
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IDsXMMXFKU3pLUYdqB_2fsl7Oao.roa
File: IDsXMMXFKU3pLUYdqB_2fsl7Oao.roa (raw, json)
Hash identifier: RAZ0+Y4vSgWQR3v36QsF0HwYPfuWSZU/ien7WGhw2WM=
Subject key identifier: 20:3B:17:30:C5:C5:29:4D:E9:2D:46:1D:A8:1F:F6:7E:C9:7B:39:AA
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1176
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IDsXMMXFKU3pLUYdqB_2fsl7Oao.roa
Signing time: Sun 01 Mar 2026 02:22:03 +0000
ROA not before: Sun 01 Mar 2026 02:22:03 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.105.114.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4470 (0x1176)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:22:03 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=203B1730C5C5294DE92D461DA81FF67EC97B39AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6e:58:4c:3d:de:f7:a4:97:2f:ce:00:ab:0f:
bc:3f:ac:a5:61:be:62:b0:1b:88:91:7c:cc:a2:33:
70:5f:c0:fe:6c:d0:07:bf:17:86:80:96:b6:4e:e3:
21:8a:f3:a6:7c:ea:c6:02:7b:49:7e:90:ad:af:25:
25:a3:88:0c:1f:76:e2:3c:d0:97:44:4e:ee:c2:9d:
90:73:b4:41:6a:a5:91:b5:e4:72:68:04:53:5c:84:
c1:cd:bd:1e:30:41:16:c1:4b:7e:9f:89:05:f1:8c:
c3:3c:92:b3:ee:40:cc:fc:51:da:97:f5:af:6f:5e:
c4:e5:c4:d3:84:93:40:ad:da:d9:8f:00:0f:e2:99:
dc:6f:33:6c:ce:1e:96:f7:d2:37:05:db:5b:3b:2d:
29:19:6a:b6:0a:13:7d:44:18:50:da:9d:ab:77:8e:
2c:56:5b:e4:2e:2c:4f:9c:8d:66:31:4c:bb:cf:dd:
9b:04:58:08:af:99:2d:fb:1e:a5:b8:c7:b3:5a:1f:
f9:7e:1a:3f:dd:14:17:8b:34:70:50:c0:c6:27:b4:
4a:53:f2:07:f2:45:53:5b:2a:38:c9:54:a4:10:2f:
b0:22:2d:5e:25:04:62:74:9d:8d:4d:81:73:46:48:
a8:ee:27:a8:c0:3f:e0:7a:2e:7c:bd:d6:24:a4:fa:
d5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3B:17:30:C5:C5:29:4D:E9:2D:46:1D:A8:1F:F6:7E:C9:7B:39:AA
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IDsXMMXFKU3pLUYdqB_2fsl7Oao.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.105.114.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:26:fb:e8:15:e0:bf:05:8b:3f:29:73:80:9b:3a:ae:46:05:
7b:e9:01:62:73:da:8d:c9:25:9a:b8:8a:65:ed:be:95:12:84:
a2:ab:92:fd:65:c8:fd:b8:37:2d:6e:14:59:7a:e5:ec:ca:f5:
33:b8:37:24:b6:7d:c6:6e:01:e2:1a:b9:89:a2:a2:ef:5e:f5:
bf:c6:86:4d:ec:6d:21:9f:ee:55:86:25:35:e1:ee:b1:7b:ce:
cf:fa:bb:4a:3f:b7:fa:90:8a:9e:f9:10:7a:b2:a1:bd:41:77:
e9:0b:f2:c7:7d:0f:ac:93:c8:e2:85:97:ec:cf:52:d1:5e:3e:
aa:e1:31:65:01:05:65:fe:6c:77:ad:ef:08:2a:1c:ee:e4:00:
92:ee:e9:5a:4f:b1:fc:83:3a:82:72:e4:e0:74:4d:41:d0:e0:
f8:49:2d:d3:d8:bc:64:23:42:20:35:5b:1b:bc:38:19:23:a5:
f1:85:99:ba:4f:4c:44:d0:35:97:ec:21:63:2a:90:35:36:7c:
cf:fe:38:4d:74:af:a4:0a:0b:be:d2:21:86:ba:fc:4c:0e:80:
e5:46:8f:3e:64:c1:5e:a9:7e:24:41:36:f2:db:86:0c:d7:92:
d2:3a:3d:c2:6d:e4:b9:1c:b3:8b:21:cf:4e:6c:ae:93:91:08:
8f:c7:a8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:10:24 2026 by rpki-client