
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/K0Ceg09DE3hd-rQrsMhCVDqjiGg.roa
File: K0Ceg09DE3hd-rQrsMhCVDqjiGg.roa (raw, json)
Hash identifier: 3puPevPH61Bb8qEy3AgeJbJLimvaE1veAjjDpQcR1O0=
Subject key identifier: 2B:40:9E:83:4F:43:13:78:5D:FA:B4:2B:B0:C8:42:54:3A:A3:88:68
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 130E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/K0Ceg09DE3hd-rQrsMhCVDqjiGg.roa
Signing time: Sun 01 Mar 2026 03:32:28 +0000
ROA not before: Sun 01 Mar 2026 03:32:28 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.96.40.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4878 (0x130e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 03:32:28 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=2B409E834F4313785DFAB42BB0C842543AA38868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f9:8a:72:7c:02:9d:6f:53:60:12:30:25:37:
7c:e7:07:87:25:10:5b:23:22:42:a4:f5:f9:71:a7:
94:6d:6f:0c:03:b9:f8:77:43:a8:12:47:a3:41:43:
9c:07:f6:a5:89:bf:3c:17:3f:c2:9b:38:ce:d5:3f:
cd:37:9e:5d:66:4c:a1:be:a5:a9:d4:eb:32:5d:44:
4c:cf:77:5f:6f:59:20:1c:ea:3f:bb:85:db:04:4c:
5c:fc:e3:21:a1:d0:87:e6:87:ba:89:27:4b:51:77:
74:e4:78:ed:d6:8d:d4:dd:10:f1:4b:c5:2f:31:17:
a5:20:3e:8e:73:d1:e0:ff:eb:9d:5a:c5:5f:fa:84:
f1:e1:16:59:0c:52:9b:b9:1b:ee:dc:05:db:c9:2c:
32:bd:9d:d7:1e:9e:57:28:55:4e:54:0f:63:30:ea:
5e:d7:00:16:d3:cf:14:bb:0c:84:b7:d8:1d:68:8a:
3f:a3:75:ed:18:d3:50:9b:a1:47:38:67:0e:d7:e8:
58:ac:27:23:a3:68:2b:2a:f3:ef:58:f6:29:07:92:
ba:1e:24:7b:f0:d4:4a:b6:97:96:5e:20:2a:ac:7d:
49:25:18:7b:7d:6c:d2:4a:d4:85:55:c3:ed:b7:68:
5d:e7:c0:54:f5:f0:04:d1:d4:32:44:de:f9:6d:40:
86:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:40:9E:83:4F:43:13:78:5D:FA:B4:2B:B0:C8:42:54:3A:A3:88:68
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/K0Ceg09DE3hd-rQrsMhCVDqjiGg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.96.40.0/23
Signature Algorithm: sha256WithRSAEncryption
59:bc:c2:7b:ee:a2:68:ea:17:2f:26:96:ac:92:ab:27:38:7e:
69:88:35:eb:66:15:6e:df:2c:1e:b7:11:f1:90:ab:9b:75:39:
52:9e:70:c5:0e:e4:0d:fd:d7:8b:26:1d:45:7d:85:ea:4a:30:
8d:8d:fa:a9:92:7c:50:e5:7d:6d:25:32:ab:da:24:f1:46:c0:
de:bc:ac:8b:6e:b1:dd:89:31:e4:7e:ce:2b:bd:ee:d4:50:59:
f6:f6:2f:e5:f4:4a:75:47:99:47:18:92:3f:55:27:8d:24:7d:
59:57:71:a9:0e:77:27:94:a6:48:81:89:83:32:23:2a:3f:f5:
09:80:92:31:a1:99:70:a6:8d:9a:b9:80:11:a5:3e:d3:cb:05:
a8:79:5b:fe:d7:00:f5:e2:68:91:ba:1a:11:da:ad:87:6f:b9:
88:fb:64:e5:e2:59:28:fd:33:25:0e:ed:95:05:1b:ec:a1:26:
da:46:6b:15:6e:da:ea:cb:fb:d2:cb:7c:4e:9d:80:35:89:60:
4f:41:b2:e7:35:0a:66:81:18:d7:a7:8d:8c:bd:a7:29:47:09:
c8:17:ae:b7:cf:dc:08:8a:38:82:5f:82:a3:87:ff:91:d9:42:
2d:fb:51:83:dd:64:1f:22:fe:8b:3f:0a:e6:f9:b7:db:87:13:
47:78:c2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:01:06 2026 by rpki-client