
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/0BqFdISTw0Iy-tuc_7d5mDz-8AA.roa
File: 0BqFdISTw0Iy-tuc_7d5mDz-8AA.roa (raw, json)
Hash identifier: agnWECJPfJiSeRuDQymXnnFW0FBCpstpB1lj5UB9HTw=
Subject key identifier: D0:1A:85:74:84:93:C3:42:32:FA:DB:9C:FF:B7:79:98:3C:FE:F0:00
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1349
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0BqFdISTw0Iy-tuc_7d5mDz-8AA.roa
Signing time: Sun 01 Mar 2026 03:40:43 +0000
ROA not before: Sun 01 Mar 2026 03:40:43 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.144.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4937 (0x1349)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 03:40:43 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=D01A85748493C34232FADB9CFFB779983CFEF000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:92:7c:30:e3:54:d7:f0:2c:80:4b:dc:27:60:
4d:a1:59:65:82:e9:06:ef:b5:62:f3:24:03:74:09:
fe:8d:30:cc:45:f3:e9:2e:91:4e:31:c8:24:89:db:
5c:1f:de:4a:28:ce:d6:e3:ce:ba:ab:ab:57:eb:d5:
d7:a1:a7:51:19:47:f4:e6:19:62:a5:63:ef:05:5a:
b0:27:2f:4e:e8:8a:89:e4:54:ec:7b:23:e6:c8:f6:
f6:36:17:c5:ec:82:50:18:55:b7:1f:70:18:75:08:
8c:b7:cb:22:17:45:34:e2:07:fd:72:00:2b:d8:57:
15:27:2e:e6:6d:c6:c2:b9:81:51:86:6b:96:a1:86:
00:2a:95:fd:4b:d3:4e:08:d5:b3:b8:eb:91:04:69:
ce:fc:6c:e1:18:15:a4:7e:c4:25:fa:03:28:9f:81:
c6:0b:53:09:8a:dc:27:bd:2a:0a:e2:ac:64:e4:50:
0b:91:4e:40:2f:dc:6a:95:ac:ff:c6:0a:44:c3:58:
77:00:96:9f:c0:c2:57:8a:d1:2f:f9:55:4e:b2:62:
b3:93:7c:05:48:87:cb:86:51:46:43:41:e4:a1:a6:
44:c6:c9:1a:90:b3:ed:d0:d1:2e:25:37:f4:fe:fd:
e0:db:97:9b:ff:05:5d:16:ef:98:29:82:e3:dc:f9:
6a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:1A:85:74:84:93:C3:42:32:FA:DB:9C:FF:B7:79:98:3C:FE:F0:00
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0BqFdISTw0Iy-tuc_7d5mDz-8AA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.144.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:d7:60:60:3f:fb:4c:b3:bc:da:da:9c:d5:1b:38:87:05:be:
bc:d9:ca:3e:d6:08:98:03:b7:66:97:6b:e5:b3:82:04:60:5f:
0f:68:2d:b7:1f:34:42:69:cf:a6:c4:6f:d5:0e:d2:00:8a:a5:
7c:77:da:a2:73:a4:fb:f0:b4:e1:fa:11:b0:70:cd:a6:c7:a5:
9a:b3:10:63:a7:76:62:89:e5:0b:b1:65:90:69:4f:bc:00:a4:
2f:f6:c8:0b:2f:e3:9c:22:b3:ab:2d:76:8b:fc:d0:b5:bf:0e:
41:25:7c:aa:0b:bf:c5:e3:1c:d5:3f:c6:de:36:36:3e:c4:54:
d2:f3:8c:55:1d:04:70:2f:b7:af:dd:f8:b2:ca:52:a5:46:29:
fa:0d:ff:10:cd:cd:e9:c8:49:d1:f0:40:09:7e:a9:61:5e:44:
c8:79:26:b5:8b:af:f3:53:f6:8b:e4:52:40:32:ef:b3:1c:06:
33:71:40:e6:8b:8e:d2:9a:a8:95:7c:68:55:65:aa:d7:6b:65:
10:b1:d4:8a:79:74:16:90:a9:17:33:54:bd:c9:f4:27:69:f5:
f9:84:ee:ec:28:6c:eb:15:c6:51:d0:f6:2a:79:fd:5a:be:f0:
f3:16:28:48:d0:a0:04:51:1e:7b:a2:be:05:5b:c4:59:31:e3:
01:a7:8a:83
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICE0kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MzQwNDNaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQwMUE4NTc0ODQ5M0Mz
NDIzMkZBREI5Q0ZGQjc3OTk4M0NGRUYwMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDfknww41TX8CyAS9wnYE2hWWWC6QbvtWLzJAN0Cf6NMMxF8+ku
kU4xyCSJ21wf3kooztbjzrqrq1fr1dehp1EZR/TmGWKlY+8FWrAnL07oionkVOx7
I+bI9vY2F8XsglAYVbcfcBh1CIy3yyIXRTTiB/1yACvYVxUnLuZtxsK5gVGGa5ah
hgAqlf1L004I1bO465EEac78bOEYFaR+xCX6AyifgcYLUwmK3Ce9KgrirGTkUAuR
TkAv3GqVrP/GCkTDWHcAlp/AwleK0S/5VU6yYrOTfAVIh8uGUUZDQeShpkTGyRqQ
s+3Q0S4lN/T+/eDbl5v/BV0W75gpguPc+Wo5AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU0BqFdISTw0Iy+tuc/7d5mDz+8AAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5LzBCcUZkSVNUdzBJeS10dWNfN2Q1bUR6LThBQS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExYpAwDQYJKoZIhvcNAQELBQADggEBALbXYGA/+0yzvNranNUbOIcFvrzZ
yj7WCJgDt2aXa+WzggRgXw9oLbcfNEJpz6bEb9UO0gCKpXx32qJzpPvwtOH6EbBw
zabHpZqzEGOndmKJ5QuxZZBpT7wApC/2yAsv45wis6stdov80LW/DkElfKoLv8Xj
HNU/xt42Nj7EVNLzjFUdBHAvt6/d+LLKUqVGKfoN/xDNzenISdHwQAl+qWFeRMh5
JrWLr/NT9ovkUkAy77McBjNxQOaLjtKaqJV8aFVlqtdrZRCx1Ip5dBaQqRczVL3J
9Cdp9fmE7uwobOsVxlHQ9ip5/Vq+8PMWKEjQoARRHnuivgVbxFkx4wGnioM=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:26:31 2026 by rpki-client