
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/pkXPNDlI1RjOSlnSXni0WGPgi9k.roa
File: pkXPNDlI1RjOSlnSXni0WGPgi9k.roa (raw, json)
Hash identifier: 74qXoqylOG0raZoe3p0J5BlJA6QHkCGVekNfKibOQlg=
Subject key identifier: A6:45:CF:34:39:48:D5:18:CE:4A:59:D2:5E:78:B4:58:63:E0:8B:D9
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 11EB
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pkXPNDlI1RjOSlnSXni0WGPgi9k.roa
Signing time: Sun 01 Mar 2026 02:44:29 +0000
ROA not before: Sun 01 Mar 2026 02:44:29 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.101.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4587 (0x11eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:44:29 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=A645CF343948D518CE4A59D25E78B45863E08BD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:06:50:10:ad:70:c4:c1:4a:79:32:8d:d9:71:
cd:b1:87:87:a2:3d:66:ec:f4:45:f6:ca:89:b4:da:
4e:9d:02:cd:f3:26:48:e6:46:8f:fd:1c:56:55:3e:
db:4b:a4:c7:e0:0c:b1:fa:28:84:d4:7e:8c:bc:ad:
47:33:d3:37:f4:87:36:9a:ab:83:51:b0:9d:33:3e:
a3:87:8b:80:d4:76:86:4e:29:b5:8c:b0:57:a3:69:
98:b3:9c:f9:86:6b:02:ee:e1:e5:0d:33:93:2e:f9:
08:d9:c2:c2:0c:78:df:d7:da:4a:3d:7e:de:b5:49:
a1:e5:29:61:1d:53:e1:8e:d9:13:a5:04:17:69:4a:
ed:46:b9:e2:43:60:ec:c7:0a:96:3b:f3:04:ea:b9:
f0:fd:fb:d1:3c:09:3c:13:0e:2b:72:4d:ca:22:8b:
95:47:dc:1d:26:e0:09:7a:4a:af:f6:e5:52:8c:7f:
7a:f4:b3:be:17:c7:e7:de:fe:12:da:69:ac:2f:8b:
44:00:d4:30:92:1d:22:b4:af:90:26:1a:2b:0f:26:
c3:58:d9:b0:11:a0:51:3e:c9:1f:f8:ca:26:52:48:
a7:96:da:32:bc:71:d3:58:f5:23:6f:8b:c1:6e:63:
8a:e7:e6:c3:7d:fb:ba:57:71:be:e9:fe:03:b2:15:
ce:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:45:CF:34:39:48:D5:18:CE:4A:59:D2:5E:78:B4:58:63:E0:8B:D9
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pkXPNDlI1RjOSlnSXni0WGPgi9k.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.101.128.0/17
Signature Algorithm: sha256WithRSAEncryption
35:5c:fe:95:e2:58:65:d3:91:3b:a9:14:d4:86:b5:24:cb:f7:
82:0f:8c:a2:09:bc:97:af:a1:02:cc:40:65:73:15:63:e8:aa:
22:80:52:19:1a:01:9e:27:a0:2f:bc:44:8d:4f:d0:bb:a1:3c:
4d:a3:b1:89:5c:85:01:1a:9b:67:70:a7:6d:08:bd:38:37:f1:
1a:a8:83:92:28:7a:ea:79:5b:30:6e:29:c8:0b:9e:85:b9:e3:
f6:1d:e3:36:1c:49:ef:11:a4:fe:5f:59:04:66:b9:19:f7:8e:
05:34:7d:2b:dc:c9:4c:14:6a:2a:a8:c4:ae:74:9e:28:13:ff:
cd:ac:9a:31:1e:79:35:ca:5d:ee:99:88:11:c0:7f:e4:ff:51:
d1:14:b9:ff:24:c8:40:38:02:97:5e:89:fc:74:18:3a:45:2e:
4b:7c:2c:c6:75:f2:24:34:1a:af:a5:f8:1b:57:4b:a4:fc:29:
4c:8b:91:57:0e:cf:2f:0d:91:17:e6:2d:42:8d:55:ec:40:48:
6b:28:73:50:97:b5:ff:2d:06:3c:94:22:d0:63:db:ce:fe:f4:
5e:06:a6:17:38:af:97:eb:ec:0a:c7:a6:31:ef:2a:92:c7:28:
aa:73:fb:33:cc:56:1d:3e:af:60:46:33:a7:30:1e:d2:cd:87:
e1:e0:44:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:22:35 2026 by rpki-client