
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/uN2nmHvMU7ACw2UlZYK6hb64rGI.roa
File: uN2nmHvMU7ACw2UlZYK6hb64rGI.roa (raw, json)
Hash identifier: OC0GOLVNEBUVbll3Xav+N1dTIR/iaa/vhWCgQCjxHnI=
Subject key identifier: B8:DD:A7:98:7B:CC:53:B0:02:C3:65:25:65:82:BA:85:BE:B8:AC:62
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1062
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uN2nmHvMU7ACw2UlZYK6hb64rGI.roa
Signing time: Wed 18 Feb 2026 06:41:43 +0000
ROA not before: Wed 18 Feb 2026 06:41:43 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.109.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Feb 2026 12:38:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4194 (0x1062)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Feb 18 06:41:43 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=B8DDA7987BCC53B002C365256582BA85BEB8AC62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bc:8e:88:43:53:01:3f:16:04:a9:1f:19:80:
3f:7e:7a:30:17:f6:03:22:19:47:d2:89:d6:7e:67:
e0:3e:f6:59:57:3f:25:c8:82:f2:e3:d2:7e:8f:2a:
8c:eb:84:10:b2:8e:96:38:41:45:cd:e9:77:36:68:
db:fe:8a:ce:41:5d:db:c1:98:6d:48:22:e3:ea:2b:
f2:43:9c:63:66:37:11:e8:ab:b9:49:cd:11:c1:a2:
64:0e:2f:7f:2f:45:fa:e5:44:6c:fa:fa:ab:b1:dc:
9a:b1:72:77:47:3d:f6:4b:df:88:18:e7:58:06:fe:
8d:12:8f:75:13:b8:f0:47:d0:e4:d9:60:34:31:b3:
45:bf:cc:9d:6c:81:9b:dd:9a:d9:32:79:b3:79:7e:
48:0b:61:39:91:8f:18:56:1b:15:03:9a:ec:d0:ee:
4f:61:14:36:56:4b:cc:95:7f:61:15:89:c7:73:af:
3c:c7:23:e4:6f:38:25:ca:97:e0:fc:e7:f3:05:18:
5a:d5:6a:6b:8d:d3:98:27:a5:8c:bd:d5:30:dd:35:
d7:1e:f1:7b:ec:2b:52:1a:7e:7b:75:a6:ef:f8:f2:
fc:72:a7:19:16:2a:5c:c8:5b:c5:75:6a:e9:5a:5c:
07:91:d0:e4:be:10:90:c1:e2:43:23:80:0f:58:13:
89:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DD:A7:98:7B:CC:53:B0:02:C3:65:25:65:82:BA:85:BE:B8:AC:62
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uN2nmHvMU7ACw2UlZYK6hb64rGI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.109.240.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:38:7d:bb:21:ef:e1:fb:28:97:e5:7e:0d:54:ee:c9:55:a4:
4f:15:aa:a0:7f:cc:52:58:ba:53:8a:82:b5:7c:f2:93:40:51:
c3:cb:36:9c:c7:13:38:f1:50:44:4f:54:74:f8:20:5a:a4:0c:
64:bf:59:e4:8b:20:c6:69:86:46:1b:a3:1e:f7:4e:9a:58:ca:
86:56:02:58:b3:de:81:1d:5c:fc:63:4b:25:82:40:be:1d:16:
fe:7b:e4:72:c7:22:33:e2:c3:69:9a:ad:10:7c:67:d5:8c:5d:
ac:f0:7b:3f:43:01:3d:55:18:30:36:32:22:15:6f:3b:d0:ed:
53:6e:c6:a1:c2:3f:a5:01:a8:3a:86:80:6a:f8:a3:bd:ea:dd:
c0:64:47:4e:cb:f6:8e:d2:a4:ab:d2:f7:7e:8e:77:d1:d6:eb:
07:b8:48:40:f8:e0:6f:48:4c:a0:87:39:8a:8a:97:ba:c5:79:
f0:96:9f:c9:7b:0c:3d:74:5c:0d:4e:70:3e:c2:30:fd:5b:52:
6e:51:81:73:62:43:93:d1:3d:ba:1d:f4:38:b7:83:f0:ed:d5:
5c:e8:15:63:3f:58:6b:12:fa:e8:40:9c:c8:49:61:1c:9d:b2:
a7:a6:35:ac:57:4a:25:ee:15:93:c7:87:2f:93:fa:ec:e7:24:
b9:c2:34:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 14:59:19 2026 by rpki-client