
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_fn3YKCa8ftqeB0RDtYhovu9nOE.roa
File: _fn3YKCa8ftqeB0RDtYhovu9nOE.roa (raw, json)
Hash identifier: niWLWyclSaEdUxZdqCXpVBd1VOzSnHUPlZFSsSgSTu8=
Subject key identifier: FD:F9:F7:60:A0:9A:F1:FB:6A:78:1D:11:0E:D6:21:A2:FB:BD:9C:E1
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1336
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_fn3YKCa8ftqeB0RDtYhovu9nOE.roa
Signing time: Sun 01 Mar 2026 03:36:28 +0000
ROA not before: Sun 01 Mar 2026 03:36:28 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4918 (0x1336)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 03:36:28 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=FDF9F760A09AF1FB6A781D110ED621A2FBBD9CE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:04:4b:d6:44:25:cf:e5:d9:e9:74:b3:ab:b9:
38:dd:70:fb:fb:42:86:b8:5d:6a:79:04:27:e0:8b:
8d:04:6a:b0:4d:ca:22:7f:20:f8:3f:0c:92:ad:d8:
b0:ab:eb:d0:25:0f:73:99:b8:04:cc:82:a0:27:0c:
03:bc:59:67:99:c5:25:0d:83:59:72:b8:90:ce:10:
89:5f:76:78:4e:fb:9d:8b:8f:00:4d:fa:df:cd:ac:
02:b2:de:91:2e:2e:f8:70:a4:6c:6a:7b:50:d2:e4:
e3:51:6c:4b:3b:61:e7:1e:c7:06:d4:14:f1:22:08:
79:2a:53:a2:b6:44:2a:bc:c4:d8:a4:c6:b7:eb:68:
24:0d:70:97:d4:cb:a9:fd:b6:57:b0:52:ed:38:f2:
90:45:da:50:6e:d2:a2:e7:ef:52:82:7f:eb:1b:fa:
a9:00:09:82:1b:8f:e6:6b:7a:4c:4c:40:f2:70:3d:
b7:ae:6a:ca:24:98:29:4c:67:4d:ac:fa:3b:5b:72:
5e:ce:6e:9c:26:dc:6f:78:e3:90:7d:e7:2e:4d:07:
f9:9a:51:0f:b2:fc:8f:a6:95:da:84:83:9f:b0:d4:
c9:3e:5b:60:b7:31:38:7c:28:84:17:8c:ad:ee:b3:
8e:9a:77:36:57:08:3b:c6:30:bc:f4:6a:75:d0:cf:
e1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F9:F7:60:A0:9A:F1:FB:6A:78:1D:11:0E:D6:21:A2:FB:BD:9C:E1
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_fn3YKCa8ftqeB0RDtYhovu9nOE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.209.0/24
Signature Algorithm: sha256WithRSAEncryption
78:3a:7a:c9:6e:94:54:6e:87:c5:56:21:0d:3a:11:12:88:20:
85:1b:4e:11:66:d7:c5:e0:df:5f:48:4b:5a:36:e7:8a:1f:0b:
f0:09:e0:75:86:bc:16:b8:b3:7d:bc:3b:c4:b7:06:84:e2:31:
46:3c:bd:c9:2a:3a:21:da:cd:f9:38:69:89:7a:dd:11:49:3b:
de:a4:82:38:b6:26:2d:36:0a:f4:6c:d9:7f:eb:e5:8a:e2:12:
9d:76:b7:7a:70:47:2d:34:1c:57:e9:b3:a3:2f:db:60:c5:32:
03:2e:a2:f6:18:fd:6b:64:27:5d:5b:a7:f1:33:e2:41:05:3a:
66:d0:b8:41:b2:c1:f2:ef:76:f9:46:bc:09:11:8e:f9:2b:0d:
ec:c3:d6:17:1e:1c:27:02:f4:6c:e0:52:d6:08:f8:83:d5:04:
25:2a:db:7d:0d:98:bf:0b:f3:c4:bf:58:90:99:46:de:e6:b5:
76:e1:0c:e0:30:a5:f9:ca:38:ce:fb:55:fa:f3:98:8b:a6:22:
68:b1:9f:08:70:2f:d9:6a:00:94:dc:d0:9e:5d:38:7e:f2:be:
37:d4:46:12:29:f9:17:56:4f:52:32:ad:9a:ff:b8:b6:a6:2a:
cd:02:b2:79:c8:b7:5e:00:cb:b7:0d:65:21:f9:c9:b6:45:ab:
05:83:2c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:17:28 2026 by rpki-client