
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/JR8B3k5EnrqIUSAwPDGldhvbdTo.roa
File: JR8B3k5EnrqIUSAwPDGldhvbdTo.roa (raw, json)
Hash identifier: ui3NLBguuH2SpxqZ+uKFgZ/M1VuVYcT6zg7obqny584=
Subject key identifier: 25:1F:01:DE:4E:44:9E:BA:88:51:20:30:3C:31:A5:76:1B:DB:75:3A
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1137
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JR8B3k5EnrqIUSAwPDGldhvbdTo.roa
Signing time: Sun 01 Mar 2026 02:12:43 +0000
ROA not before: Sun 01 Mar 2026 02:12:43 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 220.210.108.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4407 (0x1137)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:12:43 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=251F01DE4E449EBA885120303C31A5761BDB753A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8d:66:8c:86:62:25:52:69:33:96:bf:ff:51:
1f:2a:60:0f:43:bc:05:fa:cf:05:57:ab:60:a1:f8:
72:84:47:00:65:ab:82:f0:83:79:5e:dd:4a:11:58:
50:06:59:56:38:ed:5a:11:ed:2f:f1:bc:ea:12:12:
31:73:98:be:eb:e7:7c:62:38:59:e0:5a:68:94:ba:
c6:5f:b0:89:74:39:e9:71:1a:16:33:7e:7b:b1:8a:
84:83:f8:75:77:8a:9e:b4:39:58:3f:a2:0f:0e:e9:
36:3f:cb:a6:e3:69:15:92:1c:52:e5:53:23:da:39:
d7:43:fe:76:3f:ec:8c:24:76:82:1c:a5:96:fc:46:
fb:eb:65:59:43:bf:55:6e:3f:56:35:9d:a0:78:76:
b6:26:51:58:97:7b:b1:80:82:89:b3:cc:98:bf:43:
ee:9d:4a:60:cc:4b:cc:a5:a9:c4:90:bf:97:de:53:
17:44:f8:6f:da:d2:fb:32:dc:ad:90:d9:29:c3:75:
ec:21:b1:9f:66:c9:61:9c:51:ed:b7:db:3c:e4:8e:
4e:90:e3:26:5f:e6:90:87:ef:23:73:f8:6d:01:76:
2f:6a:19:fd:48:a0:05:95:cc:8b:79:97:97:d0:45:
02:8f:0f:c3:42:af:64:93:84:35:8b:83:f7:b7:b3:
4b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1F:01:DE:4E:44:9E:BA:88:51:20:30:3C:31:A5:76:1B:DB:75:3A
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JR8B3k5EnrqIUSAwPDGldhvbdTo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.210.108.0/22
Signature Algorithm: sha256WithRSAEncryption
de:e8:4d:24:fd:e7:18:27:73:12:0f:a1:68:27:1c:c9:42:0b:
16:aa:61:38:c8:ff:ce:1c:c7:fa:38:72:e4:76:c3:d4:5c:19:
44:71:00:a7:78:8c:c1:ca:7d:cb:94:ab:b1:d3:15:f1:53:f3:
a0:0b:24:2c:75:bf:e2:be:41:af:3d:fb:9f:6f:22:a0:32:30:
09:80:6c:3c:13:82:74:9d:b9:2f:66:61:72:1a:1a:40:41:45:
7f:1d:52:bd:38:fe:f1:7c:a5:88:2e:68:67:02:83:9f:be:a9:
84:04:17:64:d4:9b:2d:09:fd:a5:23:ac:3f:69:d6:57:f2:ab:
74:2d:58:e4:36:49:59:71:be:a9:8a:08:c7:47:9b:85:27:2a:
20:14:b9:53:f4:d7:0f:1d:b9:01:5a:5f:69:e5:b2:79:15:fd:
ab:15:0e:39:da:3b:44:26:08:56:bf:de:fd:0a:02:4f:ed:a5:
be:ef:da:92:56:ff:b9:11:a8:8c:66:94:8c:4b:f3:34:fa:88:
37:4c:35:15:c7:f4:6a:b9:50:0a:15:c9:78:3f:9f:cb:e8:15:
74:93:56:1d:c6:5a:cd:8c:22:c6:0a:e0:35:24:d4:fb:88:db:
04:c4:fb:7f:20:eb:00:1f:02:e2:b6:90:2b:9d:8d:9b:c0:1a:
0f:95:66:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:26:17 2026 by rpki-client