
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/8vk8SPzwBGbVuv0elt8pyXOIKGY.roa
File: 8vk8SPzwBGbVuv0elt8pyXOIKGY.roa (raw, json)
Hash identifier: nDPzDxeuXluC/ZA6Lubut8UBc2SpeqmqT+nPz6ZX2B8=
Subject key identifier: F2:F9:3C:48:FC:F0:04:66:D5:BA:FD:1E:96:DF:29:C9:73:88:28:66
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 12BC
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8vk8SPzwBGbVuv0elt8pyXOIKGY.roa
Signing time: Sun 01 Mar 2026 03:12:39 +0000
ROA not before: Sun 01 Mar 2026 03:12:39 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.104.4.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4796 (0x12bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 03:12:39 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=F2F93C48FCF00466D5BAFD1E96DF29C973882866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7d:0e:c2:bd:68:c6:67:04:e8:e1:f5:c2:a5:
55:c3:3a:76:26:1a:3d:d6:23:d0:e0:cf:67:e5:db:
99:a9:0c:9b:07:6d:bd:ab:6a:d0:d2:28:b3:32:d5:
75:47:50:eb:1a:fb:05:d8:3b:3b:9c:3c:e5:d1:c0:
a5:6c:76:c6:78:55:0f:dd:fc:a1:2d:db:ff:97:33:
92:b1:94:db:ee:26:c2:f8:f2:8b:6d:cd:82:3e:55:
f1:6f:b5:98:00:ca:c3:59:c5:1e:fe:fb:31:1c:6d:
77:56:f9:65:7e:ce:84:5d:b2:d9:fc:97:68:3e:65:
f1:6d:8a:bf:67:ec:db:a0:7e:99:b4:72:b1:7f:b2:
fa:77:57:ef:c0:55:41:c4:51:8d:25:40:ed:09:cf:
f3:f2:c8:2a:49:bb:06:b2:5f:e2:9d:82:30:5f:2d:
ac:ba:1e:5d:81:ef:14:b3:33:e5:98:41:56:30:1c:
75:22:f5:75:e6:f3:7c:72:3f:5f:94:26:24:ff:ed:
a1:fe:5d:f8:59:0c:36:af:fe:88:d7:e2:11:18:ea:
6e:70:0e:e2:87:16:4a:21:73:11:57:a1:51:cd:24:
f2:5d:77:2b:c6:b6:f4:f7:fb:48:e0:6b:89:85:55:
5c:eb:2e:93:03:af:dd:8b:42:0c:ce:3f:87:36:60:
4d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F9:3C:48:FC:F0:04:66:D5:BA:FD:1E:96:DF:29:C9:73:88:28:66
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8vk8SPzwBGbVuv0elt8pyXOIKGY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.104.4.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:e1:d5:fb:f4:5a:49:a0:1d:d5:51:7e:0f:3b:84:dd:a8:14:
2f:c0:1d:45:08:9b:8b:ac:e0:ca:86:08:0b:5a:86:fe:a5:24:
c5:49:db:c8:94:55:7b:b7:8a:75:de:88:9f:cd:59:f7:f6:67:
d0:fb:ae:a0:df:aa:00:f3:f5:b1:fd:23:86:b3:48:4f:19:45:
5b:9d:ff:a0:38:a7:91:e0:83:bc:e0:ef:5c:89:07:f6:5c:03:
1e:88:82:35:7d:93:cd:06:97:28:ad:f8:d8:e3:0c:1d:0f:83:
79:05:19:f4:79:ad:01:4b:70:3a:b4:4a:e2:38:18:e0:7a:95:
af:04:9c:e7:9b:11:0c:0a:d0:61:37:29:15:32:e9:d7:21:7c:
ee:2a:7a:4b:58:5b:c5:b2:c7:7d:03:d4:ff:50:f0:30:b3:69:
ed:d9:a6:93:84:5f:b8:c8:81:84:5a:26:ef:f4:cf:72:cf:7d:
1c:39:91:6e:79:9c:86:be:ed:23:27:53:8c:93:9b:35:57:c0:
69:d1:7a:2f:4d:85:06:4a:8b:7c:ac:3f:12:2f:b1:06:a3:a3:
80:61:bf:d5:76:7a:69:3c:6b:64:e6:b8:fe:34:4e:4f:ea:2b:
16:5c:30:39:62:cf:aa:06:09:c5:ee:11:f9:bd:6b:ad:08:c2:
c3:52:94:9c
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICErwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MzEyMzlaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEYyRjkzQzQ4RkNGMDA0
NjZENUJBRkQxRTk2REYyOUM5NzM4ODI4NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNfQ7CvWjGZwTo4fXCpVXDOnYmGj3WI9Dgz2fl25mpDJsHbb2r
atDSKLMy1XVHUOsa+wXYOzucPOXRwKVsdsZ4VQ/d/KEt2/+XM5KxlNvuJsL48ott
zYI+VfFvtZgAysNZxR7++zEcbXdW+WV+zoRdstn8l2g+ZfFtir9n7Nugfpm0crF/
svp3V+/AVUHEUY0lQO0Jz/PyyCpJuwayX+KdgjBfLay6Hl2B7xSzM+WYQVYwHHUi
9XXm83xyP1+UJiT/7aH+XfhZDDav/ojX4hEY6m5wDuKHFkohcxFXoVHNJPJddyvG
tvT3+0jga4mFVVzrLpMDr92LQgzOP4c2YE2VAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU8vk8SPzwBGbVuv0elt8pyXOIKGYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5Lzh2azhTUHp3QkdiVnV2MGVsdDhweVhPSUtHWS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExaAQwDQYJKoZIhvcNAQELBQADggEBAA7h1fv0WkmgHdVRfg87hN2oFC/A
HUUIm4us4MqGCAtahv6lJMVJ28iUVXu3inXeiJ/NWff2Z9D7rqDfqgDz9bH9I4az
SE8ZRVud/6A4p5Hgg7zg71yJB/ZcAx6IgjV9k80Glyit+NjjDB0Pg3kFGfR5rQFL
cDq0SuI4GOB6la8EnOebEQwK0GE3KRUy6dchfO4qektYW8Wyx30D1P9Q8DCzae3Z
ppOEX7jIgYRaJu/0z3LPfRw5kW55nIa+7SMnU4yTmzVXwGnRei9NhQZKi3ysPxIv
sQajo4Bhv9V2emk8a2TmuP40Tk/qKxZcMDliz6oGCcXuEfm9a60IwsNSlJw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:19:00 2026 by rpki-client