
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/TFJtIOkUoYAdDUD-ypyrMHLO0Nw.roa
File: TFJtIOkUoYAdDUD-ypyrMHLO0Nw.roa (raw, json)
Hash identifier: TnM2ZNwTzn3dz5isMo6OyMXveEAuVJfaI0afGyN27fQ=
Subject key identifier: 4C:52:6D:20:E9:14:A1:80:1D:0D:40:FE:CA:9C:AB:30:72:CE:D0:DC
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 10D8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TFJtIOkUoYAdDUD-ypyrMHLO0Nw.roa
Signing time: Sun 01 Mar 2026 01:54:50 +0000
ROA not before: Sun 01 Mar 2026 01:54:50 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.75.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4312 (0x10d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 01:54:50 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=4C526D20E914A1801D0D40FECA9CAB3072CED0DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ee:d0:7f:25:93:f5:c8:82:3e:cd:e1:8d:77:
8e:81:41:a4:1d:63:67:e3:e6:77:1c:87:98:a6:b1:
23:6c:0d:c7:3d:ef:f3:9e:f1:27:7a:23:90:fd:d0:
65:ae:67:0a:ba:1f:c7:dd:7f:35:32:fe:2a:f4:82:
7c:e2:e9:17:74:99:da:f1:f3:c5:66:1e:17:b3:e2:
d3:eb:3f:f2:06:fc:c2:89:dd:ba:63:b6:9a:03:b6:
83:ad:5e:9a:c2:f2:03:11:6d:b8:e2:d3:de:fe:72:
74:37:1d:9b:3a:0a:14:e6:f4:98:b2:02:26:ee:2f:
e1:4d:df:fe:b1:29:7a:ac:3d:7a:b9:26:29:38:48:
33:10:50:94:86:e2:93:b7:4d:54:67:b5:fd:16:b3:
d3:26:f9:a7:68:c3:ce:bb:c0:31:21:bc:89:7b:91:
87:ac:63:0b:43:8c:0b:08:45:5b:f4:bd:ed:35:d9:
22:b1:1a:4f:89:5d:7c:ee:37:a2:6b:52:33:37:fa:
58:28:56:e7:73:87:47:71:9b:37:03:d8:62:96:95:
8b:12:16:7b:10:98:ea:49:d4:c9:82:2f:5f:36:bd:
23:15:c5:de:dd:ec:22:55:33:82:60:1f:6b:0a:04:
32:63:8a:ab:41:46:4d:b5:93:06:55:e0:5e:bc:7e:
b5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:52:6D:20:E9:14:A1:80:1D:0D:40:FE:CA:9C:AB:30:72:CE:D0:DC
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TFJtIOkUoYAdDUD-ypyrMHLO0Nw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.75.238.0/24
Signature Algorithm: sha256WithRSAEncryption
94:56:6e:57:90:39:3a:bf:96:8b:1f:c4:2b:66:c9:c2:c5:72:
93:c2:69:1d:31:22:c1:83:14:04:9d:23:c2:ad:20:e4:68:5e:
46:44:5f:0f:f3:24:d8:17:d0:f8:90:bf:2d:a6:02:be:93:01:
de:21:fb:4b:4a:d5:e0:b9:82:84:86:8c:93:62:5b:b0:59:cd:
b0:4a:4c:23:07:96:2e:7c:fe:01:58:d1:6d:4e:62:e9:84:73:
7d:41:ea:78:8e:33:12:b6:53:ea:9a:1f:b2:9a:2c:35:2a:d6:
18:61:26:ef:0d:b0:7f:16:ef:b4:b0:5c:78:55:14:8b:1a:29:
35:d2:cb:23:e3:e3:b3:73:b9:22:a2:60:02:48:3c:13:05:5d:
58:58:3b:90:d9:8b:e7:cc:8c:27:91:9b:ec:c9:4f:81:63:3f:
64:4c:c0:6d:e6:4f:79:d4:11:d1:d5:5c:d0:02:2a:d1:01:03:
1c:82:19:7d:28:3c:b9:ef:23:7a:31:3b:61:12:8b:44:cb:87:
ef:3f:bd:0b:f8:1f:73:5a:6b:fd:d5:8a:94:18:80:ed:60:27:
73:40:07:da:3c:03:ff:ea:0d:ee:01:58:81:7d:58:41:f9:94:
3e:dd:8f:83:57:57:15:a0:f4:4e:2a:bc:98:0c:f1:4c:60:00:
40:64:d6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:29:33 2026 by rpki-client