
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/0_CwE11LmO9bQv7PA7vG7xYMdG8.roa
File: 0_CwE11LmO9bQv7PA7vG7xYMdG8.roa (raw, json)
Hash identifier: S0f6/XFVoVGScSROgVnQlhbsxbSiUREhDQr/TA5WgxU=
Subject key identifier: D3:F0:B0:13:5D:4B:98:EF:5B:42:FE:CF:03:BB:C6:EF:16:0C:74:6F
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 135B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0_CwE11LmO9bQv7PA7vG7xYMdG8.roa
Signing time: Wed 25 Mar 2026 09:10:48 +0000
ROA not before: Wed 25 Mar 2026 09:10:48 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.36.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 12:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4955 (0x135b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 25 09:10:48 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=D3F0B0135D4B98EF5B42FECF03BBC6EF160C746F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ab:42:58:e0:74:1b:aa:bc:b6:a6:a6:ec:e5:
2f:f8:b2:61:92:f8:39:7f:31:c2:35:d1:74:fa:9b:
7c:77:f9:84:7e:3b:82:63:f8:a8:36:f8:40:8f:68:
28:11:f7:f5:65:40:c1:d2:b9:b2:38:b3:40:ce:ac:
e8:11:49:b5:e7:84:df:61:5d:0c:14:e6:eb:dc:51:
04:36:e3:61:74:52:00:dd:b6:d8:8e:12:e8:a8:47:
b4:88:a4:ac:f3:3d:45:90:5c:5c:87:82:50:f6:dc:
df:6b:16:3d:7d:49:87:42:d2:7f:98:5d:b7:b5:f7:
d5:81:ca:bd:de:2b:45:e7:59:f9:e8:bd:64:e6:04:
2c:fc:d8:f1:35:a5:ad:c7:f8:c2:8b:22:8f:47:7d:
0d:13:12:86:88:c6:78:ca:c7:74:b2:ea:93:27:f7:
f8:74:c5:1f:1a:6c:b6:87:04:1f:60:cf:03:61:13:
45:1d:cb:8d:6d:eb:04:dc:5d:be:f1:46:1a:52:b1:
be:bf:21:90:42:f5:67:cc:04:a5:7a:73:ff:5f:1d:
a1:b5:67:af:d9:46:b9:dc:9f:0c:cb:61:ac:4d:df:
72:1b:76:59:55:1b:bc:9e:c1:cc:65:d4:04:e4:d0:
f4:c1:2d:1a:8c:05:37:cf:43:b3:20:75:70:e7:47:
95:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F0:B0:13:5D:4B:98:EF:5B:42:FE:CF:03:BB:C6:EF:16:0C:74:6F
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0_CwE11LmO9bQv7PA7vG7xYMdG8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.36.0/23
Signature Algorithm: sha256WithRSAEncryption
87:60:05:b3:4c:3e:5d:e2:90:e1:74:f8:fd:d8:b2:eb:5f:96:
b7:ee:79:5b:01:44:c0:37:a7:9c:00:f5:da:2f:7b:3e:95:fa:
95:9e:49:1b:95:4f:d2:1d:43:7b:a5:d6:df:28:ec:07:ba:fa:
8f:df:88:f8:47:3a:06:d3:a4:76:ce:bb:35:ba:3b:bb:f7:4e:
40:2d:d8:89:3b:a3:f4:21:e6:f6:74:6f:fc:e8:a7:f2:df:8a:
cd:63:41:88:3e:1b:0d:f1:1b:7f:a7:c9:bd:7a:31:0f:66:81:
dc:e7:a4:f9:2c:ac:77:43:ce:2c:d4:a7:e9:aa:6f:94:46:2f:
b0:fe:77:d4:4a:77:2e:0a:4e:84:99:14:88:b8:f8:6d:85:96:
b1:78:7a:a7:2d:f4:e7:3f:6b:f8:e6:2c:2b:3d:ab:38:02:87:
2b:13:93:50:7c:78:4f:a9:9f:5d:9c:99:0f:2d:f3:7d:19:6e:
ef:c5:65:48:99:10:dd:15:f9:97:b8:e7:90:97:07:08:f6:dc:
3b:07:61:60:45:59:00:42:c2:8e:43:02:3d:40:b9:f9:34:ca:
7f:bf:00:ae:ec:0d:fd:29:cc:39:12:43:09:a0:d4:2d:22:09:
a8:bd:a0:c8:a0:7c:0e:ce:3a:6a:df:60:b0:68:62:ab:e0:34:
0b:b4:a3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:11:50 2026 by rpki-client