
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZlnD749s_rCQQVdhH_yMczQ7c4M.roa
File: ZlnD749s_rCQQVdhH_yMczQ7c4M.roa (raw, json)
Hash identifier: 6LtUrHzki4ynn9BJdgFMxg/msmq8oN7BFgLMMHEKUwk=
Subject key identifier: 66:59:C3:EF:8F:6C:FE:B0:90:41:57:61:1F:FC:8C:73:34:3B:73:83
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1154
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZlnD749s_rCQQVdhH_yMczQ7c4M.roa
Signing time: Sun 01 Mar 2026 02:16:55 +0000
ROA not before: Sun 01 Mar 2026 02:16:55 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.96.246.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4436 (0x1154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:16:55 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=6659C3EF8F6CFEB0904157611FFC8C73343B7383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:28:4a:06:31:e0:0f:ab:7b:8b:38:ff:e9:31:
d4:f3:f5:d2:4c:ed:93:04:05:e6:e3:e4:43:16:82:
cb:65:44:5f:f5:b2:e0:37:e5:55:92:bf:e3:46:eb:
4c:58:94:5e:d0:f3:2f:f1:68:d4:6d:9f:54:2f:3c:
d2:1a:30:b5:04:43:44:8a:60:9a:12:94:bc:d6:66:
5f:9b:07:51:18:1a:7d:26:99:c2:c2:20:6e:0e:ff:
d6:7b:f7:20:50:48:a9:58:9e:57:13:af:72:91:dd:
8a:99:29:05:d4:38:bd:77:82:28:d4:a0:ee:3e:13:
f6:3c:3b:58:64:6f:63:e5:83:78:43:1a:c1:c5:df:
57:25:92:13:45:3a:90:eb:c1:71:c0:c5:f7:ca:21:
d1:09:9a:ba:1c:75:19:bc:e2:c6:53:13:88:f7:fc:
64:8e:0d:d7:6b:4a:f2:93:93:e6:2d:89:da:36:0f:
84:d9:72:81:37:56:c7:8b:af:86:b8:69:0f:63:a5:
c5:17:3e:03:40:3a:a4:ab:0d:0a:f5:a1:5c:1b:62:
6c:70:e2:a4:23:24:94:1d:21:6a:e3:f5:7b:a3:d2:
b3:72:99:0d:6e:dc:13:81:5c:39:a5:3b:06:1c:88:
35:3e:a5:09:e9:03:ff:8a:5b:5e:2d:0d:5f:8f:c7:
95:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:59:C3:EF:8F:6C:FE:B0:90:41:57:61:1F:FC:8C:73:34:3B:73:83
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZlnD749s_rCQQVdhH_yMczQ7c4M.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.96.246.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:98:13:de:03:5e:40:f9:46:32:fc:2d:18:af:97:1c:ef:76:
6e:fa:7d:d7:3d:dd:e5:39:7b:05:aa:78:eb:b1:d9:d4:9e:c2:
ff:1f:31:72:a8:cd:e0:39:f3:1f:7d:21:44:19:78:fd:27:1e:
61:b1:b1:4f:49:ed:e0:bd:33:a1:79:93:d3:39:d0:14:e3:d7:
6c:7b:3f:ed:62:2b:01:96:13:5f:9e:e1:7f:00:1e:4d:d8:cd:
10:ea:c8:85:7f:b5:fc:6f:c3:c5:ab:64:13:36:35:71:66:14:
89:71:8b:af:08:06:69:94:cf:9f:e8:bf:5d:24:ce:81:b5:4c:
17:f6:99:f4:36:35:15:b3:57:be:ec:c8:a2:4d:b2:fe:08:e9:
ca:15:30:0b:0c:31:42:48:8f:da:d3:0a:13:9a:0c:be:f6:29:
10:a2:b2:22:eb:62:3a:44:3f:2d:5c:39:0b:0b:70:9c:43:47:
47:31:25:ab:b8:9e:35:d0:79:e7:75:9e:69:94:d3:fd:1a:d4:
6e:7c:91:7a:b5:19:2b:0c:4b:54:94:6a:93:00:32:0d:b5:4b:
41:b1:03:56:6b:02:b7:19:0c:c8:d2:4a:e2:91:a5:fe:56:83:
b1:5b:1d:64:c0:69:7d:22:3a:f4:84:1c:02:78:f9:54:97:b2:
ed:ff:a7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:54:44 2026 by rpki-client