
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/qlg2PaDvMTjGGDFOxQ6sOkXyNzs.roa
File: qlg2PaDvMTjGGDFOxQ6sOkXyNzs.roa (raw, json)
Hash identifier: 7rLpnzFDbLGEUM1lnJb5e9qUyANOY8Gp3AW2jpmbGmI=
Subject key identifier: AA:58:36:3D:A0:EF:31:38:C6:18:31:4E:C5:0E:AC:3A:45:F2:37:3B
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 130C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qlg2PaDvMTjGGDFOxQ6sOkXyNzs.roa
Signing time: Sun 01 Mar 2026 03:32:26 +0000
ROA not before: Sun 01 Mar 2026 03:32:26 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.104.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4876 (0x130c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 03:32:26 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=AA58363DA0EF3138C618314EC50EAC3A45F2373B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:64:b3:50:75:a5:86:07:65:5b:00:12:ef:aa:
ed:90:74:f4:ec:c2:ef:37:03:50:5a:78:54:db:8c:
0c:86:4b:37:d5:66:73:e3:e7:ab:6f:a9:fe:b5:b1:
a3:20:61:b0:da:aa:19:f2:f4:6b:6c:1e:29:37:86:
59:11:6c:15:6b:a8:76:81:37:c1:c2:a0:3b:b0:38:
ec:2c:5d:19:0d:c9:fd:38:d0:33:a7:2b:ea:51:58:
d2:8a:b6:99:a8:51:f1:f1:0d:9a:d8:a3:da:34:79:
7b:89:a1:0b:ce:9a:13:02:b3:63:04:81:a1:83:7f:
60:2f:fe:93:ec:62:da:ee:83:af:b0:a4:7d:fa:74:
a1:9d:dc:fc:46:78:86:ac:d1:15:27:8e:41:ec:37:
c7:cd:9f:d5:d2:4c:de:03:64:cd:52:f5:a5:96:6b:
24:29:1b:eb:4a:a4:c7:94:c0:e6:89:91:9b:5c:1b:
57:a3:1f:e9:bb:74:ad:e9:4e:83:8d:fc:8b:3b:67:
ca:0c:2b:f4:ec:49:13:11:a5:7d:62:a9:0b:96:55:
77:60:9f:e9:4f:1f:f7:e1:36:08:66:85:f7:24:d5:
b3:5f:47:3e:a6:5f:f7:70:f1:a7:ca:2f:95:2e:94:
fd:59:b7:4a:f2:cc:f1:9a:69:d0:0e:42:e1:c1:c8:
2a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:58:36:3D:A0:EF:31:38:C6:18:31:4E:C5:0E:AC:3A:45:F2:37:3B
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qlg2PaDvMTjGGDFOxQ6sOkXyNzs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.104.4.0/22
Signature Algorithm: sha256WithRSAEncryption
57:f0:5b:6a:2a:a4:3a:c0:72:ad:01:14:4e:89:61:c1:12:39:
18:b5:ff:82:7e:37:b4:d1:a3:5d:e6:54:d7:af:9a:c0:08:b7:
ee:d1:66:59:c0:9a:3c:1e:51:92:a4:3f:25:ed:c0:26:88:6f:
e5:a3:44:47:1e:bd:9d:87:b8:01:72:f8:a5:88:7c:ff:34:f3:
ac:6e:5d:35:54:39:54:9e:06:d9:ad:0f:ec:8f:83:a4:0f:29:
2b:b0:2d:75:bb:e2:ae:93:c3:e0:31:1b:03:5e:a6:e5:16:5a:
0c:79:5b:a6:3f:7c:7c:b9:4f:c9:92:88:b2:31:f7:9d:8d:81:
f0:2d:a5:91:42:77:d9:39:d8:02:6b:db:9d:7a:66:b1:0e:02:
45:9c:2d:0d:cf:66:43:bd:58:2d:52:31:30:45:3c:90:aa:2d:
39:aa:b1:ac:23:46:a5:80:e1:40:84:f6:c6:d6:19:8d:cf:96:
06:e2:80:a7:0e:d8:3e:f1:28:2f:f7:b8:34:6b:97:12:93:b5:
22:19:3a:b7:5c:4f:a0:57:91:bf:b5:e4:60:cc:cd:d5:de:7c:
c2:f6:03:fe:6f:38:a5:a9:02:7d:61:e5:b6:20:7d:c1:ac:74:
58:26:ad:1e:b8:09:54:d0:67:a8:89:37:1f:4d:6a:80:6a:61:
9a:e1:cb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:53:24 2026 by rpki-client