
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/K20Wky9pYdvRoE_aHg9X-a09ZRA.roa
File: K20Wky9pYdvRoE_aHg9X-a09ZRA.roa (raw, json)
Hash identifier: ttlJcJY7K/x6ARTvMoD6LkRkNryrOz2EJ8XUz+f7nsI=
Subject key identifier: 2B:6D:16:93:2F:69:61:DB:D1:A0:4F:DA:1E:0F:57:F9:AD:3D:65:10
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 10EC
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/K20Wky9pYdvRoE_aHg9X-a09ZRA.roa
Signing time: Sun 01 Mar 2026 01:58:42 +0000
ROA not before: Sun 01 Mar 2026 01:58:42 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.102.156.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4332 (0x10ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 01:58:42 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=2B6D16932F6961DBD1A04FDA1E0F57F9AD3D6510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:53:9e:60:ac:88:82:58:c9:9d:5b:00:2c:f3:
84:52:9f:27:f9:f4:d1:49:a1:8f:17:73:82:a2:33:
af:17:c7:e7:3d:aa:1a:31:e7:3c:a4:f1:6e:2b:56:
7a:17:e9:fb:e4:4f:50:3b:51:3f:c1:c0:4b:1a:82:
3a:85:6c:8e:6e:92:88:1e:a8:58:b6:63:dd:3b:e6:
9a:20:ae:31:be:a1:71:0f:88:6a:84:f4:56:da:b6:
9e:f2:dc:5b:19:2b:9b:63:92:e2:b4:8b:6d:5b:e1:
9a:b5:c1:00:1c:cf:29:51:57:75:41:2e:4d:c0:0b:
cb:8d:73:0b:9d:46:31:30:aa:0a:dc:59:c6:0a:4e:
23:5d:b5:d5:a6:b0:c0:7c:29:68:e6:2e:7b:e5:81:
de:d6:14:27:2b:18:c7:8b:d3:cc:07:77:69:57:62:
76:88:88:fd:92:ef:d5:b8:dd:74:ca:b4:86:cf:71:
3e:4b:a7:df:fa:8e:f1:69:af:10:ec:89:3c:41:89:
df:38:fd:61:00:1b:eb:56:d3:6a:10:5e:9e:35:cf:
c0:7a:25:92:47:e3:b3:3e:9f:1d:e0:a9:75:ba:d7:
6b:7d:b8:eb:c0:c3:41:b8:88:1c:7e:94:d1:c7:7c:
fd:14:bf:6a:6b:29:42:9f:83:56:b0:25:87:c4:58:
9c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6D:16:93:2F:69:61:DB:D1:A0:4F:DA:1E:0F:57:F9:AD:3D:65:10
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/K20Wky9pYdvRoE_aHg9X-a09ZRA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.102.156.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:ce:cd:44:5c:cc:f9:44:a6:26:ca:02:54:d2:5a:88:fd:85:
b3:3b:a4:ef:db:35:dd:1d:3b:22:4a:93:98:b3:10:25:82:76:
5f:27:28:03:45:35:3c:ec:67:c5:c1:0f:a7:de:82:96:b6:e3:
23:20:1c:ed:2e:eb:74:53:57:9c:55:04:5e:d6:c1:3c:3f:bc:
52:ec:3d:12:2f:53:3b:7e:d0:41:a0:40:4a:4a:6c:af:6f:1e:
16:4b:65:6b:30:a6:f1:0e:d4:69:c8:d8:a0:38:f1:39:3d:76:
4f:b6:e1:cc:27:73:18:a0:11:37:a0:e9:42:4a:c7:1c:be:38:
f8:17:8c:ac:4a:35:f1:0f:f6:b1:3d:67:c9:f9:c0:a7:05:37:
cc:c0:a7:ec:f9:83:cd:a5:94:3f:48:e5:4b:8e:1d:c4:2d:67:
d4:b8:17:79:04:65:99:1d:e5:13:1c:e3:ea:9a:66:37:9d:0c:
66:08:ab:de:c9:87:c3:22:28:ff:d2:6c:b1:c0:31:5a:d4:19:
f8:f4:72:a0:f1:06:4e:4c:f5:b9:9e:08:e7:83:a0:c8:bb:f9:
c4:20:d8:ad:20:09:8f:73:19:13:f8:9b:ba:9f:96:64:73:0c:
e1:c3:07:72:d3:55:ea:4a:6a:3d:1b:63:cc:6f:2a:83:ea:fe:
ec:45:2c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:17:08 2026 by rpki-client