
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/SFCqakTm6quN-ndSCoEc4723ok0.roa
File: SFCqakTm6quN-ndSCoEc4723ok0.roa (raw, json)
Hash identifier: bHnVn0eYXtSLxrwUpp96pjzXLXTi1qlRhJJWaeNhqqI=
Subject key identifier: 48:50:AA:6A:44:E6:EA:AB:8D:FA:77:52:0A:81:1C:E3:BD:B7:A2:4D
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1215
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SFCqakTm6quN-ndSCoEc4723ok0.roa
Signing time: Sun 01 Mar 2026 02:48:42 +0000
ROA not before: Sun 01 Mar 2026 02:48:42 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.75.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:24:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4629 (0x1215)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:48:42 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=4850AA6A44E6EAAB8DFA77520A811CE3BDB7A24D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:59:3e:2a:d3:73:64:02:fd:15:2b:5a:95:b3:
fc:c5:df:46:a4:d1:56:1f:ad:7e:f3:e3:dd:23:34:
69:77:b4:f9:02:66:e2:fa:d4:a5:44:94:98:51:db:
dd:e4:ec:b6:06:3a:17:19:18:ed:5b:13:65:ae:a5:
ff:54:c3:e0:39:5a:70:f1:6d:b2:d3:5d:19:0c:03:
ff:61:61:1c:de:11:af:02:56:cf:86:98:68:a0:c8:
5c:ae:b3:37:80:f5:c1:50:e7:16:56:58:0b:9a:fd:
06:47:8a:ca:75:d9:eb:c5:b3:cf:22:b5:b5:06:8c:
ec:d3:ae:1b:9a:a4:76:ec:55:14:62:48:49:a6:af:
1b:47:36:9d:ba:9c:77:67:b0:18:61:4a:b1:3d:88:
1a:f8:5f:70:75:0d:1f:a0:ce:94:36:43:80:d4:92:
ed:35:73:7f:30:08:c9:31:96:06:44:05:54:ce:ea:
b4:8a:2f:3f:41:98:ac:86:4c:d8:e3:d1:78:44:90:
a6:e4:05:30:15:c6:50:ba:e3:82:ba:b3:d8:cd:5c:
3c:fd:6d:cc:eb:46:9d:36:b4:6b:d0:e6:43:de:f0:
90:49:04:0c:f3:74:6a:f5:9f:8e:73:ff:38:4a:85:
db:fa:27:d9:b0:34:51:df:44:d8:2a:f4:85:9f:8d:
c4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:50:AA:6A:44:E6:EA:AB:8D:FA:77:52:0A:81:1C:E3:BD:B7:A2:4D
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SFCqakTm6quN-ndSCoEc4723ok0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.75.237.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:9f:eb:50:2d:3a:ad:9a:2a:fb:db:60:51:f1:0a:ff:ea:6a:
ce:d7:4b:07:5d:1c:70:d6:80:16:f3:0c:29:23:15:d2:3d:e7:
f4:fe:c2:99:59:ec:6e:5c:99:39:82:b3:e6:8c:13:18:89:7b:
9d:bd:17:58:11:9d:31:12:bd:c4:18:33:7d:e6:67:5a:17:96:
69:28:64:b6:88:95:1f:82:9c:01:f4:85:95:24:92:79:0e:c0:
e6:5e:b0:f2:9b:32:2b:c6:8b:45:ce:2f:32:66:c8:a2:c1:49:
e2:5f:89:19:94:8f:2b:41:ec:e3:d3:1c:20:b4:77:37:a7:a9:
c4:83:78:46:d9:bf:91:70:51:94:17:d1:4b:79:ea:02:b8:f1:
a5:f8:a1:3e:38:b3:62:00:28:9a:6e:8d:80:c0:7d:b6:eb:76:
9d:3f:aa:23:6a:ba:a4:46:5e:4c:a8:17:f4:2c:e9:71:20:1b:
a1:3b:81:01:59:3f:54:bb:99:44:08:02:66:c5:1c:56:1e:7c:
35:3e:34:aa:e3:b9:1e:83:aa:2a:35:92:46:3d:7d:09:f8:7b:
15:7f:cb:2f:9d:45:43:7d:df:b0:f5:d2:3a:53:b9:10:6c:76:
9b:cc:3b:06:ab:26:a0:8c:36:42:53:09:36:04:3e:29:f4:68:
83:e8:81:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:54:14 2026 by rpki-client