
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/xOqZbD_wVLWHJ-XZA-cZrYbwCts.roa
File: xOqZbD_wVLWHJ-XZA-cZrYbwCts.roa (raw, json)
Hash identifier: Vk2Hmd7sTdUqbR6eX7AmLn/3KzseLyakPy8pTVpv4nQ=
Subject key identifier: C4:EA:99:6C:3F:F0:54:B5:87:27:E5:D9:03:E7:19:AD:86:F0:0A:DB
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 11FC
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xOqZbD_wVLWHJ-XZA-cZrYbwCts.roa
Signing time: Sun 01 Mar 2026 02:44:38 +0000
ROA not before: Sun 01 Mar 2026 02:44:38 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.104.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4604 (0x11fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:44:38 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=C4EA996C3FF054B58727E5D903E719AD86F00ADB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:50:ae:44:c6:f0:bd:80:74:0a:39:82:2a:8a:
d2:6b:e3:81:7b:81:cd:8e:fb:2e:b7:f7:b1:05:ab:
bf:8a:24:a8:79:60:88:25:d7:e7:08:da:76:16:22:
68:45:99:0d:d7:ec:b8:b9:b0:9d:43:d2:75:52:34:
53:84:2d:9d:ce:1d:38:85:bd:7b:2e:2d:f8:0b:a7:
18:c3:5a:ae:64:77:3b:f6:78:70:9a:5f:18:7f:af:
5f:75:be:fd:bf:97:9e:1b:f3:0b:a0:8d:1a:66:20:
04:9b:c2:9f:55:40:46:a7:fc:b3:67:10:3e:2c:eb:
6c:1e:ef:9a:f8:28:7c:cb:e0:b5:5f:8a:e8:b4:60:
42:7b:9d:0e:bf:73:dc:70:ad:52:b1:8f:87:b0:8c:
2d:a8:d2:9a:2e:02:26:56:4b:bd:df:84:1a:ac:87:
38:10:ce:e3:51:08:cb:e3:da:ef:0a:28:72:2d:f4:
6e:ac:ff:0d:21:dc:25:73:5c:79:cb:df:4d:31:5f:
54:4a:1d:8d:eb:cb:ed:74:9d:74:b7:25:d3:36:fd:
a7:91:71:dd:b2:ea:7c:7e:8e:90:64:e5:cf:18:2d:
28:6d:ec:18:7e:69:5e:c5:40:df:d9:38:77:83:36:
8f:d2:5f:41:e0:e7:68:b1:e5:cd:8e:a3:d3:40:c3:
99:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:EA:99:6C:3F:F0:54:B5:87:27:E5:D9:03:E7:19:AD:86:F0:0A:DB
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xOqZbD_wVLWHJ-XZA-cZrYbwCts.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.104.47.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:4e:70:1c:d7:3d:85:38:13:c9:31:62:34:81:1f:8d:27:f2:
53:c2:69:5d:70:0e:2d:d3:39:c3:0a:f1:c5:af:a2:90:9c:5d:
3a:4c:40:4c:7f:08:a8:ab:b3:43:3a:1e:13:c4:a8:fa:70:26:
d3:13:d3:05:b7:8b:9f:42:cc:41:92:d0:52:25:be:f9:b4:3f:
b4:de:ba:49:41:78:e0:5d:60:96:f2:ba:0c:94:3d:56:09:40:
25:7c:c1:5c:e5:cb:39:8d:4f:de:31:a1:82:8d:de:c3:80:b5:
90:db:c5:1e:09:ef:12:9a:a9:16:e6:cf:ef:3a:77:c7:48:53:
17:f7:9a:27:96:bc:21:2e:32:4d:f2:c6:3a:9f:1b:a3:b9:f9:
81:08:c4:3f:b4:54:be:d1:2a:0d:5d:2b:7d:08:6f:30:af:7e:
6b:f4:0a:91:34:ea:59:f1:f0:fe:16:a6:c2:d0:49:72:23:2e:
12:aa:38:88:67:66:3b:75:a0:3f:7e:6f:e4:4a:13:fd:23:af:
eb:da:18:70:72:87:92:98:69:66:fc:23:87:be:20:69:72:ab:
1b:c2:c0:b2:39:87:15:15:41:59:ea:53:8e:ef:46:b7:b4:8a:
be:99:55:b7:e7:e8:3f:be:1a:fb:b0:c2:b2:f2:b0:83:d7:46:
d3:68:4f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:06:58 2026 by rpki-client