
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/mkdZ1xd9R9vxQRtlJNuRNAC7Htg.roa
File: mkdZ1xd9R9vxQRtlJNuRNAC7Htg.roa (raw, json)
Hash identifier: 4dPUg8Kf+s7NwJlgxeJu1B757Q48XcJfouchSSCmM9A=
Subject key identifier: 9A:47:59:D7:17:7D:47:DB:F1:41:1B:65:24:DB:91:34:00:BB:1E:D8
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1206
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mkdZ1xd9R9vxQRtlJNuRNAC7Htg.roa
Signing time: Sun 01 Mar 2026 02:48:34 +0000
ROA not before: Sun 01 Mar 2026 02:48:34 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 220.210.88.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4614 (0x1206)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:48:34 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=9A4759D7177D47DBF1411B6524DB913400BB1ED8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1e:8d:e0:0a:17:84:89:06:ef:5f:15:7c:98:
6c:b3:0a:42:52:1c:88:06:44:8e:ca:80:a0:8e:89:
32:51:0e:12:b9:63:34:d5:ab:d1:45:b7:3e:7a:71:
cc:aa:12:57:69:33:fb:39:3d:64:a6:d6:3e:93:68:
2e:71:d0:c2:19:95:26:da:a1:ef:81:a8:39:3b:13:
da:4b:a4:c8:b8:3e:a6:39:58:47:e8:63:e9:92:1a:
ee:a1:98:ec:3c:5f:dd:72:b2:80:3b:d7:8c:93:69:
2b:a4:9d:10:e6:98:e6:a5:ad:7f:cf:43:87:e5:2c:
56:72:7f:6f:7c:8c:44:40:1a:4a:d0:d9:85:a7:d2:
fa:25:49:e2:45:96:3a:28:48:28:d6:ff:ae:20:50:
8f:26:42:a9:0e:eb:3c:d5:5c:52:10:e9:56:58:c6:
f7:1a:b6:7f:dc:39:eb:ee:a5:d7:74:69:82:95:f1:
e4:36:5c:29:b2:92:ad:35:18:e3:ca:3a:b6:0b:82:
1c:1d:87:a1:c2:a2:42:2f:82:cf:e3:29:37:96:36:
5d:6b:85:45:27:a0:5a:b0:c0:79:5d:b5:af:21:fe:
d2:0a:7e:c8:25:50:93:ff:02:cd:53:8c:80:d0:43:
27:4b:d3:ba:39:1c:94:b8:ec:f6:1f:2e:d7:9d:2f:
18:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:47:59:D7:17:7D:47:DB:F1:41:1B:65:24:DB:91:34:00:BB:1E:D8
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mkdZ1xd9R9vxQRtlJNuRNAC7Htg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.210.88.0/21
Signature Algorithm: sha256WithRSAEncryption
41:41:ac:3b:9f:f0:75:bb:9c:33:5f:3b:ed:9e:2f:e9:2f:26:
83:74:be:3d:f4:bf:0b:c9:65:2b:3a:87:3e:81:4a:61:81:bf:
8d:8f:49:c9:a8:61:0a:9c:0e:a2:54:5e:21:f8:33:0c:28:b7:
a4:8f:c8:db:1a:aa:be:1d:e8:ce:71:fd:64:f1:e0:ab:12:a5:
a3:e9:33:05:27:71:12:80:e4:87:59:b9:af:cc:91:90:aa:03:
ee:44:13:25:a0:ea:e7:d1:76:94:5d:b5:7b:eb:43:22:79:cc:
c9:90:e2:f9:bf:ff:27:89:3e:46:be:55:0a:7a:09:2b:c2:67:
64:29:2c:9e:87:26:3b:d7:a7:55:2c:05:f6:b5:88:4b:3b:b1:
78:bb:96:a8:75:f9:25:fd:e4:4f:7b:3c:1d:18:e9:65:32:51:
29:e3:70:d3:4f:91:1c:7f:42:4a:a6:e8:bd:47:c7:19:2b:4c:
d7:6d:0f:b3:44:59:bf:16:65:d9:ac:d8:41:7a:f9:c9:2f:99:
c0:d7:11:61:8f:ed:9c:a6:a7:d7:db:44:27:4e:87:49:9f:44:
92:fd:bc:b9:08:ee:fd:32:2b:c9:65:12:77:a2:d5:71:6a:74:
3b:dc:35:ad:bb:35:6b:16:b8:a7:5d:e8:68:7a:c7:9a:e1:71:
43:55:9a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:50:13 2026 by rpki-client