
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/qhpXj2R809zjqOTLGK8YdrwcYDM.roa
File: qhpXj2R809zjqOTLGK8YdrwcYDM.roa (raw, json)
Hash identifier: /7efxstpPcizqS+e/omKPsMQ/sMgUPThEevZxrFe374=
Subject key identifier: AA:1A:57:8F:64:7C:D3:DC:E3:A8:E4:CB:18:AF:18:76:BC:1C:60:33
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 117F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qhpXj2R809zjqOTLGK8YdrwcYDM.roa
Signing time: Sun 01 Mar 2026 02:26:58 +0000
ROA not before: Sun 01 Mar 2026 02:26:58 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.148.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4479 (0x117f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:26:58 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=AA1A578F647CD3DCE3A8E4CB18AF1876BC1C6033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:80:71:22:28:41:c2:7a:9c:7b:d1:e7:e0:2c:
b8:7b:0e:cd:81:4b:0a:b3:ea:35:e0:5d:a8:25:dc:
19:67:8f:a9:b2:f6:92:88:af:46:45:e7:fd:cd:bd:
70:10:ee:ba:2d:0e:26:5e:de:bf:73:5a:40:e7:fc:
83:e0:c7:70:21:64:98:4f:2d:41:54:c2:65:ac:cb:
56:4a:9c:ad:94:51:fb:b3:f5:71:6e:39:bd:a6:e3:
8e:ad:df:3d:ec:3e:47:f9:1e:b1:4a:71:e0:38:85:
b7:86:fa:27:8f:00:68:d4:02:52:d8:a6:50:e8:b3:
a3:e2:10:4e:81:8a:13:e4:da:be:27:9d:b2:b4:55:
26:d8:74:e6:3f:de:00:e2:cf:c0:52:c5:e2:b8:a0:
c5:0a:b2:97:40:ac:ec:ae:3c:b2:f3:b4:58:49:b4:
20:a6:c9:8e:16:04:f4:41:b4:c4:eb:16:ab:a9:be:
85:d9:31:58:12:96:a6:e0:ef:28:7d:c1:9d:06:7c:
fb:b8:ef:32:41:a8:2d:e7:00:a3:24:6a:c4:aa:de:
09:48:a5:13:ca:e0:0b:89:54:8c:f1:70:e1:2a:25:
e4:7e:1c:ea:76:7b:e5:8f:74:7b:c7:1b:6b:67:52:
b1:9e:c8:08:b0:1f:6d:28:a1:c5:08:41:07:da:d3:
7b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1A:57:8F:64:7C:D3:DC:E3:A8:E4:CB:18:AF:18:76:BC:1C:60:33
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qhpXj2R809zjqOTLGK8YdrwcYDM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.148.0/22
Signature Algorithm: sha256WithRSAEncryption
10:e2:f7:db:03:55:a1:f8:3d:4b:13:23:10:a5:6d:c2:1a:27:
73:82:0e:d4:5c:ae:03:f1:21:86:99:e0:08:aa:8f:ee:67:74:
e0:16:84:15:b4:43:62:d2:06:4a:e8:d4:25:a4:db:00:70:a7:
37:fb:08:1d:ff:dc:ba:f9:2a:8d:9b:41:fe:83:bc:22:95:f7:
18:66:3a:59:d2:a3:33:c6:05:45:88:e2:fe:00:23:42:b3:3f:
5d:22:b3:7b:fe:07:04:52:d7:ca:87:51:8a:2d:51:ea:94:34:
04:e7:9d:5f:44:64:f9:33:01:3f:4c:58:d3:09:44:20:2e:cf:
4a:fe:e7:1c:d0:bd:ea:d0:e2:ad:11:e8:b4:72:d9:dd:af:7c:
0d:6c:15:6e:57:84:48:02:20:ef:15:31:ab:9a:d3:48:48:b9:
9e:8a:32:48:bc:2b:ec:bc:35:f6:5d:2c:ee:93:8b:7b:1f:d1:
6f:9c:d0:6a:71:67:90:82:f2:19:3f:f4:53:79:10:e6:79:4b:
c0:f9:1d:b6:ec:4d:c6:a9:5f:54:49:0e:ea:86:24:db:db:66:
43:04:dc:4f:15:3e:4e:ef:cb:a7:f8:6b:12:9b:7c:92:d6:8d:
6d:0f:c0:80:de:be:b1:22:ea:a3:fc:50:7f:11:40:9c:ed:ad:
74:14:57:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:06:43 2026 by rpki-client