
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/s1iupkBKioxqi3YEZBfOfba3b_Y.roa
File: s1iupkBKioxqi3YEZBfOfba3b_Y.roa (raw, json)
Hash identifier: ENj4YCClHYqifNv0IiGrpy8QJGc0XrBQh89ozGY9Dn4=
Subject key identifier: B3:58:AE:A6:40:4A:8A:8C:6A:8B:76:04:64:17:CE:7D:B6:B7:6F:F6
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 10DF
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/s1iupkBKioxqi3YEZBfOfba3b_Y.roa
Signing time: Sun 01 Mar 2026 01:58:36 +0000
ROA not before: Sun 01 Mar 2026 01:58:36 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.104.48.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:24:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4319 (0x10df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 01:58:36 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=B358AEA6404A8A8C6A8B76046417CE7DB6B76FF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:68:ef:1f:21:e2:39:00:e7:6a:ce:ad:da:34:
d1:11:ec:32:77:d0:87:e8:dd:86:76:42:1b:5b:1f:
0d:54:9b:f0:37:03:3e:40:d2:bd:d8:66:5f:9e:8f:
48:00:3c:a5:a1:15:2e:52:80:4d:79:9c:93:d7:39:
b3:ff:84:4d:1a:e3:a2:94:83:1a:5a:6f:e3:2e:b1:
43:ea:18:42:48:dd:2c:18:ed:70:4d:1b:22:83:d2:
60:86:97:6c:55:14:9f:43:bc:42:fe:cd:03:dc:c8:
cc:6d:16:dc:df:8c:d6:f7:1f:cf:82:56:61:45:aa:
30:00:81:7a:26:bc:5e:63:12:4d:21:f3:cc:36:94:
65:29:d7:c8:ff:8b:07:8f:28:04:7f:8c:9c:f8:a8:
93:95:0e:59:0c:c2:e0:87:38:2b:b6:1f:77:6c:00:
5c:f4:2a:c4:c4:72:8e:33:ca:0b:6a:2a:40:f6:a1:
23:e7:bc:ab:11:af:9b:1b:8f:8a:6f:23:94:7c:38:
83:0b:02:ea:1d:df:ea:27:3f:6a:19:c1:e7:a5:51:
60:0b:b4:90:61:07:ce:98:f4:15:2f:eb:ca:6a:e5:
a4:99:e6:48:1b:ff:63:09:fb:4d:98:d0:f9:a0:cd:
19:df:b2:47:df:10:8d:24:7f:0b:c1:e1:3a:54:ca:
c0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:58:AE:A6:40:4A:8A:8C:6A:8B:76:04:64:17:CE:7D:B6:B7:6F:F6
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/s1iupkBKioxqi3YEZBfOfba3b_Y.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.104.48.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:ab:1d:40:c9:88:be:fb:92:87:31:4a:72:46:59:04:2d:3e:
b8:f0:34:eb:24:d2:40:e7:58:88:ce:39:5a:4e:cc:97:bb:d8:
ae:5b:88:2a:6c:7a:e8:b8:e8:89:1f:45:b0:85:67:f3:25:e2:
3c:9c:5b:bc:dd:10:73:5e:79:8a:40:12:28:be:40:53:27:e9:
40:eb:44:0c:79:f5:19:5c:b0:a1:05:6a:18:6f:dc:69:e6:bf:
66:1c:3b:91:ed:cb:a7:ac:60:23:09:06:4a:8c:57:e9:cc:31:
03:63:23:ad:47:35:5a:c2:f4:47:aa:1e:0d:38:9d:1b:d9:82:
6e:8e:10:2b:84:c7:3e:2f:88:59:81:b2:08:a4:30:ba:44:2d:
33:0e:ad:67:a4:90:4c:bb:43:27:13:5c:33:25:36:ed:e1:b2:
29:2b:ac:7d:bd:24:98:03:c2:70:29:5b:b5:8a:12:ca:f0:f9:
09:3d:61:c5:a4:6d:b8:e4:b8:bc:ad:33:40:df:3f:c8:81:c3:
40:c1:3a:14:60:9d:cf:3d:70:02:8c:bb:81:b3:16:d4:56:b4:
5d:3d:44:6d:fe:af:67:f3:db:31:c7:30:7d:f6:a8:84:ca:ef:
21:04:8d:7f:ae:3e:31:8c:27:f3:c1:40:0c:75:c5:2c:56:9d:
37:af:51:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:54:25 2026 by rpki-client