
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/DksQkvUkDrQ3ej8Ag3aXtpvKgnc.roa
File: DksQkvUkDrQ3ej8Ag3aXtpvKgnc.roa (raw, json)
Hash identifier: leaWGVf36zaxrjfA8Yq1zUmbNrJNqZDIN/9kDSea5RI=
Subject key identifier: 0E:4B:10:92:F5:24:0E:B4:37:7A:3F:00:83:76:97:B6:9B:CA:82:77
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1332
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DksQkvUkDrQ3ej8Ag3aXtpvKgnc.roa
Signing time: Sun 01 Mar 2026 03:36:25 +0000
ROA not before: Sun 01 Mar 2026 03:36:25 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.96.242.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4914 (0x1332)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 03:36:25 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=0E4B1092F5240EB4377A3F00837697B69BCA8277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:2b:45:6d:28:28:ba:ab:66:8d:40:e3:ff:ae:
87:0e:ff:68:6a:74:e0:b2:15:c1:69:4a:1d:34:7a:
60:8a:c3:74:f3:a8:59:bf:89:0f:98:80:e5:cf:81:
c5:c1:4e:7f:54:c0:fe:fb:41:99:3e:ed:28:83:14:
24:3f:2a:99:c9:01:6a:89:83:c4:6b:6e:d3:99:92:
39:25:77:fa:cc:e8:2a:ef:13:93:83:ea:c1:81:8e:
a3:4e:f7:53:bf:51:d5:ec:7c:3c:a9:6c:fe:d9:f7:
89:3a:52:69:ef:d1:f9:87:70:72:2e:0a:d9:9a:5a:
f0:ec:7c:c7:3b:88:3a:43:01:f2:1d:06:2a:a7:d8:
99:f6:58:03:b7:0c:a1:14:f4:09:fb:0d:5a:47:0d:
69:7a:91:f5:8e:fc:9a:f4:7a:61:cc:64:fb:cc:af:
67:16:46:d7:10:f7:96:0f:f6:5a:fc:48:5d:a2:f0:
5a:15:37:67:10:04:1a:e1:26:39:7e:8a:45:62:80:
3a:62:98:f8:95:a7:76:69:73:90:3f:bf:5b:13:f8:
9c:e1:2c:9e:2f:82:52:07:d7:ed:a7:2b:66:9c:63:
6b:94:60:db:07:87:36:13:1b:e9:a0:97:c7:72:1f:
aa:64:a2:20:85:bb:26:75:33:ce:b8:24:92:0a:d3:
b7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:4B:10:92:F5:24:0E:B4:37:7A:3F:00:83:76:97:B6:9B:CA:82:77
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DksQkvUkDrQ3ej8Ag3aXtpvKgnc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.96.242.0/23
Signature Algorithm: sha256WithRSAEncryption
90:15:be:e1:78:1f:7a:85:ef:3f:cd:25:83:b8:ff:16:5d:1d:
1f:47:cd:6f:b2:8d:b2:87:af:24:f3:6b:96:f9:ac:34:70:7b:
7d:43:26:87:d4:a7:7e:8d:61:94:c1:17:0c:ea:d6:62:18:c7:
d3:84:0a:58:75:69:d6:16:41:40:83:a5:f7:ba:93:bb:40:2b:
d2:bf:c4:64:f8:d9:9d:49:ab:bd:ad:99:6c:26:73:84:33:96:
64:47:2c:48:f3:47:64:82:88:89:19:e7:59:b1:4d:87:06:dc:
2a:cb:1c:72:2e:87:ee:2b:87:64:11:cf:43:d4:47:a2:af:9a:
24:3a:78:b6:b0:14:93:fb:40:f5:52:a1:d6:5a:3f:e3:e8:a2:
2e:c4:4d:83:56:51:6d:ef:68:82:96:e2:5d:1b:cd:53:38:db:
b2:d3:18:a3:99:6c:79:7b:36:68:6b:af:a3:6b:14:55:59:7d:
14:6f:e5:6c:f4:35:cb:33:82:31:95:15:f4:d2:c6:76:52:42:
63:de:77:4f:02:0d:b1:59:5d:12:02:b9:8e:d4:59:09:e9:69:
c7:2e:a6:00:ee:e7:9d:f5:71:1a:8c:9d:61:1c:4e:6f:72:12:
5c:15:34:c3:7e:5a:9f:bf:9b:40:82:85:fd:cc:cc:0c:dc:9a:
cd:05:22:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:06:08 2026 by rpki-client