
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/bEBVfhNt7iyqk8dnG3qhob0GZjY.roa
File: bEBVfhNt7iyqk8dnG3qhob0GZjY.roa (raw, json)
Hash identifier: zHuo2x1tse1dDPFCNOGoGr+REbRNtOlIlrBFhIQNI2c=
Subject key identifier: 6C:40:55:7E:13:6D:EE:2C:AA:93:C7:67:1B:7A:A1:A1:BD:06:66:36
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1238
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bEBVfhNt7iyqk8dnG3qhob0GZjY.roa
Signing time: Sun 01 Mar 2026 02:52:33 +0000
ROA not before: Sun 01 Mar 2026 02:52:33 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.212.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4664 (0x1238)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:52:33 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=6C40557E136DEE2CAA93C7671B7AA1A1BD066636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f6:9e:92:b9:96:37:09:d9:2e:d7:5a:ec:54:
c4:b0:a5:d2:48:93:90:80:70:71:f6:a5:f8:7d:b7:
cf:13:9c:31:7e:07:2e:9c:77:4a:19:c2:98:c1:8b:
bd:4d:fd:6c:1a:21:a7:5e:a4:99:cc:af:42:6e:8e:
fa:76:6b:af:dd:52:84:8e:7d:cd:78:cf:bd:62:a4:
eb:47:d5:31:2f:09:9e:4b:8b:d3:e4:c6:7f:6f:c8:
7f:16:cf:9e:5b:42:39:51:a2:27:71:f8:54:b5:c5:
23:1b:85:0a:5b:3f:7d:85:f3:68:b9:d3:01:df:c7:
2a:81:68:aa:f2:47:43:f6:f6:3e:86:5d:9f:d1:4d:
ba:36:c6:b5:d8:e5:d9:45:a9:a0:70:c4:1b:da:38:
10:3d:fe:e3:9f:5d:d8:c9:3d:3a:3b:d2:3e:27:e2:
5f:c5:34:35:38:1e:b0:ad:44:07:26:82:90:dc:b9:
d2:ca:69:3c:3b:35:f0:bb:73:0b:e6:e6:9f:96:30:
30:71:1b:a5:e5:1a:e0:d4:60:08:a6:95:2d:f6:0c:
2f:06:a9:47:98:cf:37:ae:39:25:22:7d:67:e1:f3:
da:4c:c8:06:08:f0:af:d1:dd:e9:37:da:9c:b2:a5:
6f:f4:20:c9:36:fd:e0:72:ab:60:55:4d:79:6b:6b:
b1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:40:55:7E:13:6D:EE:2C:AA:93:C7:67:1B:7A:A1:A1:BD:06:66:36
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bEBVfhNt7iyqk8dnG3qhob0GZjY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.212.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:3e:86:fc:cc:90:f5:4d:88:4c:d5:20:1d:90:9e:17:ac:fb:
cc:f3:e5:a2:e3:3f:1a:0b:0c:3b:ff:b9:ba:62:6d:fd:cb:7f:
e2:f5:87:64:4b:4d:86:dc:92:87:b9:90:be:eb:f8:da:67:bc:
0f:4d:77:75:8f:a3:e5:a7:01:ae:50:79:c2:74:87:f6:a6:d2:
9c:fc:47:7d:50:4c:cd:64:cc:11:95:57:66:0f:10:5a:1b:55:
42:7d:1e:21:e5:1c:50:10:36:72:66:4f:1d:d3:ef:9c:0a:34:
92:62:6b:84:dc:38:5e:29:47:63:33:fc:c4:3c:33:7f:37:2d:
b7:69:40:fc:d6:8a:d3:38:70:53:a9:1f:cf:5c:3a:df:48:0c:
13:02:20:30:20:94:8c:22:18:da:cf:a3:02:29:a3:a0:43:f2:
57:c2:92:69:44:49:27:3c:6e:d6:5c:5d:c7:e1:49:12:29:c0:
d8:e5:33:30:2f:f0:10:15:45:33:9e:ce:54:36:41:3d:f0:9d:
2b:5e:63:cb:df:34:45:03:8f:30:f9:fb:e4:9d:23:e5:70:21:
0e:c8:ce:72:40:bc:c2:88:c3:50:e6:52:5e:07:c2:70:0d:71:
e7:4a:85:e6:0f:b2:13:24:22:66:c1:2f:97:15:26:cf:b5:b8:
aa:dc:14:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:29:43 2026 by rpki-client