
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/S493CcF_j-GoswaoLTnW_DZlrYQ.roa
File: S493CcF_j-GoswaoLTnW_DZlrYQ.roa (raw, json)
Hash identifier: gRe/Gyrctemm7S/5SaQSuLIpzPsgC016SSr6LHnigtU=
Subject key identifier: 4B:8F:77:09:C1:7F:8F:E1:A8:B3:06:A8:2D:39:D6:FC:36:65:AD:84
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 12CC
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/S493CcF_j-GoswaoLTnW_DZlrYQ.roa
Signing time: Sun 01 Mar 2026 03:16:26 +0000
ROA not before: Sun 01 Mar 2026 03:16:26 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.66.24.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4812 (0x12cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 03:16:26 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=4B8F7709C17F8FE1A8B306A82D39D6FC3665AD84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:92:04:30:cc:f8:66:34:9b:0b:62:83:a5:ec:
4a:9e:3d:9a:e5:bf:f7:0b:6b:09:c0:5f:88:a9:f9:
e1:66:16:8f:a2:81:de:f2:a9:2a:8e:39:b4:ff:cf:
17:25:57:99:71:9f:f2:ed:6d:ce:1f:35:76:2a:03:
9c:f1:e8:ad:f4:ea:62:a1:57:c7:50:43:01:43:c1:
91:00:8b:25:ba:dd:bd:be:25:99:9a:de:ea:37:b3:
92:83:28:87:38:9d:dd:76:cb:9f:e9:ef:24:82:aa:
6a:d1:e2:5f:9f:0e:2a:2a:7c:1d:f0:82:2a:8e:c4:
c2:ce:72:a9:c9:da:9e:60:35:62:4c:bc:c0:d7:8b:
af:30:38:4f:2c:e3:b4:ed:13:00:73:8c:7f:5a:94:
eb:7d:f6:54:f5:7b:7a:12:35:7f:2d:0e:a2:44:8d:
d8:94:6b:02:32:cf:80:d4:cd:e1:d2:67:86:f1:42:
e5:42:ba:fc:7c:8b:0c:80:ab:7d:d8:d6:36:dd:73:
60:65:99:51:fd:5c:64:ad:ae:e0:9d:9a:05:45:44:
67:92:66:2f:1c:1c:82:97:07:75:84:63:34:34:b5:
72:e2:7f:ac:76:1d:e8:bc:6f:4f:26:dd:d8:17:9e:
89:a8:53:6e:a5:7e:74:6f:80:ab:b7:bf:59:56:bc:
22:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8F:77:09:C1:7F:8F:E1:A8:B3:06:A8:2D:39:D6:FC:36:65:AD:84
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/S493CcF_j-GoswaoLTnW_DZlrYQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.66.24.0/21
Signature Algorithm: sha256WithRSAEncryption
a3:85:27:fa:17:24:8e:64:2b:dc:44:dc:fd:50:77:1a:c2:3c:
55:70:45:0b:9b:f2:d0:88:e0:02:01:d3:8a:2c:01:85:17:46:
0f:23:df:32:f6:e2:01:a3:31:18:3e:61:95:c4:c1:8a:fd:28:
c3:cf:6f:d6:e5:89:2a:19:48:d7:c9:65:72:4e:a7:6d:23:e6:
04:42:83:65:cb:64:ae:7c:6d:e6:1d:92:af:27:26:1e:80:ee:
dc:06:f5:5b:3d:9f:7b:7e:c1:a2:86:ac:97:a1:22:26:0e:93:
ac:9e:fb:95:84:34:06:d1:09:f1:b6:b2:45:11:ab:93:73:b9:
41:27:6d:fd:49:76:24:4b:f1:57:68:47:ba:37:b5:e2:ff:81:
ea:57:07:0d:30:33:2a:e7:ea:f3:bd:dc:8b:e7:aa:c5:60:8f:
1b:cd:6e:73:ac:30:74:2b:a5:4f:9b:81:b4:9c:85:08:7f:5d:
52:f0:49:0d:ee:09:fa:34:3f:84:11:9c:0c:fa:82:60:e0:df:
1e:60:a1:f8:ea:51:86:53:c8:6f:5d:07:72:3b:85:df:4b:be:
d5:bf:18:b9:94:28:87:62:4e:30:fb:12:e9:97:de:66:38:3b:
3b:57:61:16:13:6f:31:d8:dc:60:6b:ca:57:be:67:ef:8b:9a:
c8:46:ff:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:12:38 2026 by rpki-client