
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/kn0l5pDAbqnGySQf3fxd36NsWo0.roa
File: kn0l5pDAbqnGySQf3fxd36NsWo0.roa (raw, json)
Hash identifier: oOLsC6VHjXHvWRIACr3YKDpzGepdDyk+zEFYxj7KKJA=
Subject key identifier: 92:7D:25:E6:90:C0:6E:A9:C6:C9:24:1F:DD:FC:5D:DF:A3:6C:5A:8D
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 129E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kn0l5pDAbqnGySQf3fxd36NsWo0.roa
Signing time: Sun 01 Mar 2026 03:08:48 +0000
ROA not before: Sun 01 Mar 2026 03:08:48 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.96.30.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:24:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4766 (0x129e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 03:08:48 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=927D25E690C06EA9C6C9241FDDFC5DDFA36C5A8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:69:c8:c2:28:76:cf:76:01:78:a8:5b:22:8a:
49:f8:55:9b:ab:4a:e8:1c:a4:62:30:e2:fd:18:a2:
1b:5b:58:78:d9:c6:23:28:d2:83:7b:e1:70:c4:82:
24:1a:2c:b8:e1:ea:47:07:9e:08:22:3f:11:37:32:
c2:4c:09:1b:a0:b4:77:bd:0b:ea:4d:e2:1e:60:b3:
0e:65:3b:2c:b4:9c:12:d2:83:f5:2f:bf:6d:42:fa:
97:f4:ba:14:89:ad:7f:4a:cf:f3:3c:81:40:b0:f4:
af:5c:61:6d:33:95:11:b2:88:0e:08:b5:35:14:c1:
cd:de:d4:2f:ff:cc:b6:a5:32:70:5f:58:64:7b:d9:
35:3a:49:19:bd:cd:05:35:1e:c4:e9:19:0f:d5:9d:
c9:16:c8:78:c3:ce:ee:09:81:18:dd:d7:f5:76:21:
d8:3f:c8:0f:43:32:da:ac:51:3d:f9:01:e8:51:b8:
57:45:93:2b:16:6b:d8:12:35:7d:8b:53:c2:95:ad:
71:08:06:48:d0:99:6b:f0:7b:2a:ea:e0:74:dc:78:
89:9e:d4:4f:c5:ed:70:8f:7a:09:30:d7:5d:af:07:
ca:32:15:5f:fd:56:5c:04:1a:19:31:03:bf:ee:d4:
a4:3b:9d:d7:a6:42:92:cd:e5:e3:d3:00:e4:2c:74:
24:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:7D:25:E6:90:C0:6E:A9:C6:C9:24:1F:DD:FC:5D:DF:A3:6C:5A:8D
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kn0l5pDAbqnGySQf3fxd36NsWo0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.96.30.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:a6:76:8b:e9:f9:de:08:6a:d2:42:e8:75:24:87:e1:7d:e0:
c3:3f:27:72:b8:cb:d9:bf:07:e5:6a:d9:ba:53:7f:6c:2c:e1:
dc:19:5c:64:79:b5:a2:52:9f:51:bf:74:58:30:df:3a:e9:7d:
e0:8b:31:95:3b:6c:55:f2:98:0d:34:1e:d7:f3:b7:46:a6:44:
90:b1:b7:4d:e9:ab:7f:95:fb:1e:f4:14:7d:28:9d:3b:07:b9:
38:6c:ef:1b:95:7a:52:ab:b9:39:09:bb:5d:a3:86:ca:db:95:
f3:b4:ed:ae:68:46:a9:34:1b:13:6b:38:52:9f:2b:25:64:a4:
5a:88:fb:2c:01:d5:22:75:e6:2e:96:fa:91:c0:9c:2d:f9:f2:
73:b9:8f:a6:6d:f5:ba:3c:ed:92:de:e7:89:d4:ce:db:39:43:
fa:5b:cf:cb:01:7d:47:4d:f1:3c:2a:6d:97:cd:78:1d:9c:37:
25:a3:2f:41:eb:59:7f:49:9c:aa:df:aa:20:a2:f3:ab:1d:7a:
0d:a1:12:8a:ad:a1:eb:c9:84:f0:b2:10:ae:9f:40:b8:4c:e4:
ac:fa:92:0a:f2:d8:4a:18:75:30:af:6e:a6:00:ed:4c:63:4f:
8b:9e:6c:7d:b7:2d:8c:09:cd:7d:50:c2:ac:f8:00:6a:6f:e0:
d5:32:5f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:54:18 2026 by rpki-client