
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/NzImiSBFgHu1n4vFnQXLh5DJPUc.roa
File: NzImiSBFgHu1n4vFnQXLh5DJPUc.roa (raw, json)
Hash identifier: omA1iiwh6n3OMH+Y9+9b+sBoBSt57E7b4TUbWFgTrG0=
Subject key identifier: 37:32:26:89:20:45:80:7B:B5:9F:8B:C5:9D:05:CB:87:90:C9:3D:47
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 10F3
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NzImiSBFgHu1n4vFnQXLh5DJPUc.roa
Signing time: Sun 01 Mar 2026 01:58:47 +0000
ROA not before: Sun 01 Mar 2026 01:58:47 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 110.161.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4339 (0x10f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 01:58:47 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=373226892045807BB59F8BC59D05CB8790C93D47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:22:e8:30:93:12:b7:3e:e5:20:ee:fb:30:cc:
89:c9:18:f2:c9:5b:cd:46:5d:9a:a6:e8:9f:94:b4:
d2:09:28:cd:79:59:ad:27:48:5c:f8:61:9b:04:4b:
74:f7:b2:08:50:b3:16:89:f5:8a:69:67:99:f0:9e:
60:8e:ba:0a:df:d7:e0:f8:7e:36:77:a4:e5:4a:df:
ed:45:7b:9b:7d:30:59:00:4f:ef:fa:ba:19:1c:e1:
70:b9:5f:1c:ec:25:15:34:cb:4d:26:3a:fc:0c:58:
cd:c4:f2:29:03:f0:28:cc:99:ae:32:ea:4c:0a:bd:
ce:17:93:e3:a4:43:01:bc:4c:74:0b:c0:32:41:26:
85:0a:d6:b2:e1:34:e8:0e:da:b9:66:78:67:71:ac:
f4:4c:f6:0b:c0:34:a8:6a:0e:ea:53:d9:29:7e:77:
31:06:45:3d:60:c1:4e:17:d5:77:cc:6c:6b:cc:a9:
44:b2:52:de:18:27:b2:6e:86:3e:a9:16:1b:ee:b9:
e1:ea:cb:f3:63:93:0a:d4:06:7d:fe:d1:09:9f:a0:
80:71:96:67:42:6a:c7:80:6d:52:d8:af:65:e1:a6:
9f:f6:c0:a2:6f:6e:c3:ce:c0:5e:a6:db:7c:9c:4d:
e3:e4:4d:9e:b1:c9:9a:a0:53:30:54:2e:e1:cc:ea:
ea:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:32:26:89:20:45:80:7B:B5:9F:8B:C5:9D:05:CB:87:90:C9:3D:47
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NzImiSBFgHu1n4vFnQXLh5DJPUc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.161.0.0/17
Signature Algorithm: sha256WithRSAEncryption
35:ad:8c:6e:cd:d2:8b:90:b5:d9:4f:ea:bb:e0:1c:1d:e0:e2:
82:31:02:a8:ec:43:85:08:14:43:12:2a:b4:a7:c3:f9:59:41:
6c:44:ed:8f:ac:d0:24:7a:70:fe:18:35:34:1c:c8:1c:9b:70:
23:91:60:d0:63:98:18:2f:22:61:fd:25:a1:54:f6:b1:6f:aa:
e6:4b:b5:75:a3:4a:63:40:f1:f9:f9:92:c0:08:8f:fd:21:f1:
0c:3e:83:bc:fb:cd:9a:ab:41:bb:65:ac:60:84:03:aa:de:31:
1b:fd:0d:3e:9d:7c:c8:2d:27:6f:99:05:2a:3f:5e:d9:ed:22:
da:7b:92:d4:39:b3:76:c6:d3:6b:96:57:b8:a2:0d:39:87:ed:
b0:15:1d:06:1d:04:98:ae:e8:47:ea:b1:68:43:c1:fa:16:1c:
45:a7:8f:3c:61:96:1c:57:60:2d:9b:60:0a:9f:f5:6f:3c:54:
81:11:5c:99:c6:e2:3a:e0:cd:43:d7:9a:dd:42:96:04:74:51:
83:28:8d:c7:4b:9e:51:5a:46:77:50:4a:34:d1:21:8e:91:da:
ba:e7:2f:df:2f:19:90:01:34:d3:2d:da:f9:a5:c3:f8:ac:03:
68:ea:78:00:20:be:a4:bb:22:10:14:0c:a0:37:c8:a2:9e:2c:
7c:0e:2b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:54:15 2026 by rpki-client