
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Zvw-XGPbqAWyNbhTp0oWfhb1i0c.roa
File: Zvw-XGPbqAWyNbhTp0oWfhb1i0c.roa (raw, json)
Hash identifier: lzB9KZgDKpptSwoVkN+vfJDGXBh/zreqR4uO/MFGloM=
Subject key identifier: 66:FC:3E:5C:63:DB:A8:05:B2:35:B8:53:A7:4A:16:7E:16:F5:8B:47
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1250
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Zvw-XGPbqAWyNbhTp0oWfhb1i0c.roa
Signing time: Sun 01 Mar 2026 02:56:41 +0000
ROA not before: Sun 01 Mar 2026 02:56:41 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 110.162.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:24:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4688 (0x1250)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:56:41 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=66FC3E5C63DBA805B235B853A74A167E16F58B47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5e:d0:da:28:c7:9c:f9:43:07:fe:9c:ab:b0:
19:51:0c:2d:d3:0c:ea:a2:f8:91:df:d3:f5:f3:18:
02:da:09:5f:73:49:2d:26:19:ea:16:91:64:14:47:
e0:cd:99:30:3e:6f:06:1c:39:2e:a8:ca:9f:e4:a7:
50:3e:eb:d2:b4:9b:c9:24:44:ab:b4:dc:61:1f:5e:
1e:bb:ed:24:a3:e4:42:e5:14:bd:0f:29:8e:45:84:
c6:5d:97:37:a2:a1:72:c3:68:29:ea:d1:3b:ac:4e:
e4:5e:db:78:a1:43:b8:56:d6:b7:38:14:fe:5d:b8:
9e:ac:71:83:09:13:7c:e9:0f:b8:d3:29:d2:94:ff:
ff:ab:79:59:87:1b:8a:dc:36:70:bb:0f:20:ac:4b:
58:2b:ee:bb:35:c7:9f:62:b8:9a:1f:f5:ef:f1:88:
56:2c:54:90:bb:e3:c2:55:6b:0b:db:b7:aa:09:00:
45:95:60:fd:5e:dc:00:bf:e3:ef:4b:de:70:6e:b0:
a1:75:eb:d2:64:ae:ad:7b:79:7e:b1:0c:e4:d0:b6:
20:6e:d0:70:ca:57:c2:21:1f:03:4d:02:44:6d:0e:
03:e2:49:0b:e5:18:d4:00:be:0c:9e:77:54:69:77:
82:8d:84:1f:3b:0d:93:79:9d:85:2b:a7:c1:09:44:
09:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FC:3E:5C:63:DB:A8:05:B2:35:B8:53:A7:4A:16:7E:16:F5:8B:47
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Zvw-XGPbqAWyNbhTp0oWfhb1i0c.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.162.128.0/17
Signature Algorithm: sha256WithRSAEncryption
af:2a:20:30:dd:d4:58:b1:c9:eb:60:dd:17:d3:28:97:d5:aa:
96:40:37:c5:58:11:5b:8a:97:54:24:aa:73:ee:81:ad:33:1a:
35:7c:42:8d:80:c6:3c:9c:58:6e:0c:aa:a6:69:35:ed:60:b3:
8b:08:3e:0c:58:70:02:6b:ac:b9:cf:9c:9b:fe:3c:06:85:54:
ca:17:b8:d5:36:69:34:d6:aa:ac:ac:b4:3e:1a:84:1b:cb:bb:
c4:74:f4:af:c6:25:ed:07:9a:43:b4:5f:4b:d3:b1:83:1f:10:
cc:a2:ba:ef:fd:83:bc:da:77:2f:71:26:9d:74:94:4d:eb:66:
a2:c1:05:f4:26:68:79:68:80:8e:f2:e3:76:d2:c6:49:26:8d:
6a:37:09:c3:6e:c1:57:7a:75:fa:09:cd:dd:d2:d5:9b:e6:b3:
bf:12:53:fe:77:e9:c6:c3:de:75:45:a8:4a:6d:02:10:3b:a0:
b1:83:ed:40:8e:33:0d:1f:5c:7a:03:69:5d:ff:d6:80:76:a4:
c7:55:96:ee:7f:eb:b6:ce:10:fd:08:59:7f:b3:23:60:d8:f7:
16:34:27:f9:e8:23:b3:cd:32:c3:5d:c7:78:93:8b:99:4c:09:
aa:17:39:e7:f3:7a:07:08:ef:e2:2d:82:50:06:97:0b:13:d1:
5e:64:c4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:54:25 2026 by rpki-client