
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Uqrf4Y4NA4JwmDUkP9KU8NIfaOY.roa
File: Uqrf4Y4NA4JwmDUkP9KU8NIfaOY.roa (raw, json)
Hash identifier: drIwzGbBUWlyqTjtRB4M8EH7aUX3d2WMRjndIRQCoRk=
Subject key identifier: 52:AA:DF:E1:8E:0D:03:82:70:98:35:24:3F:D2:94:F0:D2:1F:68:E6
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 11DA
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Uqrf4Y4NA4JwmDUkP9KU8NIfaOY.roa
Signing time: Sun 01 Mar 2026 02:40:43 +0000
ROA not before: Sun 01 Mar 2026 02:40:43 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.222.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4570 (0x11da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:40:43 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=52AADFE18E0D0382709835243FD294F0D21F68E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3a:2e:a0:0d:33:4e:e9:c0:ba:0f:21:53:db:
fe:e7:da:5e:62:a8:52:1f:12:55:62:36:37:29:69:
15:61:06:9a:8b:5a:95:c3:f4:b5:15:c5:94:c1:93:
bd:d8:91:01:be:c3:e8:72:57:88:be:4c:d3:3c:77:
a5:d8:5c:33:5f:28:9a:f9:7a:1b:c4:d9:ac:3f:ac:
34:21:6b:ed:0b:f3:36:7c:6e:19:e3:de:e9:1f:75:
5a:79:27:48:ac:0e:74:6f:1a:d8:69:42:8a:24:09:
7a:e4:8e:9c:89:14:8a:5f:38:cb:5d:21:aa:28:e5:
1e:a9:a4:15:9e:25:77:8f:4c:2e:c6:db:c2:2b:79:
e4:7c:13:5d:64:07:68:fb:d6:04:c9:88:df:a4:3e:
a3:84:1b:42:c0:fe:91:4e:df:e3:76:e0:d4:15:6a:
c3:05:d5:f5:24:47:f8:23:ef:21:d8:4d:16:de:40:
92:55:4b:20:62:12:25:8e:bc:9f:00:72:c8:c4:25:
5c:de:d3:ea:6a:72:e0:71:b7:ac:fd:a7:ba:6f:95:
39:74:ae:c0:97:0b:34:21:48:aa:99:8b:61:89:92:
c2:68:90:a9:74:61:63:69:a7:e4:c6:2f:85:26:a6:
8c:0b:c4:9d:20:15:50:f9:19:e0:b8:d3:41:be:e6:
c7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AA:DF:E1:8E:0D:03:82:70:98:35:24:3F:D2:94:F0:D2:1F:68:E6
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Uqrf4Y4NA4JwmDUkP9KU8NIfaOY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.222.0/23
Signature Algorithm: sha256WithRSAEncryption
db:68:74:8f:09:52:03:7e:a1:41:5a:82:57:1c:84:73:a0:cc:
ab:d9:8f:e1:ab:91:f7:e6:dc:5b:3e:0d:ab:51:60:ac:f1:01:
34:a4:42:14:02:e8:2d:a5:f8:a3:ae:36:90:bd:0b:99:2a:bd:
a0:3a:8b:e5:c9:5f:4c:dd:88:da:27:f7:8f:5d:73:9f:c7:ef:
a4:57:3e:17:8e:5d:ff:30:00:3f:ac:64:75:51:85:f1:86:3f:
0b:76:11:1a:95:d0:16:61:48:c1:43:3f:61:28:b7:43:20:fd:
6c:ce:3b:75:70:08:ab:d3:92:bb:14:fe:21:e3:ad:f6:18:72:
b5:58:2e:a3:4f:1f:73:db:ad:ca:a0:f7:6a:af:9e:d8:1e:29:
87:f2:df:b7:f9:04:12:3b:bb:e7:77:25:80:91:ae:6d:b6:f0:
b3:80:a7:a2:d1:81:78:51:3e:ab:dc:4f:74:3e:40:dc:5d:67:
61:8b:9c:0e:26:e3:70:10:2d:58:84:ce:aa:3d:72:27:a5:1f:
b3:6b:13:e5:79:bc:18:7e:25:ff:e8:09:4b:8e:83:5f:08:97:
31:75:c3:1a:d1:28:7e:74:f3:90:24:ed:84:58:a5:10:24:21:
ef:5c:ab:fd:f4:ca:18:16:e6:40:86:18:b8:09:2b:c8:81:ac:
f9:e1:2f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:10:27 2026 by rpki-client