
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ca0ZmNiChFcqfgntq9IHBDe0v9A.roa
File: ca0ZmNiChFcqfgntq9IHBDe0v9A.roa (raw, json)
Hash identifier: UBOnPWYxA9lNdRfZXVxY1/JyGabaed+4h7WLTS52ymM=
Subject key identifier: 71:AD:19:98:D8:82:84:57:2A:7E:09:ED:AB:D2:07:04:37:B4:BF:D0
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1179
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ca0ZmNiChFcqfgntq9IHBDe0v9A.roa
Signing time: Sun 01 Mar 2026 02:26:55 +0000
ROA not before: Sun 01 Mar 2026 02:26:55 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.96.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4473 (0x1179)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:26:55 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=71AD1998D88284572A7E09EDABD2070437B4BFD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c1:0c:cb:2e:48:06:04:fc:34:91:c8:5e:37:
af:71:e2:07:fa:87:6d:e5:b3:5e:1f:71:12:08:0a:
ba:e3:98:14:35:72:84:11:82:30:12:3b:34:c9:75:
09:57:d5:5b:9b:6d:e6:f8:21:81:93:58:17:fa:5a:
da:d4:11:96:8d:77:c4:11:ef:fb:3d:ab:7a:03:22:
42:6c:fb:28:a3:dc:38:37:74:6f:3b:f4:35:41:34:
34:4f:6c:8f:6e:05:3e:15:01:d3:ec:ba:94:81:87:
6f:84:2f:6e:03:b4:68:90:ff:fe:6a:8b:da:5c:a1:
15:c5:e9:64:a6:e5:01:8d:3c:77:a3:1b:b0:20:27:
f2:d8:43:7b:26:6c:a4:f8:b0:81:d8:66:76:d4:07:
18:9e:6f:ff:ef:cb:f7:c3:4d:2e:b0:7f:0c:5f:cd:
47:ba:db:c1:3b:0c:15:4f:e5:14:2f:db:e3:37:46:
bd:a2:15:4c:dc:1b:03:15:9a:f0:46:d2:fc:47:be:
96:a3:c1:dc:3a:a9:bd:79:83:6f:31:ac:01:86:b1:
52:81:9d:60:c9:86:3f:f3:42:a9:b5:e4:b6:2d:4c:
f5:59:93:f4:a1:b3:99:fa:c8:a4:95:c2:64:32:44:
5e:10:bb:be:4b:42:b8:9e:ee:c3:31:20:29:65:12:
9b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AD:19:98:D8:82:84:57:2A:7E:09:ED:AB:D2:07:04:37:B4:BF:D0
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ca0ZmNiChFcqfgntq9IHBDe0v9A.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.96.230.0/24
Signature Algorithm: sha256WithRSAEncryption
e4:f6:58:4b:b3:99:f2:6f:0c:46:c5:ae:31:f9:6f:b5:3a:95:
44:e1:6f:7d:ef:1b:4c:2e:8d:22:ea:29:62:39:42:8c:c2:45:
da:fc:dc:a9:36:47:29:7f:99:60:e0:84:b8:8e:1d:c3:fa:be:
37:8c:19:91:4b:0d:4b:06:02:3b:3f:82:dc:8c:e5:ae:d0:75:
79:c7:56:2a:3a:d6:41:bc:3f:cd:18:9e:84:0d:48:42:03:57:
a2:df:1d:a9:0e:6f:44:e9:5a:db:53:b6:5e:4e:ac:e0:c7:ae:
ea:cf:0e:04:00:00:6e:12:64:2b:b8:5d:bd:15:59:c2:dc:ad:
1f:ef:a4:d0:42:1f:b7:b0:fd:3d:27:e8:21:7c:5f:e5:d7:cb:
ce:2d:85:98:12:bb:e7:fa:38:d5:7b:0c:d4:f1:50:18:db:b1:
4a:9e:25:46:51:7f:c4:75:7b:50:22:a4:66:74:b6:cb:1a:f5:
c4:de:50:79:54:d0:c4:42:14:8f:b0:ed:d8:87:b2:65:2d:86:
d0:0e:25:3d:31:2d:50:b1:5c:28:42:3c:99:76:b3:52:e1:21:
04:0c:1b:e0:7b:40:b9:a6:98:4c:cb:9b:3d:0b:b8:d0:31:c0:
f9:c3:50:24:54:6e:10:e5:56:e2:9a:8d:b3:68:97:be:ed:41:
9f:67:81:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:13 2026 by rpki-client