
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/BL070BqVVZYhwkGhPNw15gBOSio.roa
File: BL070BqVVZYhwkGhPNw15gBOSio.roa (raw, json)
Hash identifier: pNA0bycg3UiHZMztwPK7GW/hvE5gTQs0VKduJRT0Plk=
Subject key identifier: 04:BD:3B:D0:1A:95:55:96:21:C2:41:A1:3C:DC:35:E6:00:4E:4A:2A
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 10CD
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BL070BqVVZYhwkGhPNw15gBOSio.roa
Signing time: Sun 01 Mar 2026 01:54:44 +0000
ROA not before: Sun 01 Mar 2026 01:54:44 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.102.148.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:24:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4301 (0x10cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 01:54:44 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=04BD3BD01A95559621C241A13CDC35E6004E4A2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:25:ac:50:fc:58:2e:09:78:51:59:06:28:dc:
62:0a:0d:11:85:05:a6:1b:79:1c:5c:b3:e1:76:74:
4a:b7:1c:bc:cd:b1:be:0c:40:cd:c5:1a:af:63:9c:
7c:72:56:8f:24:e8:2a:bb:8e:97:af:d0:03:98:d1:
98:0b:7c:b1:50:2f:30:c3:f5:f0:42:fa:47:82:ea:
c5:35:d2:03:21:67:75:15:d1:d9:2a:0d:13:63:d1:
ae:d7:8e:c4:3b:32:68:5c:ea:33:60:c7:fd:d1:b4:
95:5a:00:23:8a:e8:d8:dd:67:f2:cc:2f:3f:84:a7:
34:5b:a3:4f:72:11:95:84:5b:03:b8:63:c6:ba:9b:
2a:a6:44:b8:5c:a1:ec:24:ea:75:cc:3b:21:78:06:
85:26:c1:4c:38:0a:9f:e7:c0:60:42:ea:fb:5b:2c:
ab:44:38:bf:e3:ab:d3:9a:d8:4b:1b:d5:a8:06:9f:
4c:ee:48:bf:b3:51:1e:e6:17:f7:ea:0a:cc:e3:88:
cc:90:ef:2b:e7:29:09:e5:d9:4a:09:28:33:00:d5:
b3:1c:7c:10:7b:18:a4:68:11:37:ae:63:4e:85:d2:
97:f2:20:e3:20:b3:28:09:63:1b:78:bc:08:db:b4:
18:bb:92:b7:73:e6:e4:72:66:21:fc:46:fe:63:6b:
e7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BD:3B:D0:1A:95:55:96:21:C2:41:A1:3C:DC:35:E6:00:4E:4A:2A
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BL070BqVVZYhwkGhPNw15gBOSio.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.102.148.0/22
Signature Algorithm: sha256WithRSAEncryption
50:ee:d5:a7:4b:d0:05:6d:8d:c0:84:d2:24:d1:ae:72:51:c1:
9b:d9:e3:10:48:7e:d7:d4:5c:07:0b:49:04:e9:54:4b:0e:dc:
0e:c4:fe:18:0d:52:72:3d:7d:d7:14:99:b4:b2:bf:c1:37:d3:
4f:ae:74:0c:dc:84:f6:c4:47:65:a9:82:22:b1:46:38:f0:1c:
a0:52:d3:2d:ad:60:b0:d8:ce:c8:c4:3c:f8:5d:65:f9:c6:26:
1a:97:30:54:2d:dd:43:a3:2b:77:a7:84:f8:e1:32:61:4a:78:
30:63:5b:43:75:14:9d:f5:cb:65:e4:8c:03:d0:b1:50:5f:d3:
7e:8a:30:57:96:fe:10:d6:64:8d:52:ae:e6:3f:a2:c2:1d:d3:
57:3b:47:a2:e6:a1:9c:70:c4:05:96:b2:32:ef:39:df:dc:d1:
ac:27:92:71:12:37:65:ac:4f:18:f4:31:82:e3:4d:a0:10:b4:
ac:4e:10:7f:c3:7f:0f:96:8b:8f:55:49:7d:e5:38:22:20:11:
1d:bd:cc:cd:c7:b9:5d:7a:31:07:c6:7d:92:e1:cf:c6:d6:8a:
97:14:d7:c9:1b:db:66:d4:02:40:85:57:b9:cf:47:d3:6b:dc:
98:93:99:72:96:04:15:94:e2:a6:be:10:8d:ab:9b:4b:37:cc:
9e:a8:58:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:54:25 2026 by rpki-client