
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/S0vLZfK4nDflamA4WyJIeHbDSR8.roa
File: S0vLZfK4nDflamA4WyJIeHbDSR8.roa (raw, json)
Hash identifier: ucx02KM1AWmsJlTVVDNlTPzxCpEsKIherHRWZez2ZBo=
Subject key identifier: 4B:4B:CB:65:F2:B8:9C:37:E5:6A:60:38:5B:22:48:78:76:C3:49:1F
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1073
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/S0vLZfK4nDflamA4WyJIeHbDSR8.roa
Signing time: Sun 01 Mar 2026 01:34:24 +0000
ROA not before: Sun 01 Mar 2026 01:34:24 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4211 (0x1073)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 01:34:24 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=4B4BCB65F2B89C37E56A60385B22487876C3491F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:88:b3:e0:bc:78:93:13:cb:6b:42:a7:5c:e5:
19:c4:db:dd:18:0b:90:21:02:38:a7:33:75:9e:0b:
53:be:8c:0b:c9:25:df:45:83:77:cb:fc:ca:5f:07:
1a:58:f0:4e:55:c7:df:d2:38:91:71:f6:8e:e2:29:
75:9e:39:f9:5e:0d:58:d7:00:27:4d:f6:c4:91:ae:
42:26:58:1d:85:99:1b:90:bb:8d:aa:e7:8e:c7:76:
f2:71:ae:f8:b4:d5:22:b2:45:b5:fd:1a:b1:9d:a5:
21:6b:52:0f:b7:f6:c4:78:12:9e:3b:2f:f0:34:1d:
0d:4c:a0:07:f2:ef:a3:55:77:94:a3:03:d1:81:f1:
58:24:70:cf:13:12:14:a9:4f:61:48:4a:78:7c:12:
9f:35:01:f9:dd:32:f6:e2:07:ec:bf:05:9e:6d:ae:
70:45:b3:ad:07:a6:6e:34:f7:94:5c:35:2f:cf:d2:
2d:19:eb:c9:69:d6:e8:b6:18:01:ae:52:99:d4:2b:
11:16:f3:96:90:d3:4a:14:d9:1c:59:f4:91:5d:ef:
6e:c2:fa:9c:46:fa:21:64:39:9e:9b:e3:a0:93:e2:
82:80:6f:e4:31:02:95:51:dd:be:38:88:ac:d6:44:
95:38:a5:3f:a5:bc:65:4a:08:02:60:a0:b8:2e:ab:
c5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4B:CB:65:F2:B8:9C:37:E5:6A:60:38:5B:22:48:78:76:C3:49:1F
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/S0vLZfK4nDflamA4WyJIeHbDSR8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.101.0/24
Signature Algorithm: sha256WithRSAEncryption
95:f3:dd:99:c6:7b:fe:8d:d9:42:52:5d:95:76:e5:fe:4d:f3:
e9:9f:3f:5f:8f:51:1c:56:e0:b3:28:96:40:d4:11:af:62:da:
e1:d7:d3:42:3e:f3:f7:4c:33:4a:88:4a:9e:fd:42:d8:10:87:
d9:c3:7a:c4:84:a6:ca:b8:34:d8:4b:18:16:3e:30:e6:0d:40:
e4:a4:cb:8b:c1:cd:71:36:1d:1b:79:88:61:25:07:d3:58:d3:
fa:61:bb:fc:70:2c:49:be:c5:6c:7e:f7:75:b5:00:86:f1:a4:
05:48:4d:76:60:cb:2d:b4:81:8a:85:c7:54:07:ee:2b:01:68:
44:dd:e0:73:97:2e:60:02:5e:34:af:d0:8c:6d:64:3a:5f:d2:
17:96:d1:01:41:d9:2c:90:a3:dc:a4:69:e2:dd:6f:91:db:27:
24:01:8f:83:25:72:4a:53:2d:34:c6:d4:28:37:bf:7a:8c:6a:
8e:33:f3:c0:e0:ad:f7:5c:57:7f:68:f5:29:36:e0:b6:12:20:
b5:bf:8f:17:c7:a2:6c:4f:95:01:63:a0:90:ea:ad:f5:ac:e7:
48:17:0f:bb:5b:54:8d:60:45:9d:75:c8:c8:98:30:1b:e9:24:
74:78:7b:0a:4a:0d:33:c2:f6:b8:b2:9e:60:b0:be:31:d8:cd:
b9:db:42:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:22:39 2026 by rpki-client