
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/sQ4CFGNndDz-g8AUO-T04I6TiNA.roa
File: sQ4CFGNndDz-g8AUO-T04I6TiNA.roa (raw, json)
Hash identifier: 7K9Zr4ZL6LPhfamarXk4ysPtDqEH2IG86ZjA4lBLuyc=
Subject key identifier: B1:0E:02:14:63:67:74:3C:FE:83:C0:14:3B:E4:F4:E0:8E:93:88:D0
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 11B7
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sQ4CFGNndDz-g8AUO-T04I6TiNA.roa
Signing time: Sun 01 Mar 2026 02:36:24 +0000
ROA not before: Sun 01 Mar 2026 02:36:24 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.102.160.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4535 (0x11b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:36:24 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=B10E02146367743CFE83C0143BE4F4E08E9388D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3b:26:d1:19:83:81:8d:c0:6e:93:17:d3:c3:
fc:5d:f4:7a:c3:19:76:63:f9:6b:e6:5e:98:fb:d7:
2b:91:73:77:f4:23:34:67:b0:c1:71:f8:fc:78:34:
81:f5:09:0e:c4:c0:34:b3:cc:9c:f0:f1:c4:fe:d3:
ce:41:a8:d8:80:86:18:d0:31:99:e4:07:56:a2:d7:
25:fd:6f:15:75:8f:22:d4:03:83:97:b1:ea:85:ef:
09:ee:4e:1a:c9:ee:6c:f0:b7:ad:b7:77:fd:35:5b:
f8:11:b1:82:cc:9d:e5:c2:81:bb:91:2e:f7:53:a6:
4d:e9:61:9b:bd:96:e3:da:27:f2:41:0f:a0:0c:9e:
35:43:de:8b:b7:1a:8f:5a:b8:d9:50:03:b8:68:d4:
cc:86:c5:36:14:5a:e5:99:bc:ca:ae:13:6c:98:e4:
58:6a:fe:7b:40:72:5c:62:dd:ef:c8:df:1b:6c:6b:
56:75:cc:a5:3c:ac:8d:43:1c:40:a4:c3:aa:fa:b4:
82:9b:9c:76:8d:5a:94:f9:05:3f:d9:02:77:ab:a3:
70:76:9c:fb:55:11:d2:4f:84:b4:92:35:33:7c:95:
17:1c:fc:e1:0c:a1:a7:fa:72:52:cf:2c:ab:83:a9:
d4:3d:2c:af:bf:97:98:51:5f:eb:65:dd:c3:61:a8:
85:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0E:02:14:63:67:74:3C:FE:83:C0:14:3B:E4:F4:E0:8E:93:88:D0
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sQ4CFGNndDz-g8AUO-T04I6TiNA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.102.160.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:0f:13:b3:de:63:c4:79:1f:de:f7:02:96:21:c1:9d:f9:4c:
a9:8d:88:12:c4:be:f7:79:ab:47:78:2f:ba:73:31:e3:df:2d:
6c:fb:88:b1:13:7a:72:84:23:40:e9:ba:bf:c9:06:9e:aa:37:
ab:e1:15:cb:ef:4d:50:ef:c3:f1:5c:3d:9d:d8:ba:57:2e:d9:
80:60:f1:f0:8d:ae:bd:37:c5:b7:3e:c9:81:52:c2:26:06:4f:
ac:5e:00:ba:eb:f5:0b:e0:f4:5d:2a:07:33:04:ce:bc:eb:d6:
d8:bc:b8:7a:91:7b:ac:5e:6c:d4:a6:a8:6c:4d:06:c1:00:ee:
1c:da:99:a9:5a:c5:fa:42:e1:ba:3b:ca:19:ce:4c:47:38:7b:
43:f7:e0:d1:0e:89:6d:bc:73:9e:68:d7:0b:58:74:ae:e4:d7:
38:55:be:0b:76:b2:0d:47:c6:8d:94:03:b3:a1:73:89:10:bc:
8b:dc:06:e8:a3:60:67:af:1a:6c:3a:a9:e2:b7:48:4f:4c:58:
21:ab:83:62:d5:d9:6b:f0:e5:bd:e1:1e:c3:83:c0:36:bb:71:
8e:d6:ec:b1:55:98:66:a1:b1:b1:74:91:f1:b6:c8:bc:1a:98:
66:ae:aa:a4:7a:4e:2f:d9:9a:93:42:c0:ce:2a:56:96:6f:ae:
25:e8:6d:3a
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEbcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MjM2MjRaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEIxMEUwMjE0NjM2Nzc0
M0NGRTgzQzAxNDNCRTRGNEUwOEU5Mzg4RDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDkOybRGYOBjcBukxfTw/xd9HrDGXZj+WvmXpj71yuRc3f0IzRn
sMFx+Px4NIH1CQ7EwDSzzJzw8cT+085BqNiAhhjQMZnkB1ai1yX9bxV1jyLUA4OX
seqF7wnuThrJ7mzwt623d/01W/gRsYLMneXCgbuRLvdTpk3pYZu9luPaJ/JBD6AM
njVD3ou3Go9auNlQA7ho1MyGxTYUWuWZvMquE2yY5Fhq/ntAclxi3e/I3xtsa1Z1
zKU8rI1DHECkw6r6tIKbnHaNWpT5BT/ZAnero3B2nPtVEdJPhLSSNTN8lRcc/OEM
oaf6clLPLKuDqdQ9LK+/l5hRX+tl3cNhqIXnAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUsQ4CFGNndDz+g8AUO+T04I6TiNAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3NRNENGR05uZER6LWc4QVVPLVQwNEk2VGlOQS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExZqAwDQYJKoZIhvcNAQELBQADggEBALQPE7PeY8R5H973ApYhwZ35TKmN
iBLEvvd5q0d4L7pzMePfLWz7iLETenKEI0Dpur/JBp6qN6vhFcvvTVDvw/FcPZ3Y
ulcu2YBg8fCNrr03xbc+yYFSwiYGT6xeALrr9Qvg9F0qBzMEzrzr1ti8uHqRe6xe
bNSmqGxNBsEA7hzamalaxfpC4bo7yhnOTEc4e0P34NEOiW28c55o1wtYdK7k1zhV
vgt2sg1Hxo2UA7Ohc4kQvIvcBuijYGevGmw6qeK3SE9MWCGrg2LV2Wvw5b3hHsOD
wDa7cY7W7LFVmGahsbF0kfG2yLwamGauqqR6Ti/ZmpNCwM4qVpZvriXobTo=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:10 2026 by rpki-client