:0f:b8:50:63:6b:95:4a:6a:62:45:03:
31:e8:c6:79:67:8a:27:8f:1e:ef:41:b5:63:7a:3c:
92:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:89:52:CE:79:7C:22:E3:07:40:3A:4C:AA:B1:42:4E:08:47:D1:72
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8IlSznl8IuMHQDpMqrFCTghH0XI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.64.0/23
Signature Algorithm: sha256WithRSAEncryption
ca:66:1a:b0:86:57:b8:d8:dd:6b:89:d5:3f:ed:ac:3b:e1:95:
77:8c:6b:9f:a5:0c:83:ce:2a:69:df:f0:9d:c0:4e:20:08:73:
35:0e:09:86:9b:fe:56:28:99:e6:53:4c:9b:63:dd:10:0d:b6:
05:32:73:c5:b9:23:9b:db:93:d8:77:b9:76:1a:18:2c:88:0a:
a1:08:f0:b5:65:7a:dc:0a:25:b8:3c:99:f2:05:db:bf:50:b3:
56:f2:1e:a7:ea:22:fc:4a:27:52:8e:6a:87:57:14:4a:8b:43:
ee:2a:1f:74:14:29:cc:39:c0:03:07:b1:2f:b7:16:d1:b1:b8:
ce:54:bf:65:03:c2:40:96:b4:b3:7e:6d:8d:d4:92:2e:b7:ec:
70:d0:1d:be:3f:60:67:73:40:5b:fb:62:c9:af:16:01:4c:d6:
ea:b5:c5:c8:2c:67:aa:dd:57:51:5f:08:5c:c8:b7:55:9d:48:
87:91:5c:84:09:a7:c5:55:58:ac:b5:92:5a:a2:76:07:b1:cd:
26:99:c0:17:20:46:35:2b:c3:37:d7:c4:5d:9d:8c:74:82:88:
e5:7d:61:c4:17:82:64:c5:93:b9:0d:d2:80:a3:29:16:8e:45:
85:5d:06:2e:09:0c:05:f8:07:05:31:2b:a9:3a:af:01:c1:f7:
d3:10:54:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:54:53 2026 by rpki-client