
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ye34UpVB3um8c17LN1Qp0q56h3E.roa
File: ye34UpVB3um8c17LN1Qp0q56h3E.roa (raw, json)
Hash identifier: Sl9RqhbRBLAkDxLcZ4NS+R1kqz6H1SwbMpwiD/rsqbE=
Subject key identifier: C9:ED:F8:52:95:41:DE:E9:BC:73:5E:CB:37:54:29:D2:AE:7A:87:71
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1168
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ye34UpVB3um8c17LN1Qp0q56h3E.roa
Signing time: Sun 01 Mar 2026 02:21:54 +0000
ROA not before: Sun 01 Mar 2026 02:21:54 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.105.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4456 (0x1168)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:21:54 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=C9EDF8529541DEE9BC735ECB375429D2AE7A8771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:38:12:e6:21:a8:33:af:f6:f4:09:e0:e8:1b:
9a:e0:39:52:fc:38:51:91:3a:77:ad:9e:32:65:2f:
a9:31:34:91:f2:57:80:3a:c1:d4:0d:9f:78:7b:fb:
ee:2d:14:36:e7:1a:b6:99:91:62:9b:4c:02:a2:13:
ac:71:a5:b4:6b:60:f6:56:9c:ae:c0:8b:ce:df:a6:
e2:4c:27:1b:3d:89:b1:e8:a7:82:88:4d:a6:d6:5f:
88:15:3a:ba:3a:25:74:11:1c:db:7d:11:11:d0:73:
9a:de:a6:54:cd:a7:da:af:cd:03:9c:b0:7d:24:3f:
3d:78:14:33:7e:fb:10:ae:ec:e9:d7:20:fd:89:a7:
69:e7:55:f7:17:e7:b7:e0:5b:b1:77:0b:5c:e8:c2:
b5:79:d2:9f:5b:e8:d6:d2:32:68:4c:cb:cb:43:da:
ab:cc:d3:e5:fe:0b:87:e4:22:cb:ae:cf:1e:46:a6:
25:4d:47:e9:ca:3e:f7:30:38:e4:2d:23:50:2b:17:
68:b9:74:65:3e:95:fd:ad:0d:1a:98:78:9d:d6:66:
c7:2c:8d:75:22:1a:88:df:b1:2f:e4:f9:f4:68:1c:
0a:80:f4:d4:fd:92:95:db:1f:a8:df:44:2c:4c:6b:
b0:72:9e:0b:8e:2a:47:83:8f:36:d8:d9:7f:c8:a5:
be:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:ED:F8:52:95:41:DE:E9:BC:73:5E:CB:37:54:29:D2:AE:7A:87:71
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ye34UpVB3um8c17LN1Qp0q56h3E.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.105.92.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:18:6e:ea:d9:a6:23:38:79:2e:2a:f7:c7:b6:d7:ef:6f:b1:
05:2c:c5:1d:bd:33:2f:a4:1e:07:23:78:7e:90:03:11:ff:44:
a5:bb:25:c5:01:1c:40:5c:de:c4:ec:f7:bd:de:63:a1:bf:6a:
4b:b0:57:f0:5f:38:33:33:b1:c5:7a:f3:f7:88:74:93:24:65:
43:de:f6:c3:6d:63:88:fd:61:69:53:9c:c9:96:44:c6:fc:29:
21:c9:4f:da:4e:42:f6:4c:ae:ab:75:23:42:75:ed:fb:5f:eb:
b0:61:c8:29:3b:d4:8d:58:56:64:a5:05:5e:23:4e:53:ce:7c:
01:ca:75:d5:48:58:91:5b:da:cc:31:20:5d:a9:38:ed:c6:fc:
aa:44:e5:14:6b:b3:e9:ce:c6:8f:16:6f:d9:c5:df:8d:bb:3d:
69:69:d0:ac:f3:f0:f8:47:f4:79:f9:de:7b:28:7a:e3:5d:62:
eb:3a:9a:50:7c:b6:e8:22:2c:9f:cd:67:51:76:f1:7f:56:ff:
3b:c8:00:cd:4e:75:9f:8a:1c:bb:85:b1:9f:50:b0:57:2b:fd:
c2:36:0d:27:2a:7a:e5:8f:56:82:45:67:2d:f9:76:bc:25:f4:
61:19:d2:da:e6:96:0d:95:ce:18:30:87:ab:60:7a:eb:e0:be:
08:50:43:6c
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEWgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MjIxNTRaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM5RURGODUyOTU0MURF
RTlCQzczNUVDQjM3NTQyOUQyQUU3QTg3NzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCXOBLmIagzr/b0CeDoG5rgOVL8OFGROnetnjJlL6kxNJHyV4A6
wdQNn3h7++4tFDbnGraZkWKbTAKiE6xxpbRrYPZWnK7Ai87fpuJMJxs9ibHop4KI
TabWX4gVOro6JXQRHNt9ERHQc5replTNp9qvzQOcsH0kPz14FDN++xCu7OnXIP2J
p2nnVfcX57fgW7F3C1zowrV50p9b6NbSMmhMy8tD2qvM0+X+C4fkIsuuzx5GpiVN
R+nKPvcwOOQtI1ArF2i5dGU+lf2tDRqYeJ3WZscsjXUiGojfsS/k+fRoHAqA9NT9
kpXbH6jfRCxMa7BynguOKkeDjzbY2X/Ipb6XAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUye34UpVB3um8c17LN1Qp0q56h3EwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3llMzRVcFZCM3VtOGMxN0xOMVFwMHE1NmgzRS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIxaVwwDQYJKoZIhvcNAQELBQADggEBAD4YburZpiM4eS4q98e21+9vsQUs
xR29My+kHgcjeH6QAxH/RKW7JcUBHEBc3sTs973eY6G/akuwV/BfODMzscV68/eI
dJMkZUPe9sNtY4j9YWlTnMmWRMb8KSHJT9pOQvZMrqt1I0J17ftf67BhyCk71I1Y
VmSlBV4jTlPOfAHKddVIWJFb2swxIF2pOO3G/KpE5RRrs+nOxo8Wb9nF3427PWlp
0Kzz8PhH9Hn53nsoeuNdYus6mlB8tugiLJ/NZ1F28X9W/zvIAM1OdZ+KHLuFsZ9Q
sFcr/cI2DScqeuWPVoJFZy35drwl9GEZ0trmlg2Vzhgwh6tgeuvgvghQQ2w=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:58 2026 by rpki-client