
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/sFZn7acU6_95NiamEh9EQHRLeGo.roa
File: sFZn7acU6_95NiamEh9EQHRLeGo.roa (raw, json)
Hash identifier: eJdcGNrgo5gJ9Xig7WmGR4PZHiKV+vNuMtQAv8AMWSM=
Subject key identifier: B0:56:67:ED:A7:14:EB:FF:79:36:26:A6:12:1F:44:40:74:4B:78:6A
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1192
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sFZn7acU6_95NiamEh9EQHRLeGo.roa
Signing time: Sun 01 Mar 2026 02:31:11 +0000
ROA not before: Sun 01 Mar 2026 02:31:11 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.128.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4498 (0x1192)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:31:11 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=B05667EDA714EBFF793626A6121F4440744B786A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ba:be:68:1e:b4:ff:ae:d1:4e:54:49:d6:fc:
f5:ec:c3:44:90:2f:88:7b:57:3a:bd:45:58:54:18:
98:08:b5:d3:ab:8f:78:1a:db:50:2e:ba:b2:1e:c4:
a2:d9:ff:fe:1f:4f:50:a8:91:db:ee:26:63:f8:74:
fa:ab:05:13:0a:a2:f6:29:df:d6:7f:7a:b0:0e:84:
0b:90:d5:b6:2c:19:89:eb:f4:88:93:34:31:73:ca:
57:3a:a4:3f:e1:be:2c:70:6c:62:d7:a4:45:40:1c:
62:74:0b:a6:2b:32:58:b0:38:4e:bb:c3:b1:af:52:
66:8d:dd:f8:63:5d:a4:ef:a0:53:a2:cf:9e:5a:eb:
86:8b:54:ba:17:a8:cb:40:ab:9c:9e:11:d2:4c:b4:
f2:a5:d3:da:b0:e7:11:84:ae:cb:d2:d7:7b:d4:dc:
5d:69:01:c8:30:55:d7:e2:ab:41:5f:09:5f:07:e5:
44:57:e0:5e:46:0a:07:43:18:c0:13:31:36:c6:c3:
b1:30:4b:8a:27:c5:82:ab:1f:69:c2:e2:6b:8b:26:
8b:52:02:72:fe:30:95:f6:27:d6:22:9a:c1:1f:c4:
cc:fb:41:73:a8:9c:85:05:10:59:d8:aa:d2:c7:ee:
f4:5d:ef:e7:2d:e8:1c:f9:a6:7e:43:43:59:6b:cc:
90:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:56:67:ED:A7:14:EB:FF:79:36:26:A6:12:1F:44:40:74:4B:78:6A
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sFZn7acU6_95NiamEh9EQHRLeGo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.128.0/23
Signature Algorithm: sha256WithRSAEncryption
67:fb:e4:e2:8e:f9:8e:b2:e6:96:c5:13:d4:62:1f:06:a2:95:
88:d3:13:09:76:20:8a:1f:7e:c6:be:60:af:af:d1:3c:cb:fd:
82:65:ec:c6:52:b2:18:32:11:35:a5:b1:cb:4f:ea:bf:f5:07:
11:5f:67:9d:fe:65:0b:1b:af:d0:e6:f7:c7:34:d6:55:b1:5e:
be:65:55:a3:13:52:07:fd:4c:28:db:c8:45:88:3a:b1:f2:cc:
4f:80:29:8e:70:fc:11:ce:d4:3f:79:43:26:08:d1:4a:2a:29:
e2:a8:20:f4:24:c0:fc:c1:82:d9:00:0c:13:9c:37:77:16:d8:
da:63:26:c1:97:54:03:08:87:5e:bb:e4:3f:ee:a6:9b:3f:8a:
40:ff:1b:3e:fd:76:f8:21:01:23:a5:20:78:2e:2f:89:cf:94:
70:f4:a2:d7:e1:60:ef:80:bd:f6:b4:c4:56:c6:8c:07:23:1a:
93:22:b8:f4:e7:ef:9b:60:f7:32:c2:1b:e4:ae:2e:8b:5b:e3:
00:ce:21:9f:2c:7e:b8:16:74:82:bf:c8:19:eb:b8:57:ef:59:
5c:06:06:60:8b:a6:ab:fc:2b:b8:ff:b5:78:24:6f:1d:da:37:
cf:6d:5b:29:06:0b:e6:59:e0:22:d6:f4:e6:82:af:f6:d1:7c:
05:81:b7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:09:13 2026 by rpki-client