
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/CtrPvxTXH3xDnHiYWd7PaQu1jS4.roa
File: CtrPvxTXH3xDnHiYWd7PaQu1jS4.roa (raw, json)
Hash identifier: AMOGGK06Uyegcot4M36WijkbmEbQHYBEeQzj6i9nVLQ=
Subject key identifier: 0A:DA:CF:BF:14:D7:1F:7C:43:9C:78:98:59:DE:CF:69:0B:B5:8D:2E
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1153
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CtrPvxTXH3xDnHiYWd7PaQu1jS4.roa
Signing time: Sun 01 Mar 2026 02:16:54 +0000
ROA not before: Sun 01 Mar 2026 02:16:54 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4435 (0x1153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:16:54 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=0ADACFBF14D71F7C439C789859DECF690BB58D2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9b:5d:fc:3b:e1:89:fa:87:80:5f:32:42:b0:
97:45:ed:fe:39:c9:ad:32:af:2a:f8:c1:c4:38:25:
d4:63:6b:47:99:95:81:86:7f:ec:da:2e:f6:54:af:
a9:a5:91:93:67:dd:95:84:7d:e7:80:0d:fc:63:e8:
47:d3:2e:91:99:d5:4f:ea:5a:6e:3e:06:c6:4f:74:
fc:aa:75:24:4c:12:30:7b:da:60:b3:1d:0a:e5:04:
69:df:65:44:ac:37:16:db:72:57:28:e9:65:a6:c2:
33:9b:ed:4b:ec:aa:2e:48:c8:14:fe:c8:e6:4f:31:
a5:d8:34:fc:e6:de:39:38:70:17:9d:28:d2:67:d0:
39:99:d0:4a:38:c5:a5:b9:d1:77:55:c6:28:bc:cb:
89:02:77:b9:9e:33:2f:ad:31:05:10:a2:e2:83:4c:
6a:47:58:15:f5:60:e5:65:c5:cb:d0:b4:7b:3c:8f:
59:42:37:4b:c3:c1:ef:d9:8f:f1:ab:25:e1:15:ef:
a7:ab:63:1a:ac:d4:18:0d:6e:a4:71:4f:2f:17:fd:
1d:3f:dc:9d:9e:9e:ea:c7:09:5f:b6:91:57:70:8b:
8c:75:37:ec:e6:17:4d:e1:47:08:bd:15:f9:4e:d1:
9e:4e:75:10:2a:de:59:d2:a7:aa:54:be:15:17:9d:
c0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:DA:CF:BF:14:D7:1F:7C:43:9C:78:98:59:DE:CF:69:0B:B5:8D:2E
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CtrPvxTXH3xDnHiYWd7PaQu1jS4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.191.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:ca:04:22:b3:d7:db:6e:42:08:9c:07:e0:50:15:b8:9d:41:
6c:6f:6b:ec:3c:33:d2:a6:7d:f3:41:53:34:7e:74:74:ca:86:
a6:21:8f:aa:2d:04:2b:82:9f:f0:87:22:cd:05:96:d6:b4:d4:
bb:2e:d7:ab:e7:80:bd:c3:ae:66:c1:23:9a:d2:9a:6d:ad:02:
ec:70:9c:da:41:98:23:d4:f7:e9:db:7f:9c:eb:f1:1e:27:6d:
42:48:b4:e2:13:8f:15:b5:15:16:c7:45:81:7c:74:5a:70:12:
6b:fd:1e:0a:a1:ce:b5:48:71:93:5f:ec:23:41:f5:b6:62:c2:
7a:75:a2:03:0f:6a:a5:45:9d:da:35:7f:00:89:5a:2d:54:7b:
2c:d1:b2:66:55:ac:06:b5:8a:77:df:34:40:8c:ce:9a:03:e9:
30:5c:cf:b8:4e:74:d7:f1:27:22:e0:be:f9:e0:44:be:1e:b4:
92:cd:8a:8d:f4:5f:51:ba:64:07:07:54:c4:92:91:f4:5a:74:
83:c5:62:24:66:7c:88:8e:03:d4:b4:11:db:01:8f:c1:0f:87:
de:7d:2a:eb:3c:b9:27:c6:6d:a3:78:d7:7c:99:21:45:fc:1a:
6c:fb:d4:00:ab:2f:23:86:50:46:a7:50:9b:75:1f:67:2c:a3:
f3:2c:9a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:22:50 2026 by rpki-client