
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/gus8qtK14fRmnkkUCNNPbu19wlk.roa
File: gus8qtK14fRmnkkUCNNPbu19wlk.roa (raw, json)
Hash identifier: y+YgU0wTRvgv/HMsTnUkMRsWB3Jbk3eGucOgWRbt4/4=
Subject key identifier: 82:EB:3C:AA:D2:B5:E1:F4:66:9E:49:14:08:D3:4F:6E:ED:7D:C2:59
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 10FB
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gus8qtK14fRmnkkUCNNPbu19wlk.roa
Signing time: Sun 01 Mar 2026 02:02:51 +0000
ROA not before: Sun 01 Mar 2026 02:02:51 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.104.24.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4347 (0x10fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:02:51 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=82EB3CAAD2B5E1F4669E491408D34F6EED7DC259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f8:3c:4f:4f:d8:57:85:72:46:83:e4:53:20:
dc:88:01:be:06:cd:52:48:4d:09:d9:74:14:e1:93:
ce:c7:10:44:77:39:f5:2c:aa:d6:7b:d0:e8:61:61:
04:77:48:c0:33:3f:07:6f:0d:6b:f8:93:97:ea:5d:
a3:98:8b:79:b5:1b:5b:56:a0:f5:f9:eb:16:b6:c1:
b8:9b:da:30:8f:56:a1:dd:d7:ba:d5:96:de:31:cf:
fe:ba:e9:e9:19:26:c8:00:d7:b0:02:3b:e0:58:9f:
85:92:9d:f0:d4:3f:68:f8:da:55:55:fe:ca:9c:fe:
b0:04:1b:1f:21:3c:c1:48:66:14:81:b3:a0:44:f8:
79:50:6c:ad:3c:73:95:f6:49:b9:9c:58:a4:ab:5d:
f3:39:7f:d0:04:38:ad:90:11:44:65:e6:82:11:88:
2c:9e:76:4d:66:e7:32:53:60:99:95:4d:a1:e2:32:
a1:27:9e:40:82:6e:e3:b1:2b:5d:aa:3b:6e:1b:3f:
11:75:67:90:28:c3:c6:1d:10:f3:0f:21:1d:4d:2c:
ef:6e:9a:3c:29:0a:4f:cb:af:45:37:a5:e9:0f:c0:
8e:40:5d:ef:b4:b0:dd:fc:03:17:b6:a2:4b:f1:ca:
fc:be:40:9e:1e:1f:7b:b2:c1:85:d6:26:9e:12:88:
34:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:EB:3C:AA:D2:B5:E1:F4:66:9E:49:14:08:D3:4F:6E:ED:7D:C2:59
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gus8qtK14fRmnkkUCNNPbu19wlk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.104.24.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:d3:1c:8e:a3:6e:c5:74:88:8d:bd:a7:f0:44:06:0c:56:b9:
73:7f:d9:19:2c:3d:ba:fa:9b:10:5f:6c:fa:ae:92:c7:ca:97:
f6:7a:fa:96:c2:b3:6f:bc:cf:ee:64:57:29:45:47:8d:fa:fc:
e9:c3:f4:08:84:69:57:3a:1c:dd:52:2a:aa:a7:2f:2c:1f:70:
d4:85:a7:98:05:d1:49:0e:95:bd:11:3e:d9:d6:6f:21:f4:ed:
94:1a:5b:42:de:23:d0:a6:10:36:29:bd:0d:97:9a:75:e7:0d:
8d:d3:28:50:90:6a:a1:f9:ab:09:85:c3:15:fa:97:ee:66:64:
ff:08:40:a0:44:d3:50:9e:c7:22:70:27:d6:cb:02:36:fc:58:
70:33:57:aa:b5:d9:4c:eb:ca:8f:14:cc:08:1d:1e:8b:8e:73:
76:9d:dd:4b:60:59:0b:a7:cd:4e:01:e7:40:d8:7b:82:36:80:
6e:d0:06:ea:54:d7:ab:8d:2a:5b:6b:ea:b7:bf:da:66:ce:77:
34:26:e6:ec:cf:6f:78:1b:bb:6e:b5:30:d0:cb:35:de:55:e9:
43:74:69:e6:5e:6e:b9:6f:12:a5:b1:03:ef:f1:75:fe:53:1f:
1e:ba:6a:18:9c:1f:c0:ba:66:93:22:b4:65:83:97:5c:2f:c1:
95:c6:d4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:17:32 2026 by rpki-client