
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ALHDxusc1YwevwJud57E3TWGxYI.roa
File: ALHDxusc1YwevwJud57E3TWGxYI.roa (raw, json)
Hash identifier: SkMHWUP/NUtybDeW4YdL0bVK6hH84Q3RI/OtbnYTJJk=
Subject key identifier: 00:B1:C3:C6:EB:1C:D5:8C:1E:BF:02:6E:77:9E:C4:DD:35:86:C5:82
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 134D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ALHDxusc1YwevwJud57E3TWGxYI.roa
Signing time: Sun 01 Mar 2026 03:40:45 +0000
ROA not before: Sun 01 Mar 2026 03:40:45 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.75.248.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4941 (0x134d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 03:40:45 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=00B1C3C6EB1CD58C1EBF026E779EC4DD3586C582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:43:c8:95:e7:91:89:bf:45:70:fa:52:92:96:
e3:8c:43:ae:4d:17:5f:c1:3f:58:4a:25:c7:f2:c0:
52:47:45:1d:61:cc:a6:ca:46:90:e9:d3:3f:c1:23:
ad:23:77:cd:02:c3:3b:85:83:8c:a3:9a:ad:c8:b9:
7d:ac:73:6c:14:32:22:24:68:24:9f:cd:35:13:44:
29:e0:ba:b4:e3:31:ae:f7:59:67:0d:8a:5b:81:40:
de:ea:26:9a:8a:1d:0b:a6:52:b1:8e:ab:12:e2:68:
0c:02:a6:b7:b3:ab:4e:1f:c5:2b:e0:41:b6:7e:b1:
19:fb:61:6c:11:16:8f:10:ab:e8:1d:26:a7:7c:7d:
25:35:1e:cf:75:56:86:c7:e3:e6:a3:8f:ab:eb:62:
3d:ff:be:d1:01:f8:87:72:b2:20:b9:3e:72:72:ed:
39:7e:aa:a9:1d:e5:52:1f:87:46:88:76:e6:f2:08:
b9:80:a1:ab:2a:f0:c3:ef:0e:bc:0c:f1:ad:73:b0:
57:ea:33:94:0c:af:4b:0d:6e:cc:de:3d:6a:7a:a3:
18:21:6c:ea:6e:fc:fb:fa:f1:40:7f:cd:88:91:eb:
1b:9a:76:69:6d:9a:4d:c3:02:f6:e5:10:49:8b:fc:
1f:6d:30:9c:89:15:f4:06:40:44:3f:2d:57:6a:8e:
d4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B1:C3:C6:EB:1C:D5:8C:1E:BF:02:6E:77:9E:C4:DD:35:86:C5:82
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ALHDxusc1YwevwJud57E3TWGxYI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.75.248.0/21
Signature Algorithm: sha256WithRSAEncryption
08:fe:65:8c:5a:3c:55:ad:bd:57:4a:4a:c3:f1:82:2f:68:ad:
5b:a1:1b:c2:cb:ac:de:12:34:bf:7e:b7:de:da:3b:ee:68:81:
44:ff:6d:f3:b3:d4:96:93:9b:0f:8e:20:fc:ed:8e:85:2a:2c:
43:52:4d:11:df:70:a4:f3:04:b7:72:bc:62:90:e5:9c:87:19:
ef:3e:54:68:ef:91:52:d8:16:7c:b3:46:e2:b0:35:36:03:a0:
92:3d:c6:4c:ee:e7:cb:06:66:70:86:36:dc:5b:2a:ba:5c:cd:
9b:eb:7f:21:8a:ab:06:f0:61:72:e9:a7:ad:26:71:e6:4b:28:
52:47:bf:83:d5:14:a7:6d:a6:49:f3:33:dd:ee:b0:23:89:3f:
5d:6e:77:26:35:0b:0b:53:20:70:4f:0c:4c:b5:e5:4a:e9:78:
da:9c:f3:bb:4d:06:98:2d:24:2f:0e:47:cd:20:62:34:23:c0:
93:47:81:5f:9f:cf:ac:0c:f8:fa:77:a6:f1:d2:34:b6:67:79:
b9:c8:cd:7c:7d:a2:3c:7d:bf:63:45:d5:50:fd:22:91:33:7f:
3d:50:a4:7c:35:cf:e6:a8:f2:62:ca:1d:42:9e:66:e4:fd:c3:
50:c6:b6:d6:a4:73:f4:71:b4:de:96:58:96:b8:97:c8:4f:1e:
1d:30:d8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:17 2026 by rpki-client