
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/tlpCiQbFKHKbotDqZ_aBzixihRw.roa
File: tlpCiQbFKHKbotDqZ_aBzixihRw.roa (raw, json)
Hash identifier: qexNrf4rONOAFvAPpKu88fbqoYf5ggMUK7+v7TEosTM=
Subject key identifier: B6:5A:42:89:06:C5:28:72:9B:A2:D0:EA:67:F6:81:CE:2C:62:85:1C
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 129B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tlpCiQbFKHKbotDqZ_aBzixihRw.roa
Signing time: Sun 01 Mar 2026 03:08:46 +0000
ROA not before: Sun 01 Mar 2026 03:08:46 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.80.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4763 (0x129b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 03:08:46 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=B65A428906C528729BA2D0EA67F681CE2C62851C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b1:25:b1:cb:f4:22:3a:e5:4b:87:16:90:50:
fd:b2:2c:77:65:5d:b7:ad:65:1d:24:4a:ca:1a:b9:
d4:98:3f:c7:1f:2d:ef:e4:b3:64:09:5c:8d:34:a8:
ab:5e:74:7b:b0:80:1b:62:34:c6:e8:92:5e:8b:ed:
c9:b1:0c:26:dd:16:a7:7a:90:85:0b:89:11:6f:6b:
63:b2:28:52:d3:a6:b3:46:2b:f0:c3:29:c9:96:c0:
45:5d:7f:05:97:61:b2:c2:95:23:ec:05:15:20:a2:
57:02:91:b3:c7:27:ac:76:74:30:e1:98:78:b2:90:
41:69:d3:16:21:25:b3:4f:d0:8d:ff:b8:60:2d:59:
ac:ff:40:4e:70:46:14:5d:57:e0:11:26:60:da:91:
de:28:b1:cb:b5:6b:57:f2:85:d0:b4:ba:96:56:9a:
d2:53:3e:e1:b0:57:27:31:19:a4:ab:03:11:14:17:
a8:a7:aa:51:7f:07:ff:0d:6f:5f:f4:12:69:01:ad:
a8:1d:a1:06:44:50:96:4a:4b:92:54:a9:f2:d9:35:
ab:51:c1:85:06:8c:f8:3b:11:d8:aa:d5:c3:5c:52:
87:41:e0:48:8d:87:bb:ad:89:71:97:4f:39:67:31:
81:0f:50:c4:42:aa:7d:97:d7:69:a1:d3:41:e2:30:
a9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:5A:42:89:06:C5:28:72:9B:A2:D0:EA:67:F6:81:CE:2C:62:85:1C
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tlpCiQbFKHKbotDqZ_aBzixihRw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.80.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:1e:69:cf:14:a8:33:66:da:93:19:a0:ab:bf:a6:b2:0d:28:
98:0a:a2:05:55:96:73:ee:74:f5:b0:ec:42:28:f7:c3:9a:47:
ba:ca:91:04:a9:74:fb:be:16:88:2f:01:6d:33:f8:2c:25:88:
13:39:ba:4b:94:f0:9e:35:eb:52:fb:15:e4:04:c8:78:4e:ea:
bc:a1:fc:bd:f9:98:05:7c:a5:c9:e5:da:d0:6b:f5:41:75:33:
4e:77:4e:67:37:8f:94:6e:aa:ce:7b:3b:a6:9f:cb:f4:f7:30:
97:9e:5f:67:72:63:b7:5a:0f:26:8c:88:bc:70:4a:6d:91:32:
f9:fe:98:61:c6:82:4d:ab:59:e4:75:f8:b5:79:1a:1f:a8:e3:
0e:d9:a2:38:d6:dc:20:df:c1:82:85:2e:45:27:e7:7a:55:cf:
7e:66:9c:9f:df:a4:fb:37:c6:10:33:8d:49:b3:33:99:04:61:
a0:86:aa:26:39:fd:fa:97:a6:f9:26:64:ce:5a:5b:c6:40:9b:
d9:95:af:a3:b4:ed:0f:ea:bf:27:98:a3:26:ca:32:f9:41:97:
29:36:81:ec:25:97:81:89:77:8b:5a:02:53:90:49:82:18:82:
95:04:57:49:ca:4f:26:94:66:23:ff:5d:ac:9b:f9:19:00:8b:
8e:4b:72:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:53:46 2026 by rpki-client