
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/GbCu5SCf5QkB90YBRx0os7Fa36s.roa
File: GbCu5SCf5QkB90YBRx0os7Fa36s.roa (raw, json)
Hash identifier: HBHTT5VeGLRg+FwzBuLLjv/Izk9C5IZfgw8+46cfn/8=
Subject key identifier: 19:B0:AE:E5:20:9F:E5:09:01:F7:46:01:47:1D:28:B3:B1:5A:DF:AB
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 104F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GbCu5SCf5QkB90YBRx0os7Fa36s.roa
Signing time: Sun 01 Feb 2026 01:32:40 +0000
ROA not before: Sun 01 Feb 2026 01:32:40 +0000
ROA not after: Fri 15 Jan 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.96.152.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Feb 2026 12:38:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4175 (0x104f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Feb 1 01:32:40 2026 GMT
Not After : Jan 15 01:30:02 2027 GMT
Subject: CN=19B0AEE5209FE50901F74601471D28B3B15ADFAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:98:00:f7:8b:36:79:e8:40:a5:2e:37:b2:a6:
18:75:2c:fd:95:d6:0b:6a:07:cb:e4:58:ab:fc:a1:
ba:eb:8f:06:50:ec:6a:67:d6:49:80:b1:53:71:b5:
05:86:18:e2:2b:94:e7:54:cb:e8:26:f7:79:14:0c:
2a:8f:c9:3f:b9:f5:bd:49:a6:46:31:04:0a:43:5c:
6f:f3:f3:8d:30:34:65:f7:83:07:42:dd:82:99:54:
3a:9c:89:f6:ab:41:1c:7e:22:2d:23:29:9d:fb:80:
91:07:83:a1:ac:ec:70:8d:23:43:4b:29:35:27:6a:
71:2e:9f:86:8b:78:c4:14:b5:d6:51:c0:eb:0e:b0:
93:11:8f:49:da:2c:00:a4:09:21:a5:97:28:66:c1:
da:ef:06:96:c7:da:17:ee:d7:5f:4b:7c:27:63:ce:
02:55:66:30:29:aa:b7:32:a1:5d:c7:97:43:8f:1f:
d6:13:d4:6f:3b:b7:35:a0:c0:a6:dc:ec:3c:5f:d6:
74:51:e5:6a:ef:98:ed:91:f2:a6:72:31:94:bf:41:
11:e2:68:51:4b:bd:94:98:eb:31:6c:4b:d3:a2:c7:
c0:a5:4e:3e:10:bc:4f:f7:c3:65:b7:b8:b3:09:ad:
ec:42:f3:f2:76:71:d8:8a:33:5a:a7:7f:43:97:78:
1d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B0:AE:E5:20:9F:E5:09:01:F7:46:01:47:1D:28:B3:B1:5A:DF:AB
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GbCu5SCf5QkB90YBRx0os7Fa36s.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.96.152.0/23
Signature Algorithm: sha256WithRSAEncryption
d3:e1:00:b3:0a:93:5f:3e:ae:27:c8:cc:be:27:2f:81:fe:c4:
0a:38:21:8d:b7:1f:d8:b7:ab:c0:59:b6:27:4c:97:8c:ee:20:
30:97:50:be:a5:67:1c:d0:93:5f:13:55:fa:44:6c:a7:4b:3f:
a4:25:67:23:47:58:5e:53:99:df:df:ec:60:70:56:5b:41:d6:
11:bc:20:86:37:1f:41:7f:6d:7a:9e:00:b9:51:1c:6c:e5:30:
85:61:26:6c:ec:3e:c3:f7:c1:6f:d9:d2:ef:13:e3:44:19:64:
66:ca:72:82:c4:4c:c4:58:ed:66:d0:6b:75:6e:15:27:d9:0c:
8a:2d:b3:03:41:2e:b9:62:4d:7e:58:71:b0:17:d0:06:90:4a:
8d:e0:dd:f8:58:0e:5c:b4:a7:60:3e:b3:67:09:80:f8:03:22:
5c:44:18:1b:49:d8:0c:8a:5f:1a:cc:09:aa:31:80:38:3b:ca:
17:f0:9c:8b:15:ad:04:df:40:ad:5e:0a:b7:6a:c7:ed:34:5e:
bf:85:2f:cc:73:1a:e6:8c:dc:42:9c:c9:fe:f6:95:84:a1:35:
53:c4:0c:94:26:ad:ac:f4:f0:f8:76:cb:6b:91:70:5e:77:7b:
4d:96:fb:c1:90:5a:1c:84:20:b7:91:f8:51:44:e6:d9:15:20:
98:20:35:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 14:59:04 2026 by rpki-client