
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/OjnoeGBjZbzUp0w8W5u0umZzRew.roa
File: OjnoeGBjZbzUp0w8W5u0umZzRew.roa (raw, json)
Hash identifier: O8oex5ufE9VBL1GXswLyjFUQuLPH8pYiSV/OcccYvuI=
Subject key identifier: 3A:39:E8:78:60:63:65:BC:D4:A7:4C:3C:5B:9B:B4:BA:66:73:45:EC
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 11FB
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OjnoeGBjZbzUp0w8W5u0umZzRew.roa
Signing time: Sun 01 Mar 2026 02:44:38 +0000
ROA not before: Sun 01 Mar 2026 02:44:38 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.50.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4603 (0x11fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:44:38 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=3A39E878606365BCD4A74C3C5B9BB4BA667345EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e3:65:b7:07:75:99:ea:5f:82:49:6b:6f:db:
fa:5d:bd:11:ff:09:13:b9:4e:7f:8b:64:46:23:ee:
0c:79:88:96:3d:9f:85:f1:3e:01:1f:f9:cc:07:33:
c1:22:e3:fe:5b:06:fa:06:e3:a6:4d:9d:7e:56:d1:
54:84:16:3f:b3:73:20:55:4b:82:e9:50:a3:0d:c0:
e7:2f:f7:51:00:e1:0f:8f:0c:7c:37:2e:1f:f4:fe:
a0:05:b6:ff:2b:2f:ca:c2:b1:56:a2:fe:65:3b:c1:
19:9e:e5:1f:87:c7:25:19:98:28:e8:a0:bb:fe:d3:
49:57:eb:86:77:2f:f0:34:e2:6b:2c:4c:8f:cb:4c:
a6:de:07:fa:f8:22:3c:63:26:32:06:f2:a7:97:65:
c0:2c:e3:57:de:19:94:bc:80:56:10:91:73:6e:91:
5e:52:58:56:70:6c:2a:06:3c:a0:44:05:6d:5d:d7:
48:ad:f2:58:b4:e6:ac:c4:43:2e:9a:02:aa:07:0e:
f1:8a:4f:64:7c:68:64:c4:96:58:f5:14:88:97:52:
0b:cd:6d:77:77:27:bd:7b:5a:51:41:40:5c:8a:66:
93:72:4b:3b:83:c6:c7:1b:e6:db:1e:4a:0a:6d:71:
d5:60:0e:ad:04:ba:2b:05:0c:06:2f:b5:76:d1:c0:
43:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:39:E8:78:60:63:65:BC:D4:A7:4C:3C:5B:9B:B4:BA:66:73:45:EC
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OjnoeGBjZbzUp0w8W5u0umZzRew.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.50.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:2c:d4:9e:e7:31:f6:d9:e2:22:67:16:fb:8e:3e:b1:bb:9f:
ec:58:e0:8f:ae:ff:78:47:86:8a:44:7e:70:48:d2:d9:75:36:
d9:47:c5:4d:56:2e:1e:ca:ea:71:eb:84:38:4e:ce:e7:ac:73:
9c:81:cf:9b:b2:f0:22:e0:1c:d1:a7:01:0f:33:2a:79:3e:c8:
6b:6b:8c:26:98:36:2a:d6:4b:6f:06:ac:b5:39:09:90:9b:93:
dd:e6:4e:6c:d4:9f:48:7f:16:f4:42:6c:6a:e6:78:25:3e:08:
fd:ff:76:50:d2:af:10:e3:63:af:cb:88:5c:3e:77:da:c9:eb:
70:73:5a:04:ce:2a:d4:39:f5:18:a1:dc:b0:58:b3:c1:e1:e7:
7e:1a:82:a8:86:4f:5e:e8:5d:6f:e6:f3:5e:45:f7:b0:08:16:
c3:9e:0b:63:78:53:04:f2:27:6c:ee:e7:32:b6:0c:d0:55:e4:
25:c3:c4:36:1a:ba:df:bf:07:95:9d:39:3f:ae:f1:1b:e4:9e:
1c:49:60:26:76:c9:fd:fb:4a:c2:78:ee:85:95:86:ea:71:79:
11:15:6a:87:4e:8d:8a:3f:e7:d7:e3:98:37:3e:95:3d:03:d9:
39:ce:05:73:50:82:73:2b:ab:75:c1:6b:31:fb:0b:8b:07:8f:
e4:db:6f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:56:24 2026 by rpki-client