
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/k69bSY-pm4VuqZvV5Iomt6-krS8.roa
File: k69bSY-pm4VuqZvV5Iomt6-krS8.roa (raw, json)
Hash identifier: ett+Qsng2aEOHKIxSyBK9fzyymDfLRlK1uQcP20Vahs=
Subject key identifier: 93:AF:5B:49:8F:A9:9B:85:6E:A9:9B:D5:E4:8A:26:B7:AF:A4:AD:2F
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1106
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/k69bSY-pm4VuqZvV5Iomt6-krS8.roa
Signing time: Sun 01 Mar 2026 02:02:58 +0000
ROA not before: Sun 01 Mar 2026 02:02:58 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.78.34.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4358 (0x1106)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:02:58 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=93AF5B498FA99B856EA99BD5E48A26B7AFA4AD2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:56:6e:65:3f:d7:b4:d9:85:68:b0:28:b1:4b:
cf:59:eb:18:06:65:2d:66:d7:2a:2e:64:e5:f7:d9:
7b:be:2a:27:ec:01:ad:10:03:55:fb:88:9a:e1:35:
a5:33:08:fa:cf:b9:5f:ae:22:84:93:f3:67:1b:6d:
77:a5:a0:e6:4d:f6:ad:a3:80:2e:e3:c9:25:18:fe:
8a:47:41:ad:ee:d3:44:01:f4:1d:c2:1a:ff:e5:c4:
45:a3:b1:35:7e:d4:45:2f:71:3d:9d:b8:e1:fa:20:
da:94:6d:48:19:0e:3b:9b:45:51:9a:6f:d2:d3:70:
df:63:23:51:23:2f:8b:31:e9:26:81:a5:35:a4:c2:
a8:e6:31:07:f8:1c:38:6a:86:d1:7e:e8:1d:7a:9f:
a5:c6:e3:5c:87:b8:53:5e:d3:e9:3a:5d:99:8e:cc:
0d:f1:09:3e:51:35:65:ee:1a:8c:15:80:68:bc:26:
c3:af:e6:bd:f0:e5:a9:23:1a:c3:a1:85:49:bd:27:
93:9c:59:3a:d5:ee:75:d4:00:9c:26:1f:28:a5:9f:
b2:92:92:a9:f1:3c:6a:58:d9:bf:06:df:bb:24:1b:
21:d4:ca:0f:97:dd:31:47:4e:e7:ef:89:1b:1b:6b:
e3:69:b9:5c:93:b0:b1:88:53:ab:62:cd:44:d7:b9:
1f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AF:5B:49:8F:A9:9B:85:6E:A9:9B:D5:E4:8A:26:B7:AF:A4:AD:2F
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/k69bSY-pm4VuqZvV5Iomt6-krS8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.78.34.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:9a:8d:60:d6:3f:33:40:66:d1:25:e5:17:24:b6:3e:76:27:
cd:be:b7:fa:43:1d:dc:3d:a6:06:3e:19:51:02:db:d8:4f:61:
af:b4:46:23:21:c4:2c:29:88:71:c5:c6:ce:f7:f0:e2:d7:4b:
51:f1:c5:1c:9b:1c:34:a6:e7:bb:be:de:96:de:d9:7c:da:a0:
1a:c9:72:d4:47:7d:c1:14:7a:46:e9:4e:50:22:04:14:22:8e:
a9:0a:e9:c0:8e:e6:76:b1:ca:03:24:d5:ca:9a:7f:3f:00:1a:
15:87:95:19:4f:4c:3a:77:20:6f:21:4e:cb:5c:64:d6:b7:89:
d6:7d:45:43:3f:6b:29:1b:af:dc:08:b0:d7:0c:b6:a6:bc:dc:
e3:03:a5:34:fe:ad:45:dd:38:84:38:75:d0:f6:c7:30:81:42:
36:74:e1:c1:6e:7e:c6:9e:a9:d0:d5:c2:30:95:6f:af:aa:10:
5b:ca:04:16:e0:b9:b0:50:48:be:c8:d1:1f:ac:72:bc:d5:9d:
54:ae:a6:ba:99:8d:57:64:42:a4:34:13:75:05:01:c1:3f:d4:
a1:5d:77:09:a6:c1:18:91:6b:6f:19:ef:7a:a7:09:41:32:d9:
e1:69:30:81:37:6c:d0:f1:d2:14:28:5c:b9:b7:68:5d:7e:0a:
cb:8d:a4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:06:59 2026 by rpki-client