
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/jjFlRt5Ioa3e0DhWmXWlkw2sd9A.roa
File: jjFlRt5Ioa3e0DhWmXWlkw2sd9A.roa (raw, json)
Hash identifier: VIh7FjOJZ+RWWZ6tR9Bmy9N7Qs9IXlSw9z34KVvV3uM=
Subject key identifier: 8E:31:65:46:DE:48:A1:AD:DE:D0:38:56:99:75:A5:93:0D:AC:77:D0
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 10C1
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jjFlRt5Ioa3e0DhWmXWlkw2sd9A.roa
Signing time: Sun 01 Mar 2026 01:54:37 +0000
ROA not before: Sun 01 Mar 2026 01:54:37 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.168.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4289 (0x10c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 01:54:37 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=8E316546DE48A1ADDED038569975A5930DAC77D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:98:73:64:33:2a:26:eb:b0:3b:dc:93:9d:b0:
24:72:59:39:48:0c:76:45:79:ac:90:b4:92:6f:49:
d2:2f:33:bc:64:29:e1:ae:c5:8d:ad:68:d5:44:0e:
7b:c3:41:ba:62:e6:2c:9d:4e:a8:07:61:52:1e:b9:
e7:58:85:f2:46:57:ad:c9:7c:5a:83:1c:30:0a:80:
ae:fb:26:5a:ee:c7:5d:ef:b5:e2:88:57:b3:f9:dc:
5f:eb:78:23:ae:3e:a0:1d:36:c0:74:37:a2:db:0b:
28:89:36:08:15:b8:4c:7f:fa:aa:3c:1f:24:bb:8d:
50:db:d0:8c:56:39:7b:cc:38:59:91:7c:5b:87:59:
29:74:43:42:42:60:af:7e:de:ff:51:b1:74:ec:b7:
e5:a6:c6:0a:9e:79:4d:f5:11:f8:ac:79:ed:b8:6d:
6d:e8:05:92:f2:48:a2:c9:eb:c7:39:2a:e9:3b:d6:
97:f3:93:e2:78:68:56:7c:56:c2:56:63:ae:a0:39:
f6:46:b2:23:f3:8d:23:0e:c5:54:a2:a8:c6:56:5f:
6e:82:c0:50:0e:09:0a:c1:de:b4:f4:2a:05:74:7f:
fd:d8:bd:93:c0:dc:0a:8e:35:74:49:1a:c7:63:7a:
87:8c:d4:36:24:71:9e:d5:81:01:8e:b1:c6:ca:16:
82:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:31:65:46:DE:48:A1:AD:DE:D0:38:56:99:75:A5:93:0D:AC:77:D0
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jjFlRt5Ioa3e0DhWmXWlkw2sd9A.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.168.0/23
Signature Algorithm: sha256WithRSAEncryption
26:2d:93:1b:31:f0:9f:2a:79:8f:6c:92:39:e8:f7:b0:51:6a:
8e:7c:19:1d:2c:e3:6b:54:d7:88:79:3a:4b:a6:7d:ba:bf:03:
d0:cb:f1:e1:89:ad:d0:18:98:0f:02:22:e0:b4:03:e8:e7:35:
8d:47:58:80:dd:b4:03:3f:17:35:8a:aa:c5:bc:af:af:97:7d:
98:ac:ed:02:de:d8:13:26:82:6c:1a:dd:00:42:a4:9f:16:6d:
e0:57:7b:5d:22:92:50:8b:cc:8d:e1:20:2b:93:4d:9c:48:42:
c1:eb:cb:ef:09:8d:f8:76:0b:26:7a:8d:88:c2:c6:5f:63:81:
94:42:b2:8a:42:a9:59:03:28:84:d0:74:55:a8:ec:b5:31:98:
42:a2:43:fb:a7:8c:ec:25:a4:a3:d1:76:56:4f:92:8c:1b:ea:
4a:8b:2c:10:84:a4:5e:3e:d6:38:fd:3e:bc:9e:75:0c:ed:36:
c1:db:0a:68:d9:a2:81:a8:c4:1d:52:16:38:87:a9:ee:56:c2:
74:af:55:33:36:de:6f:e8:9b:34:9a:f7:d3:67:a9:7a:b4:e7:
4d:22:7e:67:05:b3:3b:4e:45:19:72:3a:0c:4e:0a:fb:fa:3f:
0a:c1:83:f2:33:bc:3d:5b:35:0e:e7:d2:51:1d:0a:c2:93:27:
92:57:9b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:06 2026 by rpki-client