
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/UQkbKhCsoFUZXNPZ-e3A7w3UiWw.roa
File: UQkbKhCsoFUZXNPZ-e3A7w3UiWw.roa (raw, json)
Hash identifier: LvYVpE75/SLwX1/ur8R0fNxzBuQnSZxSd+lTyMpyFcU=
Subject key identifier: 51:09:1B:2A:10:AC:A0:55:19:5C:D3:D9:F9:ED:C0:EF:0D:D4:89:6C
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1311
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UQkbKhCsoFUZXNPZ-e3A7w3UiWw.roa
Signing time: Sun 01 Mar 2026 03:32:30 +0000
ROA not before: Sun 01 Mar 2026 03:32:30 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4881 (0x1311)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 03:32:30 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=51091B2A10ACA055195CD3D9F9EDC0EF0DD4896C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:23:86:33:5b:dd:16:32:7b:03:69:48:ae:a7:
ff:d1:f2:2e:cf:eb:14:60:bd:07:b6:da:93:97:fd:
1d:e9:f5:e6:5c:9b:d8:49:e4:d4:53:7b:c8:d7:91:
29:75:52:fd:97:31:11:e2:3e:97:68:ab:98:c7:fc:
0f:13:6f:07:45:e2:0c:57:0c:45:86:49:bc:cc:cb:
57:fd:b4:c2:c6:3e:25:d6:6c:c1:7e:b6:85:73:b6:
68:b8:f3:1a:b0:9e:c2:2f:04:82:9f:c3:2d:03:e1:
56:53:3e:9a:65:32:4f:86:db:79:a7:5c:b0:49:f0:
79:0e:3a:10:4f:85:05:a4:a0:e3:a2:81:00:63:12:
74:e2:fa:93:23:46:52:bc:98:af:f8:c4:0e:ee:4f:
87:a3:9f:95:da:e5:6c:48:85:05:c6:25:69:c0:d2:
9e:7f:21:44:8a:53:f2:c0:a0:3e:ff:65:2c:bc:f4:
88:cc:f0:7e:ab:3f:a2:05:93:ea:23:03:b7:19:5a:
97:d2:e1:5f:47:eb:7b:f7:80:30:24:5a:6b:1f:d0:
a7:76:c0:84:a2:70:93:65:e9:54:4d:e0:a2:02:e9:
f3:19:22:3d:46:ed:91:7a:ff:94:8a:42:6a:2a:cd:
28:7d:61:15:fd:ac:8b:c5:a3:3f:3b:7a:3b:e0:0c:
85:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:09:1B:2A:10:AC:A0:55:19:5C:D3:D9:F9:ED:C0:EF:0D:D4:89:6C
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UQkbKhCsoFUZXNPZ-e3A7w3UiWw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.205.0/24
Signature Algorithm: sha256WithRSAEncryption
50:d1:16:b0:c0:52:40:b0:03:cd:e2:a0:3d:f1:4e:0b:01:18:
fa:61:4e:8e:c8:56:71:c6:28:93:31:17:58:ff:89:2a:5b:73:
77:1a:f3:d0:98:7e:90:29:6b:f5:4c:36:08:07:a3:93:e7:93:
29:be:21:a8:a2:a4:fa:72:50:e0:83:8d:39:99:19:fb:f9:99:
fc:09:41:73:c1:75:5d:1c:32:e3:30:75:1d:62:2e:1b:dd:19:
6a:4d:94:5f:79:17:3b:8b:10:81:79:fa:10:34:5c:0b:e3:52:
59:00:1e:63:44:09:ba:0a:e1:cb:9e:10:e2:75:1c:aa:ae:60:
a8:9b:8e:50:76:bc:3d:2f:05:42:69:b4:cb:44:7c:ae:97:ce:
8a:e2:e4:20:a3:5b:e7:d0:e5:84:28:95:4c:c8:83:94:04:57:
00:74:4c:f7:48:00:a2:89:7c:24:45:eb:5b:77:8a:d1:aa:04:
15:bf:4f:b1:07:f1:8e:e7:3e:b4:82:67:c4:14:6e:41:e1:40:
ee:6b:46:37:e3:18:19:90:98:1b:6d:93:64:2b:4e:9b:03:d8:
a5:51:4c:36:eb:d7:26:27:fa:b2:64:ed:83:d7:12:6a:48:16:
61:1f:27:d7:7e:68:37:7a:36:0f:6b:e7:57:7c:5b:4e:2b:62:
12:fb:88:90
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICExEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MzMyMzBaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDUxMDkxQjJBMTBBQ0Ew
NTUxOTVDRDNEOUY5RURDMEVGMERENDg5NkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLI4YzW90WMnsDaUiup//R8i7P6xRgvQe22pOX/R3p9eZcm9hJ
5NRTe8jXkSl1Uv2XMRHiPpdoq5jH/A8TbwdF4gxXDEWGSbzMy1f9tMLGPiXWbMF+
toVztmi48xqwnsIvBIKfwy0D4VZTPpplMk+G23mnXLBJ8HkOOhBPhQWkoOOigQBj
EnTi+pMjRlK8mK/4xA7uT4ejn5Xa5WxIhQXGJWnA0p5/IUSKU/LAoD7/ZSy89IjM
8H6rP6IFk+ojA7cZWpfS4V9H63v3gDAkWmsf0Kd2wISicJNl6VRN4KIC6fMZIj1G
7ZF6/5SKQmoqzSh9YRX9rIvFoz87ejvgDIUJAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUUQkbKhCsoFUZXNPZ+e3A7w3UiWwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L1VRa2JLaENzb0ZVWlhOUFotZTNBN3czVWlXdy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAxas0wDQYJKoZIhvcNAQELBQADggEBAFDRFrDAUkCwA83ioD3xTgsBGPph
To7IVnHGKJMxF1j/iSpbc3ca89CYfpApa/VMNggHo5Pnkym+IaiipPpyUOCDjTmZ
Gfv5mfwJQXPBdV0cMuMwdR1iLhvdGWpNlF95FzuLEIF5+hA0XAvjUlkAHmNECboK
4cueEOJ1HKquYKibjlB2vD0vBUJptMtEfK6Xzori5CCjW+fQ5YQolUzIg5QEVwB0
TPdIAKKJfCRF61t3itGqBBW/T7EH8Y7nPrSCZ8QUbkHhQO5rRjfjGBmQmBttk2Qr
TpsD2KVRTDbr1yYn+rJk7YPXEmpIFmEfJ9d+aDd6Ng9r51d8W04rYhL7iJA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:22:50 2026 by rpki-client