
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-CDQgWi48Y8cI3NwTtKd6jgVbqo.roa
File: -CDQgWi48Y8cI3NwTtKd6jgVbqo.roa (raw, json)
Hash identifier: b3p6pGMWf4nn6RCbqHhfpSkX1NuWer8YexXbilzAYnc=
Subject key identifier: F8:20:D0:81:68:B8:F1:8F:1C:23:73:70:4E:D2:9D:EA:38:15:6E:AA
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1657
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-CDQgWi48Y8cI3NwTtKd6jgVbqo.roa
Signing time: Tue 31 Mar 2026 08:01:37 +0000
ROA not before: Tue 31 Mar 2026 08:01:37 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5719 (0x1657)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:01:37 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=F820D08168B8F18F1C2373704ED29DEA38156EAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0f:ec:a1:38:98:17:0c:4a:19:00:ba:3f:5c:
7c:b9:d4:c0:28:4f:6c:f7:13:31:3a:32:c7:98:4b:
5d:62:86:41:dc:39:cc:a4:c9:02:6b:82:c7:2e:80:
36:d8:3d:d0:21:1d:39:f4:4d:e0:fc:2c:01:13:36:
07:16:bf:a8:18:74:48:65:e9:a1:d5:8f:8b:80:aa:
df:43:20:80:99:a2:6c:72:de:dc:38:c0:0f:91:95:
0f:c6:4b:4e:f4:d7:42:a6:58:d1:4a:d7:49:4f:91:
c2:6a:c4:77:c8:70:db:ed:57:19:b3:54:20:ed:87:
e1:7c:5b:39:c5:37:0e:56:2a:ec:a0:f0:be:22:64:
98:95:b6:9e:40:24:e7:58:5c:c5:7d:ca:c5:85:12:
2c:6d:1b:f9:ba:02:dd:51:d8:d6:84:88:50:ed:4f:
4b:2f:c6:79:4f:23:68:53:d1:4f:e1:07:1a:19:f3:
9f:81:a6:74:19:30:92:0a:da:e7:f1:dd:c1:f8:c9:
58:42:c8:45:1f:54:55:56:a6:60:a2:58:a2:38:1d:
07:7c:18:35:e5:2d:25:38:f3:e3:ef:d6:82:d4:8c:
64:44:ea:14:f2:70:4a:eb:d7:2f:d5:72:17:91:51:
07:d5:7e:0f:7c:41:6a:4d:f9:15:c5:fd:83:50:ee:
9b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:20:D0:81:68:B8:F1:8F:1C:23:73:70:4E:D2:9D:EA:38:15:6E:AA
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-CDQgWi48Y8cI3NwTtKd6jgVbqo.roa
sbgp-ipAddrBlock: critical
IPv4:
49.106.206.0/24
Signature Algorithm: sha256WithRSAEncryption
59:96:85:59:ba:a0:fe:e0:b2:47:48:c4:37:f7:41:c1:8c:5e:
eb:e2:cd:a7:0e:b1:cc:7f:6a:97:bb:28:08:2b:c4:e4:92:07:
7f:a3:23:43:15:08:d9:8c:63:5b:b2:e3:90:f5:ce:cc:30:8d:
f9:15:64:19:c4:bf:33:45:21:8f:cc:b7:39:0d:51:93:5d:73:
02:22:64:ae:90:ee:14:05:9e:f6:96:f0:03:20:cb:14:db:46:
57:5d:1f:9d:0d:84:ee:b2:a7:90:a0:35:88:64:e1:69:21:6d:
38:29:c4:3f:3e:af:99:6d:49:82:07:e9:52:31:fc:5d:c8:92:
38:5c:e8:cc:ea:ba:3b:b9:34:50:ea:26:ea:64:ad:1c:78:f5:
d9:b5:b9:cd:25:2d:ef:10:f7:78:47:3e:0f:c4:d6:99:2d:e2:
93:f2:e5:f4:2d:4d:5f:e2:41:12:7d:b8:aa:76:bd:60:fd:0a:
fb:0b:5c:ca:ea:38:1c:3b:09:76:30:d8:71:08:2d:eb:72:0c:
3f:b8:60:01:0c:ca:d1:8d:99:e1:b4:56:eb:3b:78:65:fd:33:
4d:f9:ae:e8:e4:77:5d:d7:08:40:cc:6c:3b:a0:1b:42:ce:72:
69:2e:45:e5:5b:2c:0e:43:8c:bf:c2:91:b7:37:5e:b0:8e:cc:
63:61:a9:52
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFlcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODAxMzdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEY4MjBEMDgxNjhCOEYx
OEYxQzIzNzM3MDRFRDI5REVBMzgxNTZFQUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDND+yhOJgXDEoZALo/XHy51MAoT2z3EzE6MseYS11ihkHcOcyk
yQJrgscugDbYPdAhHTn0TeD8LAETNgcWv6gYdEhl6aHVj4uAqt9DIICZomxy3tw4
wA+RlQ/GS07010KmWNFK10lPkcJqxHfIcNvtVxmzVCDth+F8WznFNw5WKuyg8L4i
ZJiVtp5AJOdYXMV9ysWFEixtG/m6At1R2NaEiFDtT0svxnlPI2hT0U/hBxoZ85+B
pnQZMJIK2ufx3cH4yVhCyEUfVFVWpmCiWKI4HQd8GDXlLSU48+Pv1oLUjGRE6hTy
cErr1y/VcheRUQfVfg98QWpN+RXF/YNQ7pudAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU+CDQgWi48Y8cI3NwTtKd6jgVbqowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5Ly1DRFFnV2k0OFk4Y0kzTndUdEtkNmpnVmJxby5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAxas4wDQYJKoZIhvcNAQELBQADggEB
AFmWhVm6oP7gskdIxDf3QcGMXuvizacOscx/ape7KAgrxOSSB3+jI0MVCNmMY1uy
45D1zswwjfkVZBnEvzNFIY/MtzkNUZNdcwIiZK6Q7hQFnvaW8AMgyxTbRlddH50N
hO6yp5CgNYhk4WkhbTgpxD8+r5ltSYIH6VIx/F3Ikjhc6Mzquju5NFDqJupkrRx4
9dm1uc0lLe8Q93hHPg/E1pkt4pPy5fQtTV/iQRJ9uKp2vWD9CvsLXMrqOBw7CXYw
2HEILetyDD+4YAEMytGNmeG0Vus7eGX9M035rujkd13XCEDMbDugG0LOcmkuReVb
LA5DjL/Ckbc3XrCOzGNhqVI=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:08 2026 by rpki-client