
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/DBZKCi4K2terrzLOdRdW5A1JGXE.roa
File: DBZKCi4K2terrzLOdRdW5A1JGXE.roa (raw, json)
Hash identifier: g8hVlo831O3aabOHTfxoeZX6XkbuXzIpF+HRZVuqZHE=
Subject key identifier: 0C:16:4A:0A:2E:0A:DA:D7:AB:AF:32:CE:75:17:56:E4:0D:49:19:71
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 104E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DBZKCi4K2terrzLOdRdW5A1JGXE.roa
Signing time: Sun 01 Feb 2026 01:32:40 +0000
ROA not before: Sun 01 Feb 2026 01:32:40 +0000
ROA not after: Fri 15 Jan 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.96.150.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Feb 2026 12:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4174 (0x104e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Feb 1 01:32:40 2026 GMT
Not After : Jan 15 01:30:02 2027 GMT
Subject: CN=0C164A0A2E0ADAD7ABAF32CE751756E40D491971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3d:13:c0:67:63:23:ad:84:02:b7:6f:cc:9a:
e5:3c:d9:52:36:42:56:7c:19:f3:5b:41:51:84:a1:
f8:af:d1:57:00:5b:75:d6:24:f3:91:02:1e:6b:b0:
a9:94:8a:d2:57:a0:6d:04:c9:94:f0:4a:c8:87:e1:
c9:c9:41:ac:dc:80:8d:0c:f1:d6:e2:65:20:98:26:
bf:95:89:17:c3:54:18:d6:53:ce:6d:70:c6:f8:e9:
b7:77:6d:97:01:31:1d:a4:63:45:bc:5c:19:a0:3b:
4b:fc:de:7a:1e:9b:ae:60:15:16:d2:cd:ac:35:46:
84:fa:1a:f7:ac:36:cf:0d:a1:57:f3:90:9f:32:b3:
93:f9:81:92:d8:0b:a3:9b:81:77:4f:f7:22:83:fe:
f1:cd:1c:84:6b:1e:3a:c7:66:de:f3:e6:8e:1d:52:
17:e9:01:20:6f:91:82:66:d2:e9:25:b2:14:9f:fe:
51:c0:99:f0:55:f1:a1:fd:ef:fd:df:cf:f3:e4:0e:
0d:5c:aa:05:46:e1:53:95:33:7f:18:72:6a:cf:24:
67:1e:e1:61:4d:6c:37:53:aa:9b:85:df:4d:5d:ce:
cd:c4:ba:06:87:04:9a:35:35:2d:e5:71:0e:44:84:
0d:a6:46:98:db:77:09:8d:7e:61:58:53:ff:b2:2b:
f1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:16:4A:0A:2E:0A:DA:D7:AB:AF:32:CE:75:17:56:E4:0D:49:19:71
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DBZKCi4K2terrzLOdRdW5A1JGXE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.96.150.0/23
Signature Algorithm: sha256WithRSAEncryption
db:79:92:4b:a2:dc:7a:94:e7:77:b4:14:e9:26:88:00:fa:f3:
bf:8f:40:5f:33:ca:79:0d:d8:e2:af:ee:9e:37:5d:b6:c2:6d:
7f:4f:d8:c3:75:5c:1f:aa:c8:3b:27:3f:a7:f5:8b:a4:f5:2a:
d2:eb:a0:86:a5:55:60:6e:5c:5c:4d:5c:db:46:9e:f1:c2:e1:
a8:40:7a:4a:45:35:56:36:3c:6d:b0:00:55:c5:9a:30:45:32:
41:eb:e9:a8:7b:2a:26:02:41:99:28:6d:8f:09:c3:18:ae:07:
08:30:b1:93:fe:89:a8:72:85:2f:28:d9:ba:2d:ab:93:48:11:
34:a1:71:37:ff:83:c4:f3:63:d2:bd:ea:e2:23:40:4a:b2:02:
19:11:01:8c:98:13:36:79:da:5f:e2:f7:c9:c5:2d:68:0a:3c:
ec:3c:df:f9:f7:1a:3a:ca:a5:e9:47:5b:2d:24:f3:bc:64:77:
1f:17:bc:6a:38:9d:f9:2f:57:15:01:af:51:c6:32:42:5d:5d:
3b:7c:8c:bf:e6:2d:51:79:6d:14:7d:cb:ae:bc:fb:9a:f9:4b:
23:38:bc:9a:e5:c1:29:cb:69:5d:0f:61:ab:a5:c1:de:2d:fc:
36:cf:43:b5:64:91:78:58:28:09:28:fc:40:e8:79:4f:df:cd:
3c:bc:65:2f
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEE4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAyMDEw
MTMyNDBaFw0yNzAxMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDBDMTY0QTBBMkUwQURB
RDdBQkFGMzJDRTc1MTc1NkU0MEQ0OTE5NzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDgPRPAZ2MjrYQCt2/MmuU82VI2QlZ8GfNbQVGEofiv0VcAW3XW
JPORAh5rsKmUitJXoG0EyZTwSsiH4cnJQazcgI0M8dbiZSCYJr+ViRfDVBjWU85t
cMb46bd3bZcBMR2kY0W8XBmgO0v83noem65gFRbSzaw1RoT6GvesNs8NoVfzkJ8y
s5P5gZLYC6ObgXdP9yKD/vHNHIRrHjrHZt7z5o4dUhfpASBvkYJm0uklshSf/lHA
mfBV8aH97/3fz/PkDg1cqgVG4VOVM38YcmrPJGce4WFNbDdTqpuF301dzs3EugaH
BJo1NS3lcQ5EhA2mRpjbdwmNfmFYU/+yK/HJAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUDBZKCi4K2terrzLOdRdW5A1JGXEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0RCWktDaTRLMnRlcnJ6TE9kUmRXNUExSkdYRS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExYJYwDQYJKoZIhvcNAQELBQADggEBANt5kkui3HqU53e0FOkmiAD687+P
QF8zynkN2OKv7p43XbbCbX9P2MN1XB+qyDsnP6f1i6T1KtLroIalVWBuXFxNXNtG
nvHC4ahAekpFNVY2PG2wAFXFmjBFMkHr6ah7KiYCQZkobY8JwxiuBwgwsZP+iahy
hS8o2botq5NIETShcTf/g8TzY9K96uIjQEqyAhkRAYyYEzZ52l/i98nFLWgKPOw8
3/n3GjrKpelHWy0k87xkdx8XvGo4nfkvVxUBr1HGMkJdXTt8jL/mLVF5bRR9y668
+5r5SyM4vJrlwSnLaV0PYaulwd4t/DbPQ7VkkXhYKAko/EDoeU/fzTy8ZS8=
-----END CERTIFICATE-----
Generated at Sat Feb 21 14:59:03 2026 by rpki-client