
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/gl-sash2E5AVUMMXHtv5ke1UBus.roa
File: gl-sash2E5AVUMMXHtv5ke1UBus.roa (raw, json)
Hash identifier: +dcZ+57CtuhEmwy8nGvBPGtnRFoki3w2d695cRf5Afg=
Subject key identifier: 82:5F:AC:6A:C8:76:13:90:15:50:C3:17:1E:DB:F9:91:ED:54:06:EB
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1198
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gl-sash2E5AVUMMXHtv5ke1UBus.roa
Signing time: Sun 01 Mar 2026 02:31:13 +0000
ROA not before: Sun 01 Mar 2026 02:31:13 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.164.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:24:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4504 (0x1198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:31:13 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=825FAC6AC87613901550C3171EDBF991ED5406EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:04:63:44:4a:91:62:24:65:e6:04:45:51:fe:
b0:d0:0d:89:8a:da:a0:1c:7a:75:a1:09:2b:77:fa:
07:37:3c:c6:92:e4:d2:88:5a:1e:43:c9:c5:dc:7c:
9f:eb:90:7e:14:81:45:07:ae:29:e0:9a:15:7b:3b:
54:a4:b3:fb:fd:25:00:dd:1e:e3:9d:3a:28:dc:a5:
13:c5:00:04:7c:40:6e:58:eb:ae:55:b2:ab:9b:44:
f0:59:ec:97:3a:7c:41:72:dc:e0:0f:8d:a0:57:ea:
5f:e8:ec:73:b0:1e:e2:fc:cd:a6:49:8b:e0:8b:36:
9f:c4:e3:10:05:0d:82:62:e5:e6:66:ca:ab:15:68:
d8:b9:22:da:a0:cc:8d:fb:b4:d3:4f:9a:09:79:fc:
5d:4a:75:a0:24:67:f9:9c:bf:ce:22:8f:fc:14:53:
7d:54:ea:a0:3d:cd:ba:17:ee:7a:a9:7b:ca:72:5f:
47:72:5d:e6:01:7a:15:04:51:2b:4e:db:5b:14:5a:
b2:8e:2e:93:51:5a:2b:d5:64:02:df:e3:66:01:79:
9e:9f:02:29:a0:b8:d5:19:24:78:73:06:f8:e5:7c:
4a:44:ee:db:ba:f7:5e:dd:d2:a9:43:e8:b7:0a:25:
21:3a:cb:bb:f8:f4:0f:75:81:88:d8:ce:48:61:6f:
69:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5F:AC:6A:C8:76:13:90:15:50:C3:17:1E:DB:F9:91:ED:54:06:EB
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gl-sash2E5AVUMMXHtv5ke1UBus.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.164.0/23
Signature Algorithm: sha256WithRSAEncryption
82:3d:05:a2:92:9b:cc:cf:b8:4a:54:b0:52:ab:d6:cb:42:a1:
d9:8a:b7:a3:fb:51:e7:66:59:7a:ee:46:d2:4b:19:a7:25:89:
3a:c5:64:ee:af:d2:41:9c:ae:de:9d:0e:c8:a7:6d:ee:7f:24:
c4:cb:48:f9:75:7d:e9:e4:0e:28:6e:29:09:92:85:47:63:66:
ea:2c:35:b6:6b:50:18:08:91:b4:69:dc:f4:37:39:be:77:04:
da:96:e0:59:e4:06:a5:dc:20:20:0a:c9:2f:a9:d8:1f:21:f6:
51:28:d3:5a:ad:02:02:6c:a6:c9:0f:99:1e:ca:1f:e8:73:c1:
2b:ad:05:de:5a:2b:14:4a:10:c6:aa:47:39:98:b2:9f:26:6e:
35:b7:a5:2b:47:c2:8b:83:eb:7d:d7:b3:92:cb:5a:75:d3:24:
86:57:7e:30:27:53:6e:7f:a0:33:df:5a:f2:6d:0d:58:a9:c8:
a1:6c:70:3f:c9:b7:89:60:8d:ac:7f:a7:06:d4:f2:70:37:b5:
3a:d8:63:c3:93:d4:54:63:03:5e:a0:b1:a6:e9:d7:19:16:40:
09:b7:e0:22:9c:be:ac:62:e7:f3:3c:1a:39:6f:78:a5:bd:85:
4b:3d:ff:01:34:01:3e:66:f7:67:17:16:a5:cf:65:86:38:b3:
9b:98:b4:7f
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEZgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MjMxMTNaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDgyNUZBQzZBQzg3NjEz
OTAxNTUwQzMxNzFFREJGOTkxRUQ1NDA2RUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCkBGNESpFiJGXmBEVR/rDQDYmK2qAcenWhCSt3+gc3PMaS5NKI
Wh5DycXcfJ/rkH4UgUUHringmhV7O1Sks/v9JQDdHuOdOijcpRPFAAR8QG5Y665V
squbRPBZ7Jc6fEFy3OAPjaBX6l/o7HOwHuL8zaZJi+CLNp/E4xAFDYJi5eZmyqsV
aNi5ItqgzI37tNNPmgl5/F1KdaAkZ/mcv84ij/wUU31U6qA9zboX7nqpe8pyX0dy
XeYBehUEUStO21sUWrKOLpNRWivVZALf42YBeZ6fAimguNUZJHhzBvjlfEpE7tu6
917d0qlD6LcKJSE6y7v49A91gYjYzkhhb2lJAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUgl+sash2E5AVUMMXHtv5ke1UBuswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2dsLXNhc2gyRTVBVlVNTVhIdHY1a2UxVUJ1cy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExYqQwDQYJKoZIhvcNAQELBQADggEBAII9BaKSm8zPuEpUsFKr1stCodmK
t6P7UedmWXruRtJLGacliTrFZO6v0kGcrt6dDsinbe5/JMTLSPl1fenkDihuKQmS
hUdjZuosNbZrUBgIkbRp3PQ3Ob53BNqW4FnkBqXcICAKyS+p2B8h9lEo01qtAgJs
pskPmR7KH+hzwSutBd5aKxRKEMaqRzmYsp8mbjW3pStHwouD633Xs5LLWnXTJIZX
fjAnU25/oDPfWvJtDVipyKFscD/Jt4lgjax/pwbU8nA3tTrYY8OT1FRjA16gsabp
1xkWQAm34CKcvqxi5/M8GjlveKW9hUs9/wE0AT5m92cXFqXPZYY4s5uYtH8=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:54:24 2026 by rpki-client