
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/c9TyIbjmMg0X2bKKlpcOO_KuBdQ.roa
File: c9TyIbjmMg0X2bKKlpcOO_KuBdQ.roa (raw, json)
Hash identifier: hQT80fw06uZhXeXnmJ4/ySFiDq1T9W51OTRbBy6Cz90=
Subject key identifier: 73:D4:F2:21:B8:E6:32:0D:17:D9:B2:8A:96:97:0E:3B:F2:AE:05:D4
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1088
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/c9TyIbjmMg0X2bKKlpcOO_KuBdQ.roa
Signing time: Sun 01 Mar 2026 01:40:03 +0000
ROA not before: Sun 01 Mar 2026 01:40:03 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.210.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4232 (0x1088)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 01:40:03 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=73D4F221B8E6320D17D9B28A96970E3BF2AE05D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:29:d2:b4:81:00:93:06:c7:f0:64:78:d7:b5:
66:5d:80:4c:3e:4b:73:db:55:e1:74:f3:8c:c5:18:
80:89:40:56:56:4a:fa:80:39:66:2d:e3:52:77:c5:
d4:05:80:69:38:fc:59:66:7f:9e:b9:22:bc:71:fd:
3f:22:96:e5:69:87:bd:bc:e2:b6:b4:82:ce:36:5c:
28:a2:cb:c0:95:44:83:29:2d:59:c4:50:6f:35:fc:
65:70:7a:fe:5b:5a:e7:b0:88:e6:be:a8:db:58:83:
3c:0f:8a:40:a3:ef:14:be:a8:75:bd:69:5b:32:e4:
50:36:81:9d:ee:76:0a:4f:4a:09:df:78:6b:2a:b7:
2b:4e:d4:c3:4b:bd:6f:28:41:6e:05:20:23:38:59:
c7:35:55:59:de:07:0b:9b:e8:88:b3:94:e4:03:f3:
95:1a:4f:6d:c6:0d:dc:b0:0a:e6:f5:a4:ba:e5:74:
5c:cf:d3:1f:86:70:d3:5e:17:bb:5e:ad:44:0c:02:
19:39:51:c4:c1:ad:36:2e:18:24:f3:dd:09:3e:53:
9f:6a:6b:f0:e2:7b:62:f4:91:ec:9d:e6:a3:5b:e7:
fe:ec:b4:9b:17:dc:57:1d:32:9a:9e:0b:ac:1a:fe:
e8:ec:3d:42:13:f8:1a:44:2b:bb:12:f7:0c:db:64:
d6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D4:F2:21:B8:E6:32:0D:17:D9:B2:8A:96:97:0E:3B:F2:AE:05:D4
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/c9TyIbjmMg0X2bKKlpcOO_KuBdQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.210.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:a3:17:82:fb:b8:01:74:09:4d:9b:e9:af:86:a9:eb:eb:f8:
ce:d7:7c:37:d3:f8:98:f0:57:fc:79:75:4f:7f:3b:8d:01:c1:
7a:a7:5b:1b:20:87:74:24:50:b0:6a:5d:a2:3b:9e:cd:be:7a:
2d:72:78:73:eb:4c:89:7b:c9:cc:10:9a:9b:cf:d3:f1:2f:14:
0f:94:fd:fb:10:51:e0:3e:7f:60:9d:82:f3:98:ee:91:93:35:
8b:ce:cf:3d:b1:56:2b:91:09:06:29:cd:4d:60:a8:43:c8:1d:
c5:2e:81:e3:4f:0f:88:56:94:9a:e1:59:ec:4e:3a:f5:77:24:
5d:92:13:c6:c3:3d:ee:3c:6d:38:8d:37:5d:3b:2a:36:2d:6e:
de:03:cd:b4:fd:10:fb:5e:e1:7f:d4:9e:b0:55:99:0b:31:ed:
9f:0e:f0:3d:5b:da:b4:54:50:d0:89:87:32:2e:89:96:f1:f1:
d1:3f:cd:eb:a8:fc:79:c2:bf:61:0b:1b:4f:03:07:ad:ce:fb:
dd:bc:82:02:0f:a5:50:b7:e2:cf:e9:03:d1:22:f1:ca:63:a4:
d6:5a:b3:cf:49:a4:28:b7:37:81:ec:7e:f5:09:7e:10:39:e2:
b2:4c:2f:3b:7a:1e:00:24:db:87:1b:35:18:ed:36:8e:e6:3d:
10:ef:96:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:26:22 2026 by rpki-client