
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/WYwUvwH0iw74yhZnGBKp7KU3baw.roa
File: WYwUvwH0iw74yhZnGBKp7KU3baw.roa (raw, json)
Hash identifier: FQWxJ7i9TM9Cd+5NSbs/e3lWuSGVHy+Woaxp2/XSerA=
Subject key identifier: 59:8C:14:BF:01:F4:8B:0E:F8:CA:16:67:18:12:A9:EC:A5:37:6D:AC
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 11D0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WYwUvwH0iw74yhZnGBKp7KU3baw.roa
Signing time: Sun 01 Mar 2026 02:40:36 +0000
ROA not before: Sun 01 Mar 2026 02:40:36 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.96.46.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4560 (0x11d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:40:36 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=598C14BF01F48B0EF8CA16671812A9ECA5376DAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:96:f9:ef:05:33:8c:20:45:4b:52:e7:3b:94:
f8:3e:ad:5a:b1:ed:93:af:cc:b9:dc:10:65:53:d6:
db:08:74:c3:80:11:de:85:cb:cc:65:3b:7b:54:c9:
c8:ed:70:52:5c:88:d0:29:47:ef:91:31:11:36:34:
7d:3e:5d:d9:ff:25:74:a2:69:7a:4e:be:0f:ec:35:
84:5e:4d:bb:00:77:bd:dc:08:0e:e2:e7:d2:91:3f:
8e:ec:99:49:1f:93:31:74:51:90:59:a7:d2:b0:99:
75:c5:54:3a:97:27:e4:0b:e8:e1:26:01:23:e2:55:
08:38:e0:7f:07:e7:3d:4b:d2:57:fa:21:ca:90:2b:
0f:76:d2:0f:8e:d4:11:c3:bf:85:ab:0a:22:9f:6b:
6c:27:3c:df:f2:d9:c3:1a:37:f3:5a:51:50:7c:18:
56:b6:ee:a7:7d:7f:c6:63:17:e8:8c:99:dd:22:83:
35:0f:9d:e0:97:10:f5:e4:59:71:4e:eb:f2:bc:45:
d0:72:d2:49:b4:38:c0:2a:18:5b:7f:15:94:a1:1b:
42:b7:bd:68:a5:55:8d:4c:d4:1a:60:77:84:31:1c:
b7:5d:b1:2c:61:c9:98:1c:f8:98:72:03:5a:1a:b7:
59:1d:0e:f6:c7:0e:66:02:d2:db:a6:8a:73:17:3b:
32:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8C:14:BF:01:F4:8B:0E:F8:CA:16:67:18:12:A9:EC:A5:37:6D:AC
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WYwUvwH0iw74yhZnGBKp7KU3baw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.96.46.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:7d:79:a6:fd:8e:5c:a0:29:a8:a0:a6:db:c0:ff:88:45:70:
17:c2:84:cc:6e:86:c4:01:fa:45:41:19:e8:28:83:68:31:af:
04:ed:0b:d6:fb:84:47:b4:31:ca:36:3b:6a:a5:67:7d:9a:83:
da:9e:86:2e:29:34:dd:11:7a:d4:66:97:8e:b7:cd:7e:3e:37:
58:d6:76:06:41:f5:0c:2e:b3:2b:fc:c5:4d:49:78:13:78:97:
e8:ea:74:82:ee:b1:df:66:8c:84:14:6e:e4:5a:63:fa:82:ba:
04:d5:24:c7:b7:5d:6a:e2:fa:1a:51:de:f7:83:93:e4:a1:5b:
00:9e:ec:2f:08:0d:76:f8:c2:09:c4:30:3d:d1:f5:95:8e:56:
c6:f4:19:39:e4:c4:23:08:36:40:99:14:56:06:68:8e:05:83:
e0:aa:e9:57:ba:42:ef:3c:6f:3e:d5:8f:7d:7c:b3:03:d2:1b:
24:b4:7b:93:9a:2c:45:7b:3f:20:c9:17:76:d9:eb:38:20:6e:
81:13:4c:9e:f8:58:62:cd:1b:f6:29:ab:fc:c6:d8:f6:2e:28:
f6:f5:49:27:00:51:a4:3c:21:2c:6d:17:dd:36:05:21:31:ca:
a2:d4:b2:ed:d1:eb:5e:27:78:23:f4:3f:20:8f:8f:3a:40:d0:
1d:f2:85:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:42:53 2026 by rpki-client