
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/dZmbQX7RSZgGRBHmR485rwFXCFE.roa
File: dZmbQX7RSZgGRBHmR485rwFXCFE.roa (raw, json)
Hash identifier: f7p8cmiUjMCsr1XDM+QxvpyTyI3emonSdA6AGK2rKrc=
Subject key identifier: 75:99:9B:41:7E:D1:49:98:06:44:11:E6:47:8F:39:AF:01:57:08:51
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1112
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dZmbQX7RSZgGRBHmR485rwFXCFE.roa
Signing time: Sun 01 Mar 2026 02:07:26 +0000
ROA not before: Sun 01 Mar 2026 02:07:26 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:24:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4370 (0x1112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:07:26 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=75999B417ED14998064411E6478F39AF01570851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c2:7d:81:8c:d9:92:5c:d7:02:71:d2:90:26:
7d:4c:96:41:83:0f:0a:86:71:35:68:36:e8:b3:23:
77:fe:fe:90:b8:91:b1:ad:19:94:a0:15:ed:cb:c4:
b0:c8:a6:80:47:72:79:22:c7:14:c4:4b:a1:f4:42:
62:a8:20:b8:10:86:b2:52:dc:bd:1b:62:ee:4f:7f:
fd:83:57:e7:b3:03:81:83:5a:33:35:c8:b5:c9:c8:
05:eb:6f:27:03:57:3f:10:19:c5:01:d7:81:a4:2f:
7d:1c:1c:1c:00:30:c4:55:5b:53:a5:2e:4e:eb:78:
74:34:0e:49:3d:55:a7:41:3d:88:05:3d:bf:1a:c6:
11:d6:13:e0:e1:89:01:83:d8:a9:9d:be:3c:0e:27:
d7:f8:b7:f3:2d:e3:c2:49:b7:7b:1b:bb:8a:5d:4c:
df:df:fd:55:37:24:80:3b:8e:fd:66:6f:ad:14:37:
52:48:fc:28:71:9c:85:7f:23:aa:54:96:a3:05:23:
0a:60:ea:bd:81:15:b6:0b:94:4b:13:08:66:73:1c:
a6:f0:b6:2b:da:6f:a5:5c:b9:60:be:bf:04:e5:91:
6e:e7:bb:46:bd:57:87:ed:e1:05:2b:1f:91:8f:b1:
dd:90:27:1e:3e:78:50:58:49:88:ea:0b:3b:54:56:
2f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:99:9B:41:7E:D1:49:98:06:44:11:E6:47:8F:39:AF:01:57:08:51
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dZmbQX7RSZgGRBHmR485rwFXCFE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.136.0/22
Signature Algorithm: sha256WithRSAEncryption
71:ea:14:d2:83:7d:57:5e:f5:36:c4:09:b2:e5:e8:11:93:4f:
2c:c5:c4:74:e4:b9:20:ce:aa:38:6e:97:5e:f3:d5:04:0f:3e:
f1:c7:27:35:2b:77:85:4b:9a:fb:98:61:84:86:3d:e8:06:4d:
7e:4f:86:6c:6e:21:e3:59:af:04:58:04:9e:34:cf:19:db:a6:
30:86:2b:38:31:a7:11:a1:cb:8d:7c:00:7f:a2:06:54:f9:7b:
ee:b2:8b:da:a4:fc:1c:44:34:de:af:16:49:73:1e:c2:74:d5:
56:ec:28:92:cd:ec:b2:45:b1:25:ed:bd:ef:b2:ed:15:dd:23:
f3:34:bd:29:7a:cb:8a:0e:f8:e5:f6:62:70:cf:8a:07:ea:b8:
97:eb:39:fc:18:5e:c8:ff:40:29:35:21:2a:79:19:1f:64:e7:
a2:17:bf:c1:f7:da:7f:75:7b:cc:0d:0d:8f:38:23:f2:fc:cb:
7c:07:dc:ee:bf:86:0b:66:c6:a4:93:21:fd:fe:4e:18:74:64:
0e:17:05:01:cb:fb:95:22:6e:98:94:e8:13:38:65:2a:13:e5:
b8:f5:c5:77:27:a9:e4:6d:81:b0:e4:9a:c4:db:34:0d:bd:ee:
44:ee:44:af:2e:26:39:67:05:16:04:d9:68:da:ac:7f:2a:e8:
21:16:b9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:54:16 2026 by rpki-client