
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/jvmQ2_wxkxtFDWNrPK8TH347PXI.roa
File: jvmQ2_wxkxtFDWNrPK8TH347PXI.roa (raw, json)
Hash identifier: A/qtgr66RMpUBFDLopCoXandePmmMDGZ7DiiC9OqwrU=
Subject key identifier: 8E:F9:90:DB:FC:31:93:1B:45:0D:63:6B:3C:AF:13:1F:7E:3B:3D:72
Certificate issuer: /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial: 8D
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jvmQ2_wxkxtFDWNrPK8TH347PXI.roa
Signing time: Sun 01 Mar 2026 02:16:49 +0000
ROA not before: Sun 01 Mar 2026 02:16:49 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 158.199.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141 (0x8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Validity
Not Before: Mar 1 02:16:49 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=8EF990DBFC31931B450D636B3CAF131F7E3B3D72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8a:52:c7:72:8e:b8:08:8e:a8:a7:7b:b5:ed:
a4:b7:9e:a7:a2:b3:d3:31:07:ab:31:ab:c8:67:0d:
04:25:6e:1b:4c:37:f1:86:2b:61:69:e9:a4:c5:bb:
b5:84:0f:62:29:a3:b7:28:03:b9:60:67:81:54:f1:
bb:bb:af:45:2f:f9:1e:63:1c:01:eb:81:c7:7a:3d:
56:e6:16:52:c8:5c:04:38:64:7b:de:32:f1:4a:55:
b7:86:87:e3:99:3a:fb:d5:39:f0:9d:6f:42:bd:fa:
a5:ba:07:2a:30:f2:33:39:d6:30:fb:27:1b:ca:da:
0d:8e:82:56:0f:4f:2f:81:39:3e:0d:38:7c:82:a4:
fc:9d:20:b6:3e:29:af:09:ab:a2:b3:6e:29:39:a5:
86:a6:98:31:53:e5:51:c9:b9:40:ab:e9:36:12:3c:
88:f6:62:ba:4b:22:9c:84:3e:58:a6:cd:f5:f5:64:
84:04:a1:43:b7:f2:1e:fb:1d:f7:45:e1:ab:55:28:
c4:d1:60:8d:5e:04:aa:54:1f:97:67:c2:3d:d7:c8:
8a:61:eb:65:55:f5:d9:fb:04:6a:81:1d:d5:53:05:
79:54:10:3b:52:9e:35:51:a5:7c:01:38:c1:9d:69:
ed:d7:e1:4a:56:19:02:a5:59:f2:a3:60:dc:19:aa:
b7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F9:90:DB:FC:31:93:1B:45:0D:63:6B:3C:AF:13:1F:7E:3B:3D:72
X509v3 Authority Key Identifier:
keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jvmQ2_wxkxtFDWNrPK8TH347PXI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
158.199.32.0/19
Signature Algorithm: sha256WithRSAEncryption
97:54:6d:78:1d:e6:a5:d4:50:c3:38:31:62:64:c4:70:65:cc:
16:6b:d9:fb:ce:af:77:80:05:6f:39:8a:f8:61:aa:01:e3:98:
22:6d:54:54:61:3e:a6:08:df:7d:cd:2e:25:4f:79:02:44:47:
e6:48:50:1d:33:a8:1f:b2:3b:6d:31:4c:fd:7d:1f:f1:a6:9a:
54:68:5a:42:ea:00:2e:3c:a9:d0:92:80:f7:48:ab:6d:26:e5:
6d:a0:6a:a5:52:37:4d:9f:d0:64:dc:85:25:f5:9e:69:10:45:
15:22:eb:80:93:a4:13:88:ce:d3:b4:f2:2f:b1:f3:d1:b8:bb:
69:16:11:de:0f:95:fc:3d:49:32:d7:8e:fd:4e:2b:cd:ac:96:
d0:2d:4d:72:26:55:90:5e:e0:81:05:7f:1c:22:1e:5d:a2:d0:
1e:6c:03:e3:26:68:5b:08:84:55:2b:fc:f8:e3:ed:a2:a0:b5:
eb:a1:39:b7:a1:63:00:83:47:9b:d6:e0:cd:d1:0e:1c:95:43:
7f:33:59:b0:6d:f8:6d:6d:85:7a:0f:8a:e0:c2:a3:07:43:c8:
e7:28:7b:6a:75:69:f5:c2:68:d0:65:d4:49:ac:96:98:ac:56:
0e:46:7f:64:a9:10:8d:38:8d:83:db:0e:67:f4:0c:ce:c8:b8:
63:01:9d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:22:55 2026 by rpki-client