
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Kei7lp3iaTS3kfhzQ3tsHQ47_dg.roa
File: Kei7lp3iaTS3kfhzQ3tsHQ47_dg.roa (raw, json)
Hash identifier: IqMa7ul8zhBMV6Ec09G7bxfjB4eGkkbVTNTqvwDJFJI=
Subject key identifier: 29:E8:BB:96:9D:E2:69:34:B7:91:F8:73:43:7B:6C:1D:0E:3B:FD:D8
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1235
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Kei7lp3iaTS3kfhzQ3tsHQ47_dg.roa
Signing time: Sun 01 Mar 2026 02:52:31 +0000
ROA not before: Sun 01 Mar 2026 02:52:31 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.104.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4661 (0x1235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:52:31 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=29E8BB969DE26934B791F873437B6C1D0E3BFDD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:31:2f:9b:3b:62:96:f5:08:65:7d:c5:6f:4c:
13:35:38:cd:2a:be:70:c1:14:14:34:28:c5:fc:62:
1f:52:c0:78:75:6c:9b:19:d6:2c:5b:c2:19:59:e7:
15:b6:5a:cf:dd:1a:68:00:d7:51:f6:e2:8f:4c:a2:
f7:78:92:ad:1e:a1:d1:81:ae:25:8e:8a:67:db:1c:
75:d5:91:da:08:ae:70:d5:ed:b9:37:26:00:27:f8:
65:9a:22:f7:0b:11:16:04:71:dc:f4:d8:b7:63:8e:
b0:27:10:4e:10:bd:22:b2:aa:5f:b0:53:eb:67:ce:
0c:a9:bd:46:ae:23:a8:75:c2:b0:32:48:96:50:b8:
c8:d1:e0:7f:d5:81:ef:ef:03:58:ff:26:08:44:63:
54:53:c9:ee:26:33:ab:52:af:bb:9e:e1:85:31:da:
4f:59:33:64:5a:cc:ec:2d:2a:bd:99:9e:79:b9:57:
e8:39:dd:39:40:94:05:02:a8:47:c7:47:73:2b:5a:
d6:d5:44:da:24:2f:be:ef:0c:15:b9:cf:29:64:98:
1e:7b:0c:09:82:3c:54:ec:7c:38:51:25:f2:7c:47:
9f:a1:cc:e2:54:4e:e5:06:9d:be:35:1e:26:32:50:
aa:0e:58:36:4e:70:b4:05:75:2d:d2:88:15:8e:bb:
2c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E8:BB:96:9D:E2:69:34:B7:91:F8:73:43:7B:6C:1D:0E:3B:FD:D8
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Kei7lp3iaTS3kfhzQ3tsHQ47_dg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.104.32.0/24
Signature Algorithm: sha256WithRSAEncryption
81:7e:ad:0f:e0:26:7e:8b:31:01:d6:23:2f:22:48:cf:f8:8d:
b0:ce:ae:5f:54:7b:b1:11:cb:d0:d0:f4:d9:59:a5:29:eb:f6:
47:4e:29:2d:63:2f:23:72:39:04:a3:96:55:6f:46:8f:40:18:
50:10:b8:70:89:7b:91:e9:51:15:7e:38:e8:98:da:78:46:8f:
fe:ae:b8:0d:a6:ef:5f:44:6b:09:19:be:5c:bb:d3:a4:69:0b:
71:f9:ab:c2:b9:bc:63:f1:6a:a8:b2:d3:ec:3b:bd:fd:3f:ba:
e2:85:72:06:91:9d:26:41:de:50:ee:bf:ba:ac:af:d0:43:be:
05:58:15:35:2d:63:4b:84:77:26:63:86:e1:d2:33:82:9c:08:
a9:fd:2c:7e:69:c5:64:1a:25:4e:ae:b5:3e:0e:c3:13:58:55:
2c:7e:41:3c:74:d2:78:92:0d:dc:5a:bc:75:22:49:74:dc:2b:
0e:f1:02:ee:27:b2:e7:a7:76:55:5b:14:2b:6b:a8:99:40:c1:
42:7e:1d:ee:21:8c:5e:e5:57:70:a1:cc:9e:f5:de:28:7e:82:
45:2f:13:8e:65:2e:eb:b8:60:83:5d:f9:08:ba:f6:e3:0e:a9:
c4:03:c7:91:0b:00:d8:d0:39:64:dc:07:4b:6c:28:f5:0f:c7:
4b:8f:be:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:29:41 2026 by rpki-client