
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/9LMNkYj3nuCxNRmkGKaGySJ8doY.roa
File: 9LMNkYj3nuCxNRmkGKaGySJ8doY.roa (raw, json)
Hash identifier: jSchTGMd1lkYuXqizS/g8mxnG3L4rxhYX0ljGAJnr8A=
Subject key identifier: F4:B3:0D:91:88:F7:9E:E0:B1:35:19:A4:18:A6:86:C9:22:7C:76:86
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1646
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9LMNkYj3nuCxNRmkGKaGySJ8doY.roa
Signing time: Tue 31 Mar 2026 08:01:30 +0000
ROA not before: Tue 31 Mar 2026 08:01:30 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5702 (0x1646)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:01:30 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=F4B30D9188F79EE0B13519A418A686C9227C7686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:01:db:5a:64:9f:ee:93:b5:c9:0f:c4:f9:4d:
6d:c3:07:ba:d2:1b:1e:20:74:23:70:00:9d:44:2b:
3e:4a:09:0f:60:48:00:4d:4b:98:3a:52:09:4c:b9:
6a:43:aa:07:20:01:1b:e3:c8:23:98:6c:4d:4c:2a:
66:7b:c6:0d:90:15:19:70:bd:13:37:60:4c:f6:06:
30:19:78:dd:f3:19:33:a4:04:ff:d5:1b:db:63:84:
a9:e2:d7:89:1b:86:1d:50:90:c8:2d:5f:ce:94:fe:
db:a5:cf:6b:6c:e6:5a:0d:7a:5e:e9:ba:9d:e2:19:
42:b9:da:a0:f3:be:3d:1c:14:07:4b:45:8b:84:a2:
8f:f3:5c:40:4f:83:1c:1b:f4:f6:68:0b:b5:c0:e5:
32:24:4e:dc:2a:01:c5:c6:33:55:bc:2a:ed:b0:2d:
73:e9:81:21:d5:09:d9:6e:64:9d:c6:b4:17:dd:f5:
42:98:d2:1b:e6:14:38:28:21:fe:02:d3:56:24:a5:
ce:80:ea:42:3e:28:cb:96:0a:d1:9d:94:c5:3b:5c:
05:84:b3:99:30:9e:f1:c2:b0:79:33:8b:67:39:c2:
d2:4c:5d:3f:0f:11:59:91:4c:a8:cf:e5:36:f3:e1:
d3:8e:0f:2d:68:8c:05:f8:2a:83:3e:94:fb:ce:b1:
45:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B3:0D:91:88:F7:9E:E0:B1:35:19:A4:18:A6:86:C9:22:7C:76:86
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9LMNkYj3nuCxNRmkGKaGySJ8doY.roa
sbgp-ipAddrBlock: critical
IPv4:
49.106.213.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:ff:41:4b:b4:b9:bd:f0:41:28:e6:dd:6e:c4:a4:14:7c:37:
77:43:1d:2a:a2:a0:46:f4:c6:e9:a7:96:2e:27:6c:cb:56:63:
2b:84:a6:f7:f4:5c:ae:9a:82:01:15:eb:6b:2a:5e:2f:c5:57:
f3:6f:43:ec:a6:70:43:b1:42:d2:8d:11:9f:5d:a1:a4:15:16:
64:82:c5:80:c5:ff:37:1f:6e:7c:b1:f9:1a:df:c0:55:5e:00:
df:dd:9c:9e:a8:62:8a:54:f1:0d:1d:87:7e:b3:0b:c9:27:76:
2a:46:f4:ed:cf:b6:53:f7:05:7d:a4:1d:1e:db:0b:ea:34:5b:
f2:04:67:65:29:7a:7d:aa:bb:9d:2f:39:07:7b:35:35:23:a7:
11:5c:91:e0:31:76:68:7b:f5:cc:8e:97:84:59:34:52:da:7b:
93:ea:12:25:07:c3:03:fe:41:d6:29:cc:7e:0c:e2:40:47:00:
08:54:7c:ef:b6:c1:2a:9c:0e:ca:1b:3e:d7:b4:22:8e:41:a1:
42:99:fb:22:c7:41:c6:b3:30:20:1f:79:5f:50:69:08:64:55:
03:1f:87:2d:d4:32:de:df:13:d9:b0:d9:b1:30:9f:bb:97:0a:
3e:20:9d:05:77:a3:75:94:64:f4:d0:e5:39:8b:15:40:e3:1b:
e5:c0:42:44
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFkYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODAxMzBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEY0QjMwRDkxODhGNzlF
RTBCMTM1MTlBNDE4QTY4NkM5MjI3Qzc2ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvAdtaZJ/uk7XJD8T5TW3DB7rSGx4gdCNwAJ1EKz5KCQ9gSABN
S5g6UglMuWpDqgcgARvjyCOYbE1MKmZ7xg2QFRlwvRM3YEz2BjAZeN3zGTOkBP/V
G9tjhKni14kbhh1QkMgtX86U/tulz2ts5loNel7pup3iGUK52qDzvj0cFAdLRYuE
oo/zXEBPgxwb9PZoC7XA5TIkTtwqAcXGM1W8Ku2wLXPpgSHVCdluZJ3GtBfd9UKY
0hvmFDgoIf4C01Ykpc6A6kI+KMuWCtGdlMU7XAWEs5kwnvHCsHkzi2c5wtJMXT8P
EVmRTKjP5Tbz4dOODy1ojAX4KoM+lPvOsUUzAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU9LMNkYj3nuCxNRmkGKaGySJ8doYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5LzlMTU5rWWozbnVDeE5SbWtHS2FHeVNKOGRvWS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAxatUwDQYJKoZIhvcNAQELBQADggEB
AGr/QUu0ub3wQSjm3W7EpBR8N3dDHSqioEb0xumnli4nbMtWYyuEpvf0XK6aggEV
62sqXi/FV/NvQ+ymcEOxQtKNEZ9doaQVFmSCxYDF/zcfbnyx+RrfwFVeAN/dnJ6o
YopU8Q0dh36zC8kndipG9O3PtlP3BX2kHR7bC+o0W/IEZ2Upen2qu50vOQd7NTUj
pxFckeAxdmh79cyOl4RZNFLae5PqEiUHwwP+QdYpzH4M4kBHAAhUfO+2wSqcDsob
Pte0Io5BoUKZ+yLHQcazMCAfeV9QaQhkVQMfhy3UMt7fE9mw2bEwn7uXCj4gnQV3
o3WUZPTQ5TmLFUDjG+XAQkQ=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:40 2026 by rpki-client