
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/JlhVKUT199Sfbw5w-RNSGy60D90.roa
File: JlhVKUT199Sfbw5w-RNSGy60D90.roa (raw, json)
Hash identifier: QUGKKOh5zR63JGspdK4J3yEgVAWGNlFaLO2UEqqG6P0=
Subject key identifier: 26:58:55:29:44:F5:F7:D4:9F:6F:0E:70:F9:13:52:1B:2E:B4:0F:DD
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 125F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JlhVKUT199Sfbw5w-RNSGy60D90.roa
Signing time: Sun 01 Mar 2026 03:00:27 +0000
ROA not before: Sun 01 Mar 2026 03:00:27 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 211.14.92.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4703 (0x125f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 03:00:27 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=2658552944F5F7D49F6F0E70F913521B2EB40FDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:2e:9e:4d:f8:f2:e9:02:8e:20:d8:81:8c:29:
b3:4b:b4:de:1e:76:3e:b1:b8:be:53:09:2f:29:5d:
db:90:e2:18:55:a1:6f:49:ae:4b:91:f6:35:14:b7:
2f:2c:93:ed:58:90:8c:fe:2a:b5:2e:d7:83:ee:32:
0a:b1:51:14:21:c0:29:ad:8f:3e:25:35:43:cc:69:
39:e1:d2:c0:f7:c4:f9:f4:59:0b:df:60:85:6f:6a:
47:1f:12:18:3c:18:61:df:dc:f6:a9:d5:89:5a:92:
47:8d:e4:17:04:9d:14:66:71:d6:d7:04:94:8c:b8:
3d:c5:10:da:ee:ee:1b:79:62:93:54:47:0b:9f:55:
5e:7a:ed:d6:67:09:71:41:4f:04:bb:75:d2:ec:02:
14:e1:88:a3:dc:ef:4f:09:a2:07:59:a4:e9:2c:1d:
88:d3:d7:17:c6:8f:7c:27:89:78:f8:ae:b1:48:ec:
d4:89:a4:6f:92:c1:7d:9e:ee:1c:bf:67:dc:ff:4d:
ff:b3:e4:c0:b1:81:70:b6:27:97:4b:34:6e:fc:81:
f8:1f:ac:79:f1:b3:59:4d:37:ae:90:6a:b0:a3:bf:
b4:89:0b:51:b6:86:b9:ef:0e:91:8c:93:84:6e:1d:
3d:cf:e8:2f:1b:07:41:56:bd:5f:f9:ea:bd:3b:a7:
09:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:58:55:29:44:F5:F7:D4:9F:6F:0E:70:F9:13:52:1B:2E:B4:0F:DD
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JlhVKUT199Sfbw5w-RNSGy60D90.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.14.92.0/23
Signature Algorithm: sha256WithRSAEncryption
af:0d:86:24:9c:2a:f8:9f:e1:db:25:09:ec:dc:1d:47:d2:17:
c7:a7:84:25:2f:61:f9:ae:03:09:88:53:19:dd:1d:7c:43:93:
3d:bf:4c:8c:95:8e:be:d1:31:09:8f:67:1a:d2:ec:97:b4:24:
1c:dd:bd:c8:ec:9c:1c:91:24:d1:2c:32:ed:41:37:9d:d5:1d:
0d:07:1a:7d:3f:f5:86:81:92:6d:ac:7a:5c:64:f2:6c:81:90:
a8:f7:fb:77:5e:b3:66:14:01:0c:a1:3f:98:ca:36:a5:c6:8c:
2d:2c:07:17:d6:11:2d:fc:3e:da:2e:bf:1d:75:eb:47:d2:0b:
b1:05:a1:e0:f2:d6:88:f1:c3:39:c3:39:2a:98:8b:9d:da:a8:
31:58:46:38:8d:38:19:f1:65:02:72:2c:3a:1d:70:94:43:03:
4e:1c:4c:fb:d5:65:10:50:e0:74:85:d3:77:30:92:c4:5f:94:
43:3e:29:87:36:38:9c:bb:1f:8d:ab:cc:ce:ed:fb:fe:a6:60:
72:24:52:29:69:8b:f4:17:bd:b0:c7:4b:33:93:00:32:c6:47:
fe:28:f5:bc:3f:d4:ff:df:b5:e2:07:39:de:af:43:72:90:e3:
ca:c0:cd:3e:4a:60:37:c5:c4:6c:1d:f1:4b:49:23:96:0d:1a:
80:d6:e2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:58:15 2026 by rpki-client