
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/EDZNJRlKOsi6ueOOJaBQZGbSo-Y.roa
File: EDZNJRlKOsi6ueOOJaBQZGbSo-Y.roa (raw, json)
Hash identifier: z382HjerTieP0XYScMW0KykIIF5XC9JkHpqwlRB7L/4=
Subject key identifier: 10:36:4D:25:19:4A:3A:C8:BA:B9:E3:8E:25:A0:50:64:66:D2:A3:E6
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 106E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EDZNJRlKOsi6ueOOJaBQZGbSo-Y.roa
Signing time: Sun 01 Mar 2026 01:34:22 +0000
ROA not before: Sun 01 Mar 2026 01:34:22 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.214.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4206 (0x106e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 01:34:22 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=10364D25194A3AC8BAB9E38E25A0506466D2A3E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:49:4d:5a:bc:77:ae:71:44:30:c6:49:05:75:
7b:72:cb:5a:fc:b0:e5:6b:57:31:1d:fe:7b:75:41:
95:42:14:eb:e5:f2:20:12:f6:1e:7f:95:42:83:a3:
c2:16:7e:b3:91:5d:87:41:7b:55:f5:bc:bb:c0:0b:
8f:d5:21:42:43:91:a3:01:5a:79:b8:e0:5e:4e:30:
d9:90:21:63:f8:0d:49:be:68:fa:48:f2:90:6d:55:
28:50:65:f3:30:e0:d1:17:b9:cc:a3:ab:0c:00:72:
43:f4:9d:6e:75:c2:91:cc:00:1d:e4:e7:19:3e:99:
ef:07:4e:c8:5b:7d:52:e6:c8:d7:75:90:fd:30:e0:
04:5c:67:10:69:f1:1d:f8:49:69:5b:a5:2f:5e:5e:
3e:7d:e4:f6:31:de:4f:5f:5a:49:82:a8:f0:8a:b9:
3e:e4:11:49:0f:8c:ed:d3:49:ca:a7:90:64:3a:59:
8e:8c:b7:60:4f:a6:b6:54:01:e0:8f:1e:3c:1a:05:
8e:32:e7:76:9c:46:1c:e5:00:9d:c0:ff:cd:b5:42:
80:8e:26:a7:c7:06:c8:f4:cd:9f:c5:28:41:9e:de:
66:99:92:ce:ed:97:b9:80:ad:51:9f:1c:b6:3e:15:
5d:63:42:8f:36:b7:e8:7a:0d:97:4b:39:c7:6c:1b:
2b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:36:4D:25:19:4A:3A:C8:BA:B9:E3:8E:25:A0:50:64:66:D2:A3:E6
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EDZNJRlKOsi6ueOOJaBQZGbSo-Y.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.214.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:09:a5:6e:7d:d7:8c:f2:dd:2a:aa:25:ab:aa:ac:59:48:ab:
81:ea:09:6f:ba:fe:e3:4c:aa:87:05:d1:22:20:a6:07:84:c9:
ee:a3:36:35:b2:9b:32:ae:48:9b:ee:33:69:20:ff:6c:f3:56:
e1:e9:0d:17:c8:68:ae:32:8d:4d:7a:15:b5:bb:e2:ca:0f:bc:
55:3e:b5:23:73:7b:27:5a:bf:28:f8:44:c0:93:2a:81:e8:61:
f2:90:a8:d4:4f:0a:aa:6a:be:a0:33:9b:90:49:34:cd:e3:6f:
fc:d0:45:04:56:79:08:f4:ff:44:49:6d:4f:4d:47:19:f8:c8:
b7:bd:dc:4a:70:2b:da:81:8b:d9:94:68:7d:a1:c2:1a:39:97:
77:86:f1:d6:a1:9d:ec:6c:a6:a2:38:64:ba:29:3f:4a:7b:b9:
94:42:7c:9e:be:53:ca:e2:6f:20:d2:f6:9b:1b:72:e2:eb:87:
0b:35:92:00:4e:1b:9d:61:20:50:52:82:6b:e7:89:94:1b:5d:
4e:02:78:c3:04:21:89:d9:02:4a:7c:d0:11:e3:71:a6:29:8d:
05:67:f8:83:f5:62:c6:e9:a5:b3:22:d2:0b:67:6d:5a:ad:f5:
58:f9:c6:6b:16:c5:ce:2d:df:62:ce:7e:e7:0c:c6:1c:90:1d:
13:43:29:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:17:05 2026 by rpki-client