
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/DDSDOEKVNLCnkFjumY6lbmfT43Y.roa
File: DDSDOEKVNLCnkFjumY6lbmfT43Y.roa (raw, json)
Hash identifier: NP9qwMzDjrWLYDk23wSK3mdlCjGD7QzKDvt4Zob+Y08=
Subject key identifier: 0C:34:83:38:42:95:34:B0:A7:90:58:EE:99:8E:A5:6E:67:D3:E3:76
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 10C7
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DDSDOEKVNLCnkFjumY6lbmfT43Y.roa
Signing time: Sun 01 Mar 2026 01:54:40 +0000
ROA not before: Sun 01 Mar 2026 01:54:40 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.78.26.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4295 (0x10c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 01:54:40 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=0C348338429534B0A79058EE998EA56E67D3E376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6d:6c:aa:5a:04:03:84:4b:cd:ba:39:2d:c7:
eb:dc:d5:11:15:77:b4:8d:bf:38:83:5e:a2:68:3f:
d1:70:d4:66:a3:b9:df:e6:02:2a:e6:15:7c:d8:fb:
f2:5d:a8:02:e5:82:1a:c7:4b:48:d5:df:22:e6:90:
3a:c1:b1:ae:00:93:70:d6:c4:ae:61:c3:96:34:a0:
4d:31:06:43:4c:3d:b8:8f:ab:a8:28:e4:36:3c:92:
9d:3d:cc:01:89:ea:66:66:43:ee:b8:63:eb:45:fc:
c8:01:02:31:0a:37:59:41:07:53:15:f6:a4:89:a8:
2b:27:0c:89:15:ad:b8:c5:23:9e:ba:98:c4:af:b3:
b7:be:8f:a9:e6:50:1d:6c:06:f8:43:3c:23:0e:a2:
69:01:21:a7:80:45:bb:99:4f:aa:11:b8:24:d2:f5:
eb:f7:3e:ad:46:75:4c:45:df:12:99:5c:51:04:37:
67:28:55:57:51:55:89:4a:8d:4d:d0:e6:04:a3:2c:
ce:53:9b:ee:32:1d:4d:e1:1e:7c:4b:76:a0:83:c8:
03:07:7e:15:c1:fb:f7:ed:58:1f:eb:5d:72:ed:0e:
e1:ef:4b:9c:46:72:72:83:71:8d:ea:bb:15:a5:40:
b8:be:d9:15:a5:6b:b8:54:fa:7c:de:59:d8:e3:68:
39:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:34:83:38:42:95:34:B0:A7:90:58:EE:99:8E:A5:6E:67:D3:E3:76
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DDSDOEKVNLCnkFjumY6lbmfT43Y.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.78.26.0/23
Signature Algorithm: sha256WithRSAEncryption
13:00:c0:f0:42:d5:8e:9b:9e:23:9a:0d:72:55:a6:b4:a8:0d:
d5:01:37:ff:dd:da:2b:4b:3d:45:7e:06:3d:ff:56:2b:6d:03:
ad:a6:a2:ab:9f:73:ac:37:07:e9:15:6c:b7:bd:a6:1f:93:7d:
be:2c:ff:eb:0d:86:35:80:b4:f8:bb:44:00:be:33:5f:cc:28:
98:18:1f:94:7b:5f:ec:34:75:ae:9b:6a:c0:ae:37:b7:87:11:
59:25:ba:06:85:45:82:a8:0e:01:9e:38:5a:ab:4c:7b:49:c6:
56:df:57:ff:1c:0b:7d:13:0f:3a:86:d5:6a:4b:e0:4e:a1:16:
c8:be:17:01:42:a5:fe:5b:70:37:4f:da:13:3e:7c:3c:24:57:
54:9e:d3:77:1d:8e:7f:5f:0a:05:7c:6b:7c:ce:0f:00:00:52:
8c:06:48:c5:7d:5d:29:b7:21:38:42:8a:fa:0c:28:7d:de:be:
89:93:a8:d8:1a:06:26:a7:0e:24:e2:d1:95:eb:be:17:04:1c:
02:69:3f:89:d6:3b:23:7d:3c:cb:2b:17:73:64:fd:58:3d:6c:
a5:28:f5:46:39:95:6c:d6:8b:59:4e:ed:49:8c:8d:d4:b7:f4:
ff:e4:d6:4a:25:f4:cc:5f:76:c0:0e:de:af:04:54:c9:44:cd:
31:7d:6a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:17:19 2026 by rpki-client