
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/8rmwhB75t5rdkRfCNbIacS5jPcM.roa
File: 8rmwhB75t5rdkRfCNbIacS5jPcM.roa (raw, json)
Hash identifier: 50WYFAGeTS4aFslgYlkQ7K+ooF3kgQnei/1/SnGGqYE=
Subject key identifier: F2:B9:B0:84:1E:F9:B7:9A:DD:91:17:C2:35:B2:1A:71:2E:63:3D:C3
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 10FC
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8rmwhB75t5rdkRfCNbIacS5jPcM.roa
Signing time: Sun 01 Mar 2026 02:02:52 +0000
ROA not before: Sun 01 Mar 2026 02:02:52 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.67.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4348 (0x10fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:02:52 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=F2B9B0841EF9B79ADD9117C235B21A712E633DC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:2c:d1:cb:a0:c9:a8:64:35:7e:16:27:06:c2:
69:33:09:ab:66:78:ed:d2:a5:2b:44:1c:09:7c:7a:
ce:0b:bb:0c:76:c4:2a:f7:1b:03:54:6d:0f:e1:d7:
53:ba:ec:72:11:fd:50:96:b4:f3:aa:cc:3d:09:b8:
6e:7d:36:ba:9a:3f:37:08:e1:8b:1b:8b:b4:dd:88:
a6:84:62:d0:3d:8f:b5:46:d7:f7:8d:f1:38:c4:15:
26:77:02:5d:28:9a:b0:a8:f1:2b:2f:57:01:b1:01:
25:1b:86:8c:3a:4a:f7:91:11:7d:6d:dd:3c:2c:f9:
15:2f:d2:72:f4:7e:1b:aa:63:63:97:36:62:aa:18:
18:c7:a7:ff:28:68:b4:b3:e9:ad:08:1e:6b:ae:10:
d3:57:42:d6:1d:05:9b:03:db:08:d4:83:32:9d:77:
8e:65:74:86:e5:80:51:90:9d:71:9a:f6:0e:12:8d:
5a:5a:49:52:f9:9d:1a:d0:04:cd:f5:f1:4d:a3:bb:
44:00:aa:83:c9:ea:f6:17:3a:61:35:16:ac:e6:fd:
8a:ba:28:ca:cf:b0:a4:f6:ab:c8:50:39:77:7c:e3:
ee:b4:22:6a:92:a0:f7:31:75:c9:55:eb:84:34:a5:
fe:f9:72:d3:69:d8:4d:21:6b:b4:7b:79:10:6a:89:
f2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B9:B0:84:1E:F9:B7:9A:DD:91:17:C2:35:B2:1A:71:2E:63:3D:C3
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8rmwhB75t5rdkRfCNbIacS5jPcM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.67.240.0/20
Signature Algorithm: sha256WithRSAEncryption
d6:c2:ae:6d:1e:39:3b:e4:62:e6:20:a7:53:5a:73:17:be:d3:
06:4d:8e:3a:90:00:55:a7:d7:f1:fe:b8:c0:92:77:4c:d8:f2:
ab:79:77:65:b9:4b:da:87:02:cd:fa:cf:98:57:6a:7d:22:86:
c8:7b:cd:5c:02:f9:9a:85:22:86:ca:4c:76:bd:55:a2:b4:68:
45:c1:ec:46:0a:9c:a2:64:8e:ed:eb:54:54:c7:fc:dc:d4:27:
76:07:9a:ad:1d:f4:0e:16:84:20:d3:75:bd:74:e7:72:01:f5:
be:41:48:a8:88:87:6f:02:1b:e7:dd:74:39:3c:6e:4d:f1:49:
ca:8e:bc:ce:d9:db:f1:0f:3e:a7:b2:9e:c9:98:aa:5b:86:a8:
0e:5e:a6:5c:71:d3:09:79:9e:ec:15:db:60:45:95:54:b3:af:
0b:83:c6:ea:c7:de:be:17:8e:db:3f:a3:f3:75:65:62:4d:4d:
19:e3:8a:ce:3e:87:06:88:57:83:78:04:84:41:bc:3e:33:51:
0a:db:fe:93:1c:df:81:c9:5a:7c:1a:1c:37:4d:ff:00:10:6e:
5f:1f:14:f0:f3:26:ca:a3:07:55:a7:f4:37:c4:ee:44:a3:07:
93:7c:99:74:5d:bc:7a:54:c1:60:de:19:a9:e0:e0:fb:f4:8a:
7a:76:7f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:22:43 2026 by rpki-client