
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/gW8FA4gyG861orNpxnY32P5fR5s.roa
File: gW8FA4gyG861orNpxnY32P5fR5s.roa (raw, json)
Hash identifier: s8ZMPt1voDlZSvBgXi6mwu1HTVTpI1/s6/uzv3CpGSo=
Subject key identifier: 81:6F:05:03:88:32:1B:CE:B5:A2:B3:69:C6:76:37:D8:FE:5F:47:9B
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 10BC
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gW8FA4gyG861orNpxnY32P5fR5s.roa
Signing time: Sun 01 Mar 2026 01:49:22 +0000
ROA not before: Sun 01 Mar 2026 01:49:22 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.80.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4284 (0x10bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 01:49:22 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=816F050388321BCEB5A2B369C67637D8FE5F479B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:da:f5:0c:55:b9:da:c8:67:c5:45:39:49:da:
6f:6b:64:54:5d:9d:4d:85:95:dc:08:01:85:33:8a:
f0:2d:26:4d:df:32:0a:e1:52:d3:e9:e2:44:07:91:
f2:5c:8e:53:f9:9c:75:3b:7e:3b:b0:0c:ec:f3:ab:
ce:79:26:39:d4:fb:83:a4:f3:57:12:a0:ad:16:f9:
34:a0:05:21:b2:a9:9d:31:6b:1c:92:91:65:11:88:
b2:29:0a:ca:17:80:59:ae:f4:3b:b7:bc:f7:16:44:
cc:8b:56:fc:9d:b7:1f:13:ba:e7:98:cb:b0:77:4e:
06:2d:08:8c:f7:99:14:c4:2c:83:7e:d6:8d:f3:9c:
d6:3d:44:8f:c8:5a:14:01:be:59:e0:8b:e1:4f:e7:
be:46:8a:a6:96:f4:89:a4:d5:34:f5:ea:af:b1:20:
97:48:94:77:12:45:6d:b7:67:03:bd:a8:6b:ba:ea:
35:1f:01:72:ef:0a:75:09:d0:f2:61:6b:14:09:58:
ca:0b:64:b6:87:6d:93:4b:96:db:a9:fe:df:46:08:
dc:82:cc:7a:e9:ca:b9:a0:ba:bc:01:57:3a:e4:ba:
66:d8:52:e2:eb:02:58:c8:29:93:d2:72:ff:b4:c3:
d8:8b:7a:ed:3a:4b:b7:75:80:a6:20:fb:f7:04:43:
7c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6F:05:03:88:32:1B:CE:B5:A2:B3:69:C6:76:37:D8:FE:5F:47:9B
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gW8FA4gyG861orNpxnY32P5fR5s.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.80.0/21
Signature Algorithm: sha256WithRSAEncryption
cb:a9:34:94:41:dc:33:1e:b6:f8:53:b7:33:3e:ba:fa:36:82:
ee:ad:2c:65:52:b8:ff:b2:5b:f4:bc:45:b8:9b:e9:85:66:df:
fc:06:dd:eb:4b:62:be:9f:39:71:37:aa:1c:ab:84:12:94:fa:
8c:3c:1a:21:83:84:e6:24:bf:7b:7b:99:c9:31:27:fd:e9:a6:
a6:68:1c:51:9e:f2:0d:3f:6b:f1:ac:ff:af:f3:4f:96:d7:4c:
29:f0:4d:71:7b:1d:8e:41:94:f1:98:ac:12:1b:47:4c:01:7b:
9c:ba:64:4f:2b:a0:51:8d:08:25:73:ae:0b:76:2e:0b:e7:7f:
2f:06:b8:07:48:80:e7:5c:ca:f0:bc:89:40:4f:3e:e5:bd:ef:
81:80:43:9e:80:58:e0:93:7e:40:74:de:c4:15:1d:f8:0a:e2:
fb:93:e2:4a:ef:10:46:6d:2a:03:94:0f:d7:c8:10:b1:51:e6:
9e:22:87:97:57:8d:81:f5:4c:9a:4d:46:d7:26:d9:db:3c:e3:
8d:93:28:9e:62:07:96:81:c6:f1:a6:ee:dd:52:6f:fd:2f:70:
36:82:d1:2e:65:85:c9:51:fe:e3:9a:9b:c3:38:a4:2b:3b:dc:
00:44:13:0d:30:33:a5:41:5e:24:f0:02:98:43:8e:74:f5:0d:
a3:59:0b:7c
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICELwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MTQ5MjJaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDgxNkYwNTAzODgzMjFC
Q0VCNUEyQjM2OUM2NzYzN0Q4RkU1RjQ3OUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDW2vUMVbnayGfFRTlJ2m9rZFRdnU2FldwIAYUzivAtJk3fMgrh
UtPp4kQHkfJcjlP5nHU7fjuwDOzzq855JjnU+4Ok81cSoK0W+TSgBSGyqZ0xaxyS
kWURiLIpCsoXgFmu9Du3vPcWRMyLVvydtx8TuueYy7B3TgYtCIz3mRTELIN+1o3z
nNY9RI/IWhQBvlngi+FP575GiqaW9Imk1TT16q+xIJdIlHcSRW23ZwO9qGu66jUf
AXLvCnUJ0PJhaxQJWMoLZLaHbZNLltup/t9GCNyCzHrpyrmgurwBVzrkumbYUuLr
AljIKZPScv+0w9iLeu06S7d1gKYg+/cEQ3zVAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUgW8FA4gyG861orNpxnY32P5fR5swHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2dXOEZBNGd5Rzg2MW9yTnB4blkzMlA1ZlI1cy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAMxalAwDQYJKoZIhvcNAQELBQADggEBAMupNJRB3DMetvhTtzM+uvo2gu6t
LGVSuP+yW/S8Rbib6YVm3/wG3etLYr6fOXE3qhyrhBKU+ow8GiGDhOYkv3t7mckx
J/3ppqZoHFGe8g0/a/Gs/6/zT5bXTCnwTXF7HY5BlPGYrBIbR0wBe5y6ZE8roFGN
CCVzrgt2Lgvnfy8GuAdIgOdcyvC8iUBPPuW974GAQ56AWOCTfkB03sQVHfgK4vuT
4krvEEZtKgOUD9fIELFR5p4ih5dXjYH1TJpNRtcm2ds8442TKJ5iB5aBxvGm7t1S
b/0vcDaC0S5lhclR/uOam8M4pCs73ABEEw0wM6VBXiTwAphDjnT1DaNZC3w=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:53:48 2026 by rpki-client