
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/qxOwIlYAjonDypfmSH4Ry7Rcf0A.roa
File: qxOwIlYAjonDypfmSH4Ry7Rcf0A.roa (raw, json)
Hash identifier: Vt13Mtd0HdF7//rqEoJwH52Rp4LIGHp+uf6QyMEwycc=
Subject key identifier: AB:13:B0:22:56:00:8E:89:C3:CA:97:E6:48:7E:11:CB:B4:5C:7F:40
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1284
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qxOwIlYAjonDypfmSH4Ry7Rcf0A.roa
Signing time: Sun 01 Mar 2026 03:04:44 +0000
ROA not before: Sun 01 Mar 2026 03:04:44 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.142.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4740 (0x1284)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 03:04:44 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=AB13B02256008E89C3CA97E6487E11CBB45C7F40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:db:51:24:57:bc:4b:05:22:81:82:42:6f:e3:
49:98:97:48:98:b3:14:ea:da:52:8b:b2:c6:82:72:
7b:99:30:f2:d2:81:39:66:8e:e9:c8:b6:d6:99:1f:
4e:77:98:d9:e7:24:23:45:f3:c9:91:fe:96:a9:53:
fa:01:0b:e6:1b:71:d8:3e:f4:1b:57:05:91:20:5a:
c3:38:5f:90:fc:48:d9:bc:76:69:c0:ec:28:94:b5:
56:70:48:b8:a2:38:16:60:95:0e:be:24:dd:04:9f:
17:59:98:68:1c:5b:01:67:2d:ab:a4:aa:7b:71:4b:
93:f5:10:52:33:a6:83:6f:89:be:d5:47:b2:36:05:
08:03:6a:fb:99:89:95:73:93:b1:86:74:97:3b:55:
46:89:2d:3a:a6:57:24:7b:4b:87:ae:dc:7a:f2:28:
b0:97:88:2e:7d:48:e6:54:29:e1:0b:ab:ed:3e:2f:
03:a4:4f:68:f1:53:1e:9a:b4:55:13:00:1f:f0:1f:
a9:9e:c0:3e:f5:12:84:4d:ec:b0:31:81:8c:2b:27:
65:92:5e:d7:a7:fa:b0:bb:21:e8:f8:c2:89:89:7e:
e9:4c:c0:58:ec:4c:cd:82:44:61:bf:20:5c:37:21:
8b:86:15:44:3a:3b:79:af:73:bd:b5:2f:e1:60:6b:
a6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:13:B0:22:56:00:8E:89:C3:CA:97:E6:48:7E:11:CB:B4:5C:7F:40
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qxOwIlYAjonDypfmSH4Ry7Rcf0A.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.142.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:38:a6:4a:fd:c1:e8:db:55:39:57:20:2f:53:25:c2:2b:f4:
57:9c:8f:f5:bf:f7:b2:ba:cd:8b:dd:e4:7a:86:a2:48:3e:74:
c9:6a:3f:00:c2:ea:95:c6:4e:e7:94:c5:de:46:d9:97:d7:9d:
ea:0f:3e:24:2d:e1:e2:1f:7e:a3:e7:53:32:bf:64:27:08:b8:
d8:d5:7e:68:30:0a:4d:c8:20:fa:c1:43:a9:f4:0c:5c:e2:59:
aa:71:07:93:44:8f:ca:d7:7c:30:f1:a9:02:12:97:c1:ef:73:
68:ea:9c:45:50:4c:d4:8f:6d:db:0c:08:5b:3e:94:4e:14:f9:
87:c6:c5:07:f9:99:a5:c3:92:47:44:8a:35:bc:78:d3:15:2b:
88:bc:2c:e6:70:40:be:bf:0b:ef:7e:d3:e0:15:5b:96:9b:24:
b4:57:ba:f8:b3:81:36:9e:f1:43:32:65:25:6a:23:25:e2:cf:
46:33:0d:d3:3f:e5:93:54:86:43:eb:d1:b9:19:13:81:7a:9e:
71:30:46:94:8b:61:54:a8:70:d0:34:a6:92:2c:ac:dd:19:45:
4c:8c:92:e1:33:ef:a9:2a:7b:e8:08:51:5a:b3:ec:1b:91:2a:
3f:9c:0b:7d:00:d5:38:ba:da:af:85:9c:b1:bb:01:0d:ac:ea:
b2:9a:ee:e3
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEoQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MzA0NDRaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFCMTNCMDIyNTYwMDhF
ODlDM0NBOTdFNjQ4N0UxMUNCQjQ1QzdGNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCz21EkV7xLBSKBgkJv40mYl0iYsxTq2lKLssaCcnuZMPLSgTlm
junIttaZH053mNnnJCNF88mR/papU/oBC+Ybcdg+9BtXBZEgWsM4X5D8SNm8dmnA
7CiUtVZwSLiiOBZglQ6+JN0EnxdZmGgcWwFnLaukqntxS5P1EFIzpoNvib7VR7I2
BQgDavuZiZVzk7GGdJc7VUaJLTqmVyR7S4eu3HryKLCXiC59SOZUKeELq+0+LwOk
T2jxUx6atFUTAB/wH6mewD71EoRN7LAxgYwrJ2WSXten+rC7Iej4womJfulMwFjs
TM2CRGG/IFw3IYuGFUQ6O3mvc721L+Fga6ZnAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUqxOwIlYAjonDypfmSH4Ry7Rcf0AwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3F4T3dJbFlBam9uRHlwZm1TSDRSeTdSY2YwQS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExYo4wDQYJKoZIhvcNAQELBQADggEBAAw4pkr9wejbVTlXIC9TJcIr9Fec
j/W/97K6zYvd5HqGokg+dMlqPwDC6pXGTueUxd5G2ZfXneoPPiQt4eIffqPnUzK/
ZCcIuNjVfmgwCk3IIPrBQ6n0DFziWapxB5NEj8rXfDDxqQISl8Hvc2jqnEVQTNSP
bdsMCFs+lE4U+YfGxQf5maXDkkdEijW8eNMVK4i8LOZwQL6/C+9+0+AVW5abJLRX
uvizgTae8UMyZSVqIyXiz0YzDdM/5ZNUhkPr0bkZE4F6nnEwRpSLYVSocNA0ppIs
rN0ZRUyMkuEz76kqe+gIUVqz7BuRKj+cC30A1Ti62q+FnLG7AQ2s6rKa7uM=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:04:16 2026 by rpki-client