
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/RfnNzbszK7N_AgWiJEQZjYgb3EY.roa
File: RfnNzbszK7N_AgWiJEQZjYgb3EY.roa (raw, json)
Hash identifier: aNMWlnYM28UYLjjdTzfHLFCitHfvY9RaWnQEyQ5F5OQ=
Subject key identifier: 45:F9:CD:CD:BB:33:2B:B3:7F:02:05:A2:24:44:19:8D:88:1B:DC:46
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 130B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RfnNzbszK7N_AgWiJEQZjYgb3EY.roa
Signing time: Sun 01 Mar 2026 03:28:08 +0000
ROA not before: Sun 01 Mar 2026 03:28:08 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 110.163.8.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4875 (0x130b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 03:28:08 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=45F9CDCDBB332BB37F0205A22444198D881BDC46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:85:aa:9e:a9:4e:2c:1f:1e:5c:54:2d:cb:ab:
57:0f:89:70:b9:9d:4e:8d:f2:81:91:f8:33:96:94:
4a:e9:eb:10:de:95:07:f2:96:7e:84:67:38:15:df:
16:24:3f:d0:43:b1:8c:2a:2b:07:96:59:94:bc:bf:
6f:ab:0e:8f:58:07:d5:2b:a3:bb:c9:5a:b7:d1:e5:
ca:fe:e6:7f:5e:a1:ed:56:97:40:d7:7c:e2:9b:a6:
60:d9:80:02:80:fb:6b:0d:af:16:3b:ab:3d:1f:6b:
ea:60:4c:cb:02:8d:de:3e:0c:16:86:7c:1a:e8:59:
b0:8e:4d:bd:0e:25:22:6d:f4:9a:ba:ab:15:55:58:
d0:0f:80:bb:56:b9:6c:ad:34:63:67:40:6c:bb:23:
4b:aa:b1:94:3a:19:3a:7d:9d:7d:64:3f:e5:fb:ce:
78:15:3c:f4:1c:e3:eb:49:d2:4c:06:52:a8:a0:ff:
be:b4:e9:39:f3:0e:d1:12:4b:fe:d2:79:00:4c:ce:
a3:af:8e:8e:18:88:c9:f2:63:b3:3a:5e:cc:44:38:
19:9b:cb:9d:5b:6e:63:f9:92:9b:f4:30:6f:b6:60:
59:f2:7c:3d:b3:3b:ef:a4:ab:9d:0f:ed:32:49:66:
cb:3d:92:1d:b4:50:f4:01:17:ee:5b:a8:6b:d9:02:
89:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F9:CD:CD:BB:33:2B:B3:7F:02:05:A2:24:44:19:8D:88:1B:DC:46
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RfnNzbszK7N_AgWiJEQZjYgb3EY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.163.8.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:7b:bc:21:ad:78:25:26:d8:e3:01:46:7d:c6:e6:97:b1:33:
35:c5:cc:92:d8:b9:48:f6:da:3f:01:e2:59:aa:f9:98:fa:8a:
64:ef:a1:ff:9c:a0:6c:59:c1:69:8c:65:5f:d6:7d:8f:6e:7d:
78:ff:c3:e0:9f:fa:2e:d0:54:f5:05:55:09:8d:19:65:8d:d9:
63:c7:f8:c0:64:24:59:13:7a:e3:09:63:4e:e6:c8:c1:93:50:
76:de:3e:fa:49:16:e1:7a:03:8d:37:07:23:08:bc:15:4b:3d:
57:9e:14:23:a7:28:69:65:39:e5:9d:23:47:1b:12:0a:23:fc:
ad:35:ac:aa:ff:f8:a5:88:c5:56:e7:1a:e1:5f:e5:99:a7:c1:
36:fb:3f:e0:b9:eb:57:6e:ac:b0:ee:cc:b2:33:78:24:00:97:
1e:29:a9:43:19:6c:1c:61:51:63:e5:4f:bd:e3:eb:c4:82:3f:
69:8b:53:3a:16:e9:2a:4c:86:db:3e:d5:d2:d2:2b:4c:91:96:
a0:0f:69:5c:09:dc:59:4d:c1:0e:7a:7e:8e:43:8f:a4:52:3e:
03:90:2c:36:60:0a:4c:fd:c3:26:a7:8b:80:42:df:62:ea:7f:
a1:11:64:ae:bf:b3:df:39:34:23:f7:1a:42:b2:84:98:ec:dc:
a3:05:bf:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:34:50 2026 by rpki-client