
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/gh1b0zPiBMUF_sqyOx-xMOwryg4.roa
File: gh1b0zPiBMUF_sqyOx-xMOwryg4.roa (raw, json)
Hash identifier: Vk4Q8A9U2z46DENftDfDc+rnIh6pJ7x5YJr/9DEIiiU=
Subject key identifier: 82:1D:5B:D3:33:E2:04:C5:05:FE:CA:B2:3B:1F:B1:30:EC:2B:CA:0E
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 124F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gh1b0zPiBMUF_sqyOx-xMOwryg4.roa
Signing time: Sun 01 Mar 2026 02:56:41 +0000
ROA not before: Sun 01 Mar 2026 02:56:41 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4687 (0x124f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:56:41 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=821D5BD333E204C505FECAB23B1FB130EC2BCA0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:0b:55:34:83:9f:99:38:95:de:cf:a7:b3:0e:
74:23:96:9f:2b:74:be:20:8f:17:ac:18:aa:7b:45:
2d:dd:9d:96:da:41:2d:c5:ab:c3:4d:52:8e:10:10:
16:f4:80:e7:e2:73:09:78:6b:1d:ab:0e:d7:ae:0a:
e4:dd:c7:02:e5:54:8e:f2:db:dc:f8:79:ef:75:38:
ca:a9:ac:dc:81:49:db:16:e4:6f:8a:1f:aa:88:85:
99:d8:dc:77:41:fc:93:80:6e:f3:d4:4c:a7:77:c6:
e2:9e:43:70:63:65:5d:f9:9b:a9:39:6d:df:9c:b3:
ce:b2:ae:d6:8e:f4:36:88:06:c0:0f:5c:ab:e6:92:
81:45:08:ea:00:63:f5:f0:50:43:37:1a:f8:be:78:
43:cf:90:91:82:fc:36:3d:b7:7a:cc:87:bc:d4:76:
0d:57:b9:b2:bf:ad:2c:b2:bb:98:29:9c:74:9b:22:
20:de:15:3e:0f:fc:0c:59:87:4c:9d:63:f1:67:46:
24:3d:0f:0d:68:eb:13:03:8d:ce:cd:94:17:51:89:
81:1e:9e:e1:37:ae:74:fe:6e:0c:c7:be:ed:18:a2:
85:ef:f0:5d:f6:fb:3f:ba:6a:7f:8f:bd:58:16:f3:
3c:dd:d0:bb:1b:ee:a2:df:f8:67:00:fe:00:c1:d8:
6a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:1D:5B:D3:33:E2:04:C5:05:FE:CA:B2:3B:1F:B1:30:EC:2B:CA:0E
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gh1b0zPiBMUF_sqyOx-xMOwryg4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.234.0/24
Signature Algorithm: sha256WithRSAEncryption
32:35:60:f8:d7:79:63:71:d5:94:28:f5:2f:28:d7:45:68:37:
10:c7:ee:57:02:a5:fa:6b:3e:03:ef:ec:bb:3d:87:4d:63:fe:
02:a7:35:30:0a:02:fa:d4:f9:8a:2e:64:72:eb:41:43:32:e9:
ab:30:7b:53:a8:55:af:c1:3b:f5:85:b1:17:39:55:bc:05:74:
eb:fe:27:d5:f3:e3:d5:bb:e1:51:52:04:71:64:f6:15:fc:dd:
95:e1:1e:10:bc:a9:f6:01:4e:c4:cb:a3:4c:04:0f:5f:44:4e:
cb:8b:4f:26:9c:54:82:90:07:44:af:9e:e2:34:b1:d0:ff:93:
d9:bc:50:0a:a2:93:ed:a3:8a:99:d3:6e:34:6f:a7:08:4c:d8:
27:f9:cf:64:fa:46:ba:9b:e6:fb:ef:c5:33:1b:9f:1c:24:d3:
25:a4:41:53:cf:7b:a8:a3:fd:7f:52:40:76:38:8b:a9:ed:1f:
6d:bc:d1:05:b0:55:b2:94:54:77:07:94:db:61:e8:76:7e:82:
a4:69:4b:19:22:7e:a4:58:ea:2b:b3:f8:c4:5e:86:84:5b:fa:
d4:2f:94:69:6e:d8:cb:90:e1:20:34:da:e0:88:1e:cb:2d:4f:
be:7b:24:92:d7:64:a0:6d:91:72:16:c7:65:21:98:0d:92:a9:
d5:ba:fe:cb
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEk8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MjU2NDFaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDgyMUQ1QkQzMzNFMjA0
QzUwNUZFQ0FCMjNCMUZCMTMwRUMyQkNBMEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDpC1U0g5+ZOJXez6ezDnQjlp8rdL4gjxesGKp7RS3dnZbaQS3F
q8NNUo4QEBb0gOficwl4ax2rDteuCuTdxwLlVI7y29z4ee91OMqprNyBSdsW5G+K
H6qIhZnY3HdB/JOAbvPUTKd3xuKeQ3BjZV35m6k5bd+cs86yrtaO9DaIBsAPXKvm
koFFCOoAY/XwUEM3Gvi+eEPPkJGC/DY9t3rMh7zUdg1XubK/rSyyu5gpnHSbIiDe
FT4P/AxZh0ydY/FnRiQ9Dw1o6xMDjc7NlBdRiYEenuE3rnT+bgzHvu0YooXv8F32
+z+6an+PvVgW8zzd0Lsb7qLf+GcA/gDB2GqrAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUgh1b0zPiBMUF/sqyOx+xMOwryg4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2doMWIwelBpQk1VRl9zcXlPeC14TU93cnlnNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAxauowDQYJKoZIhvcNAQELBQADggEBADI1YPjXeWNx1ZQo9S8o10VoNxDH
7lcCpfprPgPv7Ls9h01j/gKnNTAKAvrU+YouZHLrQUMy6aswe1OoVa/BO/WFsRc5
VbwFdOv+J9Xz49W74VFSBHFk9hX83ZXhHhC8qfYBTsTLo0wED19ETsuLTyacVIKQ
B0SvnuI0sdD/k9m8UAqik+2jipnTbjRvpwhM2Cf5z2T6Rrqb5vvvxTMbnxwk0yWk
QVPPe6ij/X9SQHY4i6ntH2280QWwVbKUVHcHlNth6HZ+gqRpSxkifqRY6iuz+MRe
hoRb+tQvlGlu2MuQ4SA02uCIHsstT757JJLXZKBtkXIWx2UhmA2SqdW6/ss=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:53:16 2026 by rpki-client