
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/zz5FIggWqb7ALap7euVWF_lg7bs.roa
File: zz5FIggWqb7ALap7euVWF_lg7bs.roa (raw, json)
Hash identifier: aWMAaSsVH9sPztUCBCkQAOcu2sXU+LYS77m4UwU2Ls4=
Subject key identifier: CF:3E:45:22:08:16:A9:BE:C0:2D:AA:7B:7A:E5:56:17:F9:60:ED:BB
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 11F4
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zz5FIggWqb7ALap7euVWF_lg7bs.roa
Signing time: Sun 01 Mar 2026 02:44:34 +0000
ROA not before: Sun 01 Mar 2026 02:44:34 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 220.159.22.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:24:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4596 (0x11f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:44:34 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=CF3E45220816A9BEC02DAA7B7AE55617F960EDBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3c:17:dd:e8:93:cc:ed:97:1b:73:13:4f:63:
05:02:6b:cb:78:3e:ad:75:f5:98:9f:72:24:07:5b:
36:fe:a1:14:c7:8b:20:c9:a3:5e:cf:5a:f6:91:09:
1c:b2:90:ed:d5:94:6d:41:47:08:83:61:37:30:d1:
46:4d:60:39:8f:0b:a6:bc:8f:56:f6:39:03:40:7d:
13:6b:fc:aa:f2:fc:cc:db:2a:f0:ae:8e:bd:af:52:
0b:06:d6:07:47:fb:4f:2c:5c:37:d0:b0:53:6f:42:
0d:03:0e:fb:61:26:ea:98:ba:6a:24:13:b0:ef:4b:
68:d3:63:e0:ef:4e:d1:8f:0a:5c:6c:ca:96:f7:46:
e3:55:51:92:17:53:99:b4:6c:e8:a7:58:92:c4:32:
48:f9:c5:ea:b2:fe:1b:0d:7a:71:44:6a:86:a7:67:
cc:ff:9c:50:74:87:1e:10:e5:56:ee:9c:92:83:45:
e6:3e:5c:05:0c:92:e2:8f:3b:a7:38:94:18:4e:4b:
36:be:74:21:c3:a1:de:77:fc:7c:6e:1e:47:34:39:
84:e7:b7:23:bb:10:a5:d6:1e:d8:ab:80:b7:33:1f:
70:f7:7e:98:8f:56:22:71:00:3d:89:7d:1c:98:42:
59:ba:d1:e9:64:07:0a:5c:87:64:82:65:fe:d1:2e:
7e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3E:45:22:08:16:A9:BE:C0:2D:AA:7B:7A:E5:56:17:F9:60:ED:BB
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zz5FIggWqb7ALap7euVWF_lg7bs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.159.22.0/23
Signature Algorithm: sha256WithRSAEncryption
c7:3b:7d:34:7b:80:3e:ea:28:44:0b:4e:87:7a:72:fe:fa:ea:
6f:04:ab:ca:ed:1f:b5:99:5e:aa:8b:12:0f:9c:ce:e8:af:87:
bc:06:ce:18:4d:23:21:73:35:99:35:68:d9:2a:c3:82:86:25:
cd:b2:9c:99:5e:5c:4f:5d:59:96:e9:4b:65:54:cc:23:7a:60:
f7:ef:84:60:0b:d3:fe:b9:dc:fe:9b:3c:d4:f5:36:b6:2e:32:
9c:75:74:bb:93:48:9c:81:18:21:2f:5d:41:a6:91:63:a0:98:
71:9a:ee:3c:d0:5c:8a:97:f2:46:24:4c:21:33:b6:6a:17:d1:
0e:87:f7:b2:d3:58:1d:9a:78:86:54:4e:be:4e:29:e0:33:c3:
31:92:16:18:88:c8:d0:8f:13:c3:c5:28:14:49:65:f0:22:0e:
00:a3:f5:71:14:f7:c7:a4:39:33:b2:03:a5:3a:9b:3c:d3:35:
81:54:cc:64:bb:d0:99:2b:2f:57:a5:1b:87:b2:0e:20:1c:13:
85:82:85:d5:5e:d0:ba:b8:a6:7c:60:01:61:07:31:f3:84:40:
c8:16:1e:89:a1:73:0a:57:0b:0f:46:f2:f9:ef:30:1d:ea:d7:
fe:1e:e5:de:e1:62:23:d0:98:8b:d3:0a:d0:06:aa:1f:b0:4f:
6a:91:b8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:54:50 2026 by rpki-client