
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZihI1wesSrHTtWZFwLzNSW1ZDwY.roa
File: ZihI1wesSrHTtWZFwLzNSW1ZDwY.roa (raw, json)
Hash identifier: GrRpiTqH3vpLcr1oJJceYIWI9qCJf945sya1mKNF+VU=
Subject key identifier: 66:28:48:D7:07:AC:4A:B1:D3:B5:66:45:C0:BC:CD:49:6D:59:0F:06
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 11A3
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZihI1wesSrHTtWZFwLzNSW1ZDwY.roa
Signing time: Sun 01 Mar 2026 02:31:19 +0000
ROA not before: Sun 01 Mar 2026 02:31:19 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 220.210.48.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4515 (0x11a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:31:19 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=662848D707AC4AB1D3B56645C0BCCD496D590F06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:02:08:f5:d1:ee:9d:2f:a5:bd:5c:e8:3a:d8:
26:24:1d:39:34:11:e3:35:d4:fe:67:4e:59:8e:f4:
d2:9f:50:1f:d3:b3:9c:d4:02:e6:bb:98:3d:72:a7:
81:34:7f:f7:69:21:f1:2c:55:37:30:31:7a:cb:61:
d0:68:ad:6a:72:b6:93:bd:db:15:31:6a:6b:a6:07:
3d:33:e4:6e:73:65:51:56:39:98:10:33:2a:9e:e4:
7f:5a:92:a6:e4:00:88:19:36:c7:12:87:e9:df:36:
6f:81:f2:ae:6c:60:2a:6f:2b:a7:15:24:3f:75:fd:
aa:8d:36:0c:25:13:dd:d4:18:21:a5:b8:82:2d:12:
dc:61:70:8a:99:6e:a9:30:60:5d:99:b9:cc:d4:b0:
2b:fa:ff:ae:14:95:84:2a:d0:70:31:aa:94:85:fa:
c6:9b:ee:67:a9:92:ef:d8:ac:05:ea:08:a0:17:d5:
16:35:f8:af:09:68:bc:9f:f2:77:1f:a9:f3:e0:3c:
f3:13:b2:a1:67:16:22:7c:e6:ca:d7:55:8f:48:5c:
bc:6b:da:35:7f:09:d1:61:2e:da:d0:71:b0:df:d2:
c8:36:df:4f:38:dc:7a:c4:11:d3:59:e8:11:44:b9:
9e:88:35:98:e1:d9:cc:4c:f4:0b:02:e3:57:72:2b:
28:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:28:48:D7:07:AC:4A:B1:D3:B5:66:45:C0:BC:CD:49:6D:59:0F:06
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZihI1wesSrHTtWZFwLzNSW1ZDwY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.210.48.0/21
Signature Algorithm: sha256WithRSAEncryption
e6:f8:d5:25:cc:60:e6:ce:20:b9:fd:af:c4:6d:74:e1:d9:97:
8a:ee:02:73:f2:1f:74:0c:81:ff:fb:e8:59:79:35:d2:36:ab:
91:40:61:15:33:76:0e:73:51:28:6c:08:65:c0:a5:64:d5:70:
af:6c:56:0a:98:9c:c3:d8:eb:3f:0c:17:c6:5c:22:b1:77:6d:
30:97:1d:ff:9e:b5:be:33:6e:d5:04:a4:b5:95:91:d5:f1:05:
6d:4d:40:d4:73:89:d1:c1:73:b2:a0:30:af:a2:f3:aa:38:16:
24:84:c6:cd:2e:bc:3f:32:9e:09:5b:0f:b4:a3:37:b4:8e:bb:
ed:56:da:e1:0e:14:d4:0e:dc:8d:17:ae:95:64:37:cb:1c:75:
93:df:c7:4f:7a:71:39:34:15:d5:46:7c:dd:de:65:e9:b8:aa:
6e:d0:5a:87:51:dd:f8:d2:a1:67:c4:7a:bd:7c:88:9c:42:c0:
cd:60:4d:02:87:a2:b1:e0:e4:aa:36:f7:42:5c:46:92:d6:15:
2d:cf:f7:ff:27:8f:12:40:7e:fc:db:5e:f2:85:e6:57:d5:68:
87:43:85:8d:25:b3:46:5b:e7:dc:ab:85:12:87:1f:aa:7c:ff:
37:76:b6:5e:3b:20:e4:9e:b4:5a:2e:e1:1b:31:0d:36:d7:f0:
d0:8f:aa:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:55:35 2026 by rpki-client