
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/YdUIc5_rW_Za1i6RULnmCZOBAbs.roa
File: YdUIc5_rW_Za1i6RULnmCZOBAbs.roa (raw, json)
Hash identifier: rgmZeG0qiTSiTdtEwIt1OA1l150o/k17cthR9bO9fxs=
Subject key identifier: 61:D5:08:73:9F:EB:5B:F6:5A:D6:2E:91:50:B9:E6:09:93:81:01:BB
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 108D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YdUIc5_rW_Za1i6RULnmCZOBAbs.roa
Signing time: Sun 01 Mar 2026 01:40:08 +0000
ROA not before: Sun 01 Mar 2026 01:40:08 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 220.159.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4237 (0x108d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 01:40:08 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=61D508739FEB5BF65AD62E9150B9E609938101BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:39:14:91:16:89:1e:e5:b3:7f:a2:dc:cf:c8:
d3:47:f1:f2:8e:aa:75:99:7c:48:30:86:6f:b0:11:
db:91:e8:93:23:3a:46:cd:16:42:be:e1:cd:3b:78:
0e:43:ff:a0:90:4a:98:8f:3b:78:73:94:30:92:f0:
9c:4a:8c:5f:86:7e:f8:f8:52:56:68:8c:38:39:ce:
73:e6:59:c3:6d:64:73:96:fc:5a:c7:53:03:e2:8b:
f5:99:f8:a0:0b:d1:83:03:c2:70:53:ed:b5:e6:05:
bc:51:b8:0e:0b:b4:d7:a9:76:71:2b:b6:0d:59:f2:
12:b4:4b:23:61:45:c0:55:b2:9b:a4:61:8f:af:33:
95:07:ff:5d:26:10:cd:61:fb:db:ec:9e:28:5f:eb:
06:78:b0:14:3b:30:9e:fd:43:a7:c0:71:b2:fb:45:
57:e9:1d:08:49:5b:b2:a1:53:f6:b2:bc:30:97:65:
ca:b6:a7:22:50:59:ba:80:8c:bf:78:77:33:36:b6:
ee:ab:86:1d:57:1c:8e:40:e4:74:c0:e1:19:93:4f:
d6:d6:7e:d7:13:ac:81:9b:12:db:f4:0e:af:da:fe:
d3:1e:b8:51:03:db:27:90:ea:f3:25:17:af:97:cb:
83:b4:85:58:b3:f5:af:a3:bb:3c:2c:21:db:1e:75:
9b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D5:08:73:9F:EB:5B:F6:5A:D6:2E:91:50:B9:E6:09:93:81:01:BB
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YdUIc5_rW_Za1i6RULnmCZOBAbs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.159.236.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:ec:52:96:f9:92:65:3b:26:23:12:87:0e:d4:f5:53:5d:6c:
2a:e8:b7:6b:1e:f7:c9:a6:68:22:c8:b1:65:51:e0:b9:fe:4c:
4b:69:3d:4c:f1:0f:cc:6d:0d:3e:e9:20:43:22:cb:98:e0:5e:
50:5c:ae:73:6b:bd:98:16:9a:b0:2b:0f:1f:87:c9:49:5f:d3:
63:96:b8:74:ac:97:00:d8:5e:d4:e5:e7:b6:0a:c0:5a:ba:90:
f6:a0:ee:55:a8:08:18:2d:1f:53:9d:7d:f3:9e:59:da:4f:0a:
17:86:ac:26:ce:e4:ee:d9:9a:b3:2d:2e:12:1f:78:3c:22:ef:
15:16:f7:de:88:45:c9:35:df:8c:e7:bb:6f:e9:8f:2f:be:fc:
44:30:b4:8e:a6:c3:ee:d9:2a:b4:54:9b:98:3e:66:bf:02:50:
7a:c1:26:79:f2:38:8e:e8:fe:af:71:ba:2c:3a:c9:05:a7:46:
8b:82:35:2b:8b:e4:74:17:23:35:a6:31:d5:b9:c0:48:2f:ec:
71:6a:7d:51:06:c9:f3:96:82:d7:62:78:6a:20:e8:92:33:43:
1e:76:50:62:36:16:2d:95:e8:31:d1:1d:b9:e9:f8:40:35:82:
7b:3d:24:5a:f5:b5:50:ac:cb:14:d6:2a:e6:f1:b7:f8:fb:01:
a3:9c:8b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:08:11 2026 by rpki-client