
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/T8P1CjEDUN7lR0E0VEk0BsxSlAw.roa
File: T8P1CjEDUN7lR0E0VEk0BsxSlAw.roa (raw, json)
Hash identifier: U2juOdhi9pASikMf5Cmy75wyJVsgRUdlgjVk6t/U9lk=
Subject key identifier: 4F:C3:F5:0A:31:03:50:DE:E5:47:41:34:54:49:34:06:CC:52:94:0C
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 116A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/T8P1CjEDUN7lR0E0VEk0BsxSlAw.roa
Signing time: Sun 01 Mar 2026 02:21:56 +0000
ROA not before: Sun 01 Mar 2026 02:21:56 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.74.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4458 (0x116a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:21:56 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=4FC3F50A310350DEE547413454493406CC52940C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a8:95:a6:b7:c7:c8:50:c3:94:64:16:ec:93:
4b:af:2f:41:ed:b2:af:6c:08:47:61:b7:63:20:92:
7a:71:66:a8:99:ea:2b:23:7e:7c:59:af:79:d1:d5:
be:6f:2e:8b:9f:78:1f:13:88:70:b2:b9:0f:2b:20:
6e:a6:7e:e3:7f:12:00:1a:77:54:3d:ce:0f:23:1a:
ac:3a:ed:b5:53:bf:b1:7f:cf:35:59:47:0d:da:49:
59:dc:46:1b:b9:7f:fa:f4:45:23:5c:f0:70:4f:e8:
6c:76:2b:5e:2f:e3:7d:0b:f0:b0:ad:db:2d:71:77:
ad:0d:4c:60:a1:fc:65:3c:7e:cc:33:57:47:06:bb:
2f:df:c4:94:dc:81:08:d9:77:66:a5:3e:fc:d6:4c:
d6:45:fb:fe:8c:81:13:5e:0e:88:70:6a:9e:a7:ad:
e5:95:cb:c2:13:47:51:b9:1d:3f:08:0e:4c:e1:35:
1c:a4:71:2c:bd:55:15:b6:4e:37:de:df:a2:97:d5:
e7:3b:58:a2:24:a4:02:50:1d:97:37:a8:e6:10:b7:
2b:07:1e:3d:db:04:8a:ae:b0:14:6c:31:bb:80:72:
82:dd:80:6b:62:64:3d:f2:af:b7:8b:d5:0b:50:78:
cd:46:49:85:dc:a8:75:b9:a8:31:24:8e:c0:2c:ff:
2e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C3:F5:0A:31:03:50:DE:E5:47:41:34:54:49:34:06:CC:52:94:0C
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/T8P1CjEDUN7lR0E0VEk0BsxSlAw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.74.0/23
Signature Algorithm: sha256WithRSAEncryption
46:60:d2:bc:9a:96:4a:d5:a7:0e:a5:2a:13:73:f6:12:66:b8:
9d:f8:f7:bb:66:23:1c:69:1c:fc:99:bc:f5:38:62:24:b5:26:
8b:85:5b:2f:c9:7f:e8:76:7c:fd:3f:70:b2:db:9b:1a:e7:e9:
54:ab:97:52:5f:f9:19:b4:02:c4:68:db:ec:10:5f:ef:3a:1b:
03:f9:7a:1b:9d:c2:5d:35:05:36:bd:db:f9:18:73:eb:0e:b0:
ec:82:d1:b8:d2:2d:7e:bb:74:fd:9f:6d:7a:de:17:29:f8:af:
05:cf:a3:8d:03:e6:2d:61:01:d6:d2:09:76:79:cf:71:ad:0b:
d1:78:b2:32:e7:40:be:3a:6b:2d:4c:2c:c3:31:0d:f8:51:40:
d0:d9:74:0e:32:69:05:92:c5:c4:57:68:89:1c:19:2b:a3:c2:
14:86:30:0c:75:b9:62:3c:65:50:71:d8:f4:46:b3:41:c0:0d:
59:3d:c0:33:e8:01:b5:f2:1c:44:2c:24:49:11:8c:0b:0d:9c:
62:1e:c3:9b:23:08:86:f7:51:1d:57:7b:96:0c:12:a8:ed:bc:
f2:8c:32:dd:19:49:5a:7f:62:33:84:32:23:0b:6f:e2:b7:f1:
d1:fa:57:02:80:27:e3:45:6d:2f:6b:f0:f5:f6:33:6d:b2:2b:
40:97:6d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:10:43 2026 by rpki-client