
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/OEpJeAeuUdjSdw8iMm9t3xTYWLU.roa
File: OEpJeAeuUdjSdw8iMm9t3xTYWLU.roa (raw, json)
Hash identifier: YwoH/uMQDJLALMdrkGUr5YORBQWhWx1VgbaRr6/hDG4=
Subject key identifier: 38:4A:49:78:07:AE:51:D8:D2:77:0F:22:32:6F:6D:DF:14:D8:58:B5
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1135
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OEpJeAeuUdjSdw8iMm9t3xTYWLU.roa
Signing time: Sun 01 Mar 2026 02:12:42 +0000
ROA not before: Sun 01 Mar 2026 02:12:42 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.228.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4405 (0x1135)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:12:42 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=384A497807AE51D8D2770F22326F6DDF14D858B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a6:bb:d5:e4:2a:7c:c6:c5:69:42:3e:05:f5:
b7:7b:53:8f:32:88:ab:94:c9:af:d8:a2:b5:26:f6:
b5:ac:d1:9e:10:ae:a4:f3:69:3a:be:3b:0f:36:ee:
d8:0f:2e:95:6f:1a:05:65:95:6a:6b:c8:d0:7a:86:
d1:bc:18:5e:91:0e:c0:5e:3d:7d:5a:e3:43:56:21:
03:ad:57:fb:9e:30:be:4b:d5:cb:c9:a4:07:ac:bd:
1a:5c:83:10:65:c1:64:2d:00:38:f8:c1:af:fd:db:
8c:aa:ca:1d:a2:13:8c:65:0d:48:de:e7:3e:56:78:
55:db:9c:d0:a7:b8:0b:0c:c8:2a:e1:de:14:e3:c1:
77:f2:9d:b6:28:a1:6d:7e:09:22:07:89:c2:9a:90:
80:7c:0f:2e:03:5e:bb:60:a4:80:ae:8c:eb:c0:c9:
ef:8b:eb:f7:05:09:03:20:60:86:21:2f:53:82:fa:
1f:46:ff:63:ca:07:1d:f1:3d:1d:d5:13:9f:04:65:
81:ac:20:65:51:1e:e7:d7:e3:3c:59:c6:8e:15:f8:
0e:56:62:14:1a:9a:e6:b1:38:b4:72:7a:8a:d6:db:
1e:24:ae:69:49:b1:6d:a4:c9:93:cb:fa:cd:52:7b:
8b:11:99:d6:6d:af:08:af:ac:08:ff:f5:30:40:88:
94:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4A:49:78:07:AE:51:D8:D2:77:0F:22:32:6F:6D:DF:14:D8:58:B5
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OEpJeAeuUdjSdw8iMm9t3xTYWLU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.228.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:5a:6a:1a:3a:e5:34:df:fc:a8:4a:e3:d2:e3:60:2a:be:ca:
74:e4:76:fa:09:e0:14:f3:5f:de:56:44:9b:c5:96:4d:af:29:
44:f1:31:5c:7a:bd:38:11:36:2c:3f:c9:39:de:93:a1:fc:01:
fd:48:df:0a:cf:61:a4:fa:c1:a7:29:30:6e:b9:b7:65:b2:db:
97:22:c7:d1:b7:57:fd:87:89:87:18:96:e3:f2:57:fd:d0:1b:
de:91:02:a2:49:3a:a5:b4:78:a8:1a:df:c4:8e:82:70:63:85:
27:ed:31:e7:fc:9c:25:96:43:f1:82:f4:3b:2d:33:cb:18:88:
1a:21:c4:65:0e:d1:14:e4:81:36:24:6b:c6:ee:15:16:92:91:
83:78:9d:be:86:4a:71:1b:7b:d6:1c:2e:2e:ba:a7:38:20:f5:
3d:1d:7c:ee:42:aa:2b:5f:87:4f:ff:06:de:64:44:71:43:e9:
8c:64:99:02:03:e8:de:e6:33:d8:56:1d:43:d1:fd:f6:c5:f9:
f2:80:cf:a9:58:8c:ae:05:ef:66:9e:f4:74:c4:98:08:85:f6:
e1:8a:b1:d1:e3:a3:30:2b:2a:d8:07:4b:ae:6e:0c:7d:ef:ae:
40:93:f5:6e:91:f8:9c:a6:fd:4a:11:59:76:35:ac:b5:7f:c2:
5a:36:3e:6d
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICETUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MjEyNDJaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM4NEE0OTc4MDdBRTUx
RDhEMjc3MEYyMjMyNkY2RERGMTREODU4QjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDlprvV5Cp8xsVpQj4F9bd7U48yiKuUya/YorUm9rWs0Z4QrqTz
aTq+Ow827tgPLpVvGgVllWpryNB6htG8GF6RDsBePX1a40NWIQOtV/ueML5L1cvJ
pAesvRpcgxBlwWQtADj4wa/924yqyh2iE4xlDUje5z5WeFXbnNCnuAsMyCrh3hTj
wXfynbYooW1+CSIHicKakIB8Dy4DXrtgpICujOvAye+L6/cFCQMgYIYhL1OC+h9G
/2PKBx3xPR3VE58EZYGsIGVRHufX4zxZxo4V+A5WYhQamuaxOLRyeorW2x4krmlJ
sW2kyZPL+s1Se4sRmdZtrwivrAj/9TBAiJRJAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUOEpJeAeuUdjSdw8iMm9t3xTYWLUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L09FcEplQWV1VWRqU2R3OGlNbTl0M3hUWVdMVS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIxYuQwDQYJKoZIhvcNAQELBQADggEBAL9aaho65TTf/KhK49LjYCq+ynTk
dvoJ4BTzX95WRJvFlk2vKUTxMVx6vTgRNiw/yTnek6H8Af1I3wrPYaT6wacpMG65
t2Wy25cix9G3V/2HiYcYluPyV/3QG96RAqJJOqW0eKga38SOgnBjhSftMef8nCWW
Q/GC9DstM8sYiBohxGUO0RTkgTYka8buFRaSkYN4nb6GSnEbe9YcLi66pzgg9T0d
fO5Cqitfh0//Bt5kRHFD6YxkmQID6N7mM9hWHUPR/fbF+fKAz6lYjK4F72ae9HTE
mAiF9uGKsdHjozArKtgHS65uDH3vrkCT9W6R+Jym/UoRWXY1rLV/wlo2Pm0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:22:40 2026 by rpki-client