
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/vIQt7mKzpcwOK33iEaGfoa1f8XE.roa
File: vIQt7mKzpcwOK33iEaGfoa1f8XE.roa (raw, json)
Hash identifier: 8K+hw1VOBbJ7OX6PDHaVBytNHz/fEcgezRVGnm44MpI=
Subject key identifier: BC:84:2D:EE:62:B3:A5:CC:0E:2B:7D:E2:11:A1:9F:A1:AD:5F:F1:71
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 108E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vIQt7mKzpcwOK33iEaGfoa1f8XE.roa
Signing time: Sun 01 Mar 2026 01:44:39 +0000
ROA not before: Sun 01 Mar 2026 01:44:39 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.96.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4238 (0x108e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 01:44:39 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=BC842DEE62B3A5CC0E2B7DE211A19FA1AD5FF171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c9:af:7c:57:cb:a6:f6:ff:51:fa:6b:1a:63:
a0:b1:82:95:c6:2c:51:74:94:07:5b:b9:cd:0b:0e:
35:fd:67:b3:c5:ba:77:07:29:24:25:fe:cb:77:31:
60:eb:4d:62:66:7d:85:3e:6f:9d:cc:18:2b:e9:48:
1f:74:77:09:ed:a5:6c:25:18:5d:dc:a0:d1:e5:91:
76:26:63:87:e4:9f:ea:d4:26:db:de:a3:92:16:e3:
5b:2e:88:74:5d:d0:ef:be:df:f1:31:de:47:5e:b2:
2c:b2:86:a2:b1:d2:5a:3c:e6:51:77:d4:08:c4:2d:
48:70:d7:88:a0:ed:87:60:d8:11:9b:0a:3c:1f:1a:
3b:03:2b:46:c3:bb:8d:bc:a0:d2:07:be:1d:8e:6a:
32:dc:a1:f5:73:91:a6:f2:22:09:95:34:8b:f5:87:
09:f3:78:53:21:ec:60:95:de:36:b0:d5:16:27:8e:
52:e9:c7:db:db:58:93:8e:54:74:2e:6c:8f:3f:ae:
bb:50:d3:f5:48:c9:43:e0:33:6b:b7:64:15:85:81:
99:e9:86:d2:50:03:99:7e:02:e9:c6:73:f9:a5:02:
b0:db:bc:e2:e5:21:07:59:3f:d7:ec:cd:22:82:4a:
0b:cd:cd:84:9f:46:8c:39:05:73:fb:3b:a9:ca:dd:
a7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:84:2D:EE:62:B3:A5:CC:0E:2B:7D:E2:11:A1:9F:A1:AD:5F:F1:71
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vIQt7mKzpcwOK33iEaGfoa1f8XE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.96.49.0/24
Signature Algorithm: sha256WithRSAEncryption
47:1d:bd:eb:40:01:28:55:05:bf:b7:60:bd:63:37:13:f6:fe:
e7:fb:ed:f4:49:38:b1:66:2f:9f:67:cc:5a:ed:62:c7:b7:2a:
5a:35:00:25:25:eb:8b:b2:40:f5:87:49:4a:ca:bd:6a:fe:37:
3a:1a:8e:08:cb:e1:d9:c2:80:ad:cd:09:bc:93:79:3c:57:bc:
b8:6c:70:74:a2:ea:c8:b4:85:73:e2:e7:79:49:81:5d:9c:48:
f5:43:4b:a5:7f:27:0f:5c:e7:3a:1c:0f:90:ed:1b:86:48:d5:
81:c8:62:c8:70:62:34:12:60:78:5f:96:41:6e:6b:0f:5b:7c:
ba:76:61:af:89:35:4c:b4:6b:cb:69:be:df:2c:8b:8b:75:eb:
ac:37:a4:6a:a4:dd:4a:29:ed:3e:12:dd:b6:78:f6:e9:eb:b2:
78:ff:f3:6a:82:f8:d1:fa:4b:81:f7:67:40:5f:51:43:98:f2:
32:58:cf:b4:be:da:8c:0a:62:3b:05:7c:55:26:4f:47:d6:d3:
4a:1a:e5:d4:72:02:0a:98:a6:0d:4a:d5:c2:e7:9e:fd:3a:ed:
e0:af:47:04:99:f8:73:90:82:1c:7a:15:35:3f:41:98:cb:be:
b1:e0:7a:47:25:ed:ed:16:51:f3:61:4a:18:83:0e:8f:8a:67:
a6:64:b7:48
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEI4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MTQ0MzlaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEJDODQyREVFNjJCM0E1
Q0MwRTJCN0RFMjExQTE5RkExQUQ1RkYxNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNya98V8um9v9R+msaY6CxgpXGLFF0lAdbuc0LDjX9Z7PFuncH
KSQl/st3MWDrTWJmfYU+b53MGCvpSB90dwntpWwlGF3coNHlkXYmY4fkn+rUJtve
o5IW41suiHRd0O++3/Ex3kdesiyyhqKx0lo85lF31AjELUhw14ig7Ydg2BGbCjwf
GjsDK0bDu428oNIHvh2OajLcofVzkabyIgmVNIv1hwnzeFMh7GCV3jaw1RYnjlLp
x9vbWJOOVHQubI8/rrtQ0/VIyUPgM2u3ZBWFgZnphtJQA5l+AunGc/mlArDbvOLl
IQdZP9fszSKCSgvNzYSfRow5BXP7O6nK3aeNAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUvIQt7mKzpcwOK33iEaGfoa1f8XEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3ZJUXQ3bUt6cGN3T0szM2lFYUdmb2ExZjhYRS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAxYDEwDQYJKoZIhvcNAQELBQADggEBAEcdvetAAShVBb+3YL1jNxP2/uf7
7fRJOLFmL59nzFrtYse3Klo1ACUl64uyQPWHSUrKvWr+NzoajgjL4dnCgK3NCbyT
eTxXvLhscHSi6si0hXPi53lJgV2cSPVDS6V/Jw9c5zocD5DtG4ZI1YHIYshwYjQS
YHhflkFuaw9bfLp2Ya+JNUy0a8tpvt8si4t166w3pGqk3Uop7T4S3bZ49unrsnj/
82qC+NH6S4H3Z0BfUUOY8jJYz7S+2owKYjsFfFUmT0fW00oa5dRyAgqYpg1K1cLn
nv067eCvRwSZ+HOQghx6FTU/QZjLvrHgekcl7e0WUfNhShiDDo+KZ6Zkt0g=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:19 2026 by rpki-client