
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/GQlSiFC1OapvP8duk0zpZQwJM9k.roa
File: GQlSiFC1OapvP8duk0zpZQwJM9k.roa (raw, json)
Hash identifier: ZNfSvMck+DlzsomL/Q2KKm36IsnLqUWH6VpbbyU01Vw=
Subject key identifier: 19:09:52:88:50:B5:39:AA:6F:3F:C7:6E:93:4C:E9:65:0C:09:33:D9
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 11FA
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GQlSiFC1OapvP8duk0zpZQwJM9k.roa
Signing time: Sun 01 Mar 2026 02:44:38 +0000
ROA not before: Sun 01 Mar 2026 02:44:38 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.96.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4602 (0x11fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:44:38 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=1909528850B539AA6F3FC76E934CE9650C0933D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:33:9a:5d:d9:7f:6c:be:d1:46:25:2a:71:b1:
89:af:db:5e:5a:97:ba:a8:e1:3d:04:e9:08:42:8f:
fb:3a:15:63:76:9e:3e:39:21:93:72:5d:56:ff:ff:
b8:40:eb:e1:ab:a7:f2:c4:e1:8d:06:ed:6e:4c:f4:
8f:e4:5c:90:c1:eb:23:3c:36:12:19:63:35:52:7b:
a5:a0:b3:d4:e8:59:44:6d:d5:40:83:fb:ef:90:4a:
a0:50:60:34:b9:5d:c0:e0:52:fd:dd:35:7a:8c:13:
a2:e0:72:55:03:e3:85:72:5c:be:45:7b:ba:18:53:
71:ba:fc:66:06:73:f5:ba:ce:99:5d:35:9f:75:3e:
56:3e:bb:01:2b:3a:92:34:13:da:fc:68:ad:4d:cb:
f8:a7:fd:88:a5:93:4a:2a:5c:18:9a:55:21:73:99:
9b:fd:3c:6c:7e:68:ee:c0:dc:7b:c6:5f:0a:7f:f9:
df:fb:22:bf:d1:26:d2:5d:68:8a:dc:bc:7a:bb:34:
f6:f7:03:d0:3d:c3:20:1c:c6:3b:fd:a8:67:05:7c:
96:f1:7e:a6:f2:8c:62:e4:84:a1:9d:ae:67:ee:9d:
0f:1c:0b:ed:aa:d4:05:94:c5:2a:d5:75:a2:91:d6:
14:09:98:e1:89:46:e4:13:28:6e:57:4a:5d:a2:69:
65:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:09:52:88:50:B5:39:AA:6F:3F:C7:6E:93:4C:E9:65:0C:09:33:D9
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GQlSiFC1OapvP8duk0zpZQwJM9k.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.96.14.0/23
Signature Algorithm: sha256WithRSAEncryption
81:ff:00:c0:5a:5a:75:c3:f8:fc:88:1e:62:be:78:94:81:fa:
14:5b:e4:a4:db:0c:f3:60:b4:16:17:66:ed:73:e6:72:9f:ce:
f7:4a:7e:5b:99:9b:ce:33:5c:65:2c:e4:1b:98:72:e9:c2:21:
f3:5a:11:4e:df:14:21:5b:52:70:74:48:80:8e:74:01:90:ab:
19:04:b5:d7:83:fd:22:ce:1e:c3:5f:ba:29:08:a6:9a:94:9d:
5f:88:0c:e0:96:46:96:08:3b:e7:57:48:04:c1:c8:0f:d7:34:
f8:3b:f5:28:aa:23:7e:65:79:2d:3d:13:9a:1f:e0:20:a3:ad:
4e:b6:d8:e0:03:9b:b5:7a:08:7f:45:d4:a0:00:15:85:87:35:
db:49:cd:33:1a:63:78:83:97:cd:bb:9a:48:7a:3a:07:ee:bf:
0a:42:f7:bb:9e:2b:62:6c:c7:c5:87:77:dc:f5:c0:03:9b:2d:
59:22:a5:ce:97:3e:f6:6a:37:80:ac:3b:3b:07:2f:48:3c:62:
40:a4:d0:1a:6e:2f:56:6b:0c:20:26:2f:31:83:24:d9:2e:e3:
2a:04:ce:32:54:a4:ea:3e:5d:7a:00:0f:78:47:55:98:25:cb:
79:c7:ad:92:d2:c5:b0:57:4a:3e:a6:8f:69:e5:a3:95:41:0c:
7c:ab:d3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:54:02 2026 by rpki-client