
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/b3SyupjI9SDRZx39_Aewq8ZsXLU.roa
File: b3SyupjI9SDRZx39_Aewq8ZsXLU.roa (raw, json)
Hash identifier: tj+F66Fh/vJjXIDGy7iB3xuMRFtQKk2RDHNHFfUCg/0=
Subject key identifier: 6F:74:B2:BA:98:C8:F5:20:D1:67:1D:FD:FC:07:B0:AB:C6:6C:5C:B5
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 112A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/b3SyupjI9SDRZx39_Aewq8ZsXLU.roa
Signing time: Sun 01 Mar 2026 02:07:40 +0000
ROA not before: Sun 01 Mar 2026 02:07:40 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.168.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4394 (0x112a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:07:40 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=6F74B2BA98C8F520D1671DFDFC07B0ABC66C5CB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b2:2e:5b:17:c9:35:0f:86:65:e8:e0:fc:cd:
ea:ad:08:22:ea:a5:9d:36:bf:a6:1a:b4:9e:a2:b1:
0c:2f:bd:26:f7:8a:3a:f9:cd:d6:76:81:d7:a2:30:
cc:d9:6c:18:f8:0c:69:57:4d:22:02:1f:cc:7e:9a:
17:c4:66:94:cc:88:bd:e3:a9:b0:7a:cb:60:ce:60:
2e:bf:c7:97:3f:ae:cb:24:72:a3:0b:d2:cc:1f:1d:
de:64:8d:f3:c0:c0:fc:ec:b5:c1:55:41:ad:f3:d4:
26:5f:79:e8:8a:bc:59:bc:24:0f:cc:5b:e2:c8:b3:
82:88:a1:fb:de:09:f7:a1:90:8a:73:b7:46:a9:fc:
fa:cd:dd:5a:e7:7e:71:28:98:2b:cd:2f:5e:59:f5:
ba:93:6b:4d:3e:25:1c:70:10:36:2d:46:c5:e4:2b:
be:1b:42:92:f6:80:27:ed:9b:46:77:0b:ed:71:36:
1f:f1:8d:df:2c:f1:c9:9f:35:7b:e5:62:be:36:54:
3d:64:26:15:c0:24:99:4e:5a:91:fc:5e:34:94:4a:
6e:35:54:c0:5c:13:75:fa:5c:8b:a0:c7:99:bb:60:
2e:ca:fc:a1:fb:8d:21:6c:bd:5d:8c:4e:1a:33:61:
2e:70:e5:21:49:76:52:9f:a4:98:2e:7c:0f:81:cb:
cf:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:74:B2:BA:98:C8:F5:20:D1:67:1D:FD:FC:07:B0:AB:C6:6C:5C:B5
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/b3SyupjI9SDRZx39_Aewq8ZsXLU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.168.0/23
Signature Algorithm: sha256WithRSAEncryption
69:a3:d7:cc:ca:01:71:d3:67:9c:47:3c:e0:d5:e5:3a:c6:45:
61:2b:ee:79:ac:b1:63:28:d8:fc:d8:8b:8a:0d:22:6d:25:d7:
81:1d:5a:59:6a:6b:4a:5c:57:69:c5:8c:aa:be:6f:ca:93:d5:
29:11:0a:b5:4e:ca:d2:10:31:f1:5c:90:64:90:48:0b:e9:20:
38:f6:8b:f0:35:50:91:6c:ed:8d:32:7f:f3:e4:56:b1:bb:59:
12:d0:b7:20:ba:ed:5b:db:f3:1c:3c:6a:9a:d4:5c:f0:8f:27:
ec:1c:e0:d4:4f:0e:f2:f9:3d:c0:bd:31:a1:f2:20:51:ba:a5:
2f:2d:11:5b:17:2d:8f:0f:17:91:16:bc:17:30:f0:0b:96:99:
38:0d:24:5f:12:8d:dc:38:94:4f:70:79:41:de:83:4f:3d:6d:
ab:93:59:d4:32:e0:69:e9:7f:20:c6:22:8f:12:47:c9:6f:8d:
61:de:8f:61:74:67:da:7f:4e:85:63:94:b7:75:16:4f:c3:66:
04:34:64:7f:04:4f:92:f2:36:c4:16:0d:e2:22:f2:3b:6e:b1:
32:04:c4:f9:69:98:90:66:1f:e1:89:9a:95:d3:46:db:1f:50:
47:8f:bf:3c:43:49:c1:75:a5:ba:9e:57:68:ec:d1:3d:6e:8b:
7a:48:6e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:17:00 2026 by rpki-client