
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/RzgNpBRZkNNdWliLTiFXJWOqk8Q.roa
File: RzgNpBRZkNNdWliLTiFXJWOqk8Q.roa (raw, json)
Hash identifier: 9qIJAxD0w37vR2ICjsoFArnEny3PKpmYZor57Wk1R4U=
Subject key identifier: 47:38:0D:A4:14:59:90:D3:5D:5A:58:8B:4E:21:57:25:63:AA:93:C4
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 131A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RzgNpBRZkNNdWliLTiFXJWOqk8Q.roa
Signing time: Sun 01 Mar 2026 03:32:36 +0000
ROA not before: Sun 01 Mar 2026 03:32:36 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.224.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:24:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4890 (0x131a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 03:32:36 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=47380DA4145990D35D5A588B4E21572563AA93C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:11:9f:42:e5:6d:2b:9e:43:d7:d9:bf:68:15:
dd:4b:5a:12:3b:44:27:ae:e6:e9:a8:33:20:cb:55:
72:6b:dd:4f:e1:6e:37:20:f0:55:a4:59:ba:b5:b6:
cf:71:bd:01:57:48:39:ad:61:33:bf:4a:c5:1e:4c:
92:48:fb:95:d3:ce:6c:8d:7b:0f:30:22:b2:6e:db:
89:ed:85:95:45:62:dd:90:1b:f0:d1:32:8a:37:a1:
e3:ca:14:b2:b0:49:c1:c1:56:54:59:f8:07:e9:be:
65:79:bf:4b:cf:6d:d2:2e:ad:83:61:1c:d9:35:a2:
20:08:9c:f7:7e:5a:c0:47:dc:d8:c6:35:df:fd:8a:
bc:5b:8a:54:b8:bf:9f:03:5f:ae:7e:ac:49:bb:2e:
77:e6:f4:fa:75:9d:6f:63:74:88:af:98:b9:24:45:
69:92:e6:2b:b6:82:35:c2:1b:c5:d6:08:31:ed:65:
ea:3d:f7:9e:2a:8e:8e:ac:9a:c9:b5:2e:a3:e4:94:
c5:d2:35:63:4e:44:66:87:4c:b7:93:63:9d:79:0c:
35:e8:57:2d:c5:7c:08:bd:2c:3b:a0:11:3b:ce:96:
39:4d:62:29:0d:5c:eb:a8:15:f2:1a:ab:10:7e:68:
f1:25:6d:67:99:fb:81:1d:8b:68:a3:cc:27:6d:9b:
98:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:38:0D:A4:14:59:90:D3:5D:5A:58:8B:4E:21:57:25:63:AA:93:C4
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RzgNpBRZkNNdWliLTiFXJWOqk8Q.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.224.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:ab:54:a0:c8:cd:8f:e0:9e:e3:67:0d:60:28:bc:ac:36:55:
cd:37:9c:56:f4:4a:7a:10:8d:ab:77:4b:d0:f5:8c:d1:40:8b:
12:1d:cc:83:c7:4d:2a:bc:bb:12:b7:2e:58:91:67:fa:07:6e:
32:11:26:63:61:a5:8f:5c:87:52:64:a4:4c:7e:dc:8b:6e:fb:
ef:0e:15:72:72:a1:fb:80:cd:8c:d1:8c:46:c6:bd:9e:4b:c5:
24:18:1c:c9:e6:8b:9b:71:c6:b6:23:5d:82:86:81:ab:3b:de:
95:60:77:a5:ee:ec:22:b3:a0:2d:54:4b:3e:c6:e3:e0:9b:e7:
4e:ea:20:a5:de:44:f7:96:e7:70:b6:81:a6:46:8d:3f:d1:63:
16:5a:de:61:a9:70:20:54:28:0f:9f:e4:6d:cb:a8:5b:11:6a:
f7:99:aa:24:5d:31:da:06:83:b7:b7:28:33:39:de:4d:88:f7:
3b:0e:6e:43:62:f3:29:a1:77:0e:17:67:da:94:c0:92:73:04:
26:57:a3:5b:98:f4:6a:48:39:49:df:92:36:b4:95:27:c3:fc:
b8:88:6d:77:93:df:39:5b:0c:67:fd:ad:2b:28:7f:a6:35:05:
76:48:ae:1f:f5:7b:31:6b:44:e9:93:41:b1:7f:3d:f3:61:17:
04:20:aa:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:33:00 2026 by rpki-client