
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Bjhs09FZdKnXC9FpQu9OnjlfgDU.roa
File: Bjhs09FZdKnXC9FpQu9OnjlfgDU.roa (raw, json)
Hash identifier: LIcaH2L0Ewe4IPALqfZnHYguFa9Zzuk5/ybsWFW2kt8=
Subject key identifier: 06:38:6C:D3:D1:59:74:A9:D7:0B:D1:69:42:EF:4E:9E:39:5F:80:35
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1684
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Bjhs09FZdKnXC9FpQu9OnjlfgDU.roa
Signing time: Tue 31 Mar 2026 08:01:57 +0000
ROA not before: Tue 31 Mar 2026 08:01:57 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5764 (0x1684)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:01:57 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=06386CD3D15974A9D70BD16942EF4E9E395F8035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8a:a3:6f:9b:b9:05:7a:5f:95:1f:5c:42:8f:
03:fc:4f:c3:7a:cb:b3:49:15:fd:bf:bc:63:6e:ba:
d2:2f:70:ae:ab:55:31:0a:c3:08:53:8d:7b:70:c0:
86:1e:43:1a:59:7e:99:e3:59:e1:ef:e7:14:ce:d6:
7d:51:38:6d:41:ad:98:7a:c3:ae:44:db:2e:6a:9a:
e4:3c:14:3a:1d:bf:8e:de:67:99:78:3d:79:54:2e:
aa:46:0e:ee:20:06:c1:ba:ce:ab:5a:42:03:69:88:
f1:79:08:81:1c:6a:da:3a:d2:1c:b0:ce:d9:be:d0:
d1:32:ad:30:4f:c2:3f:b2:a7:06:22:7b:df:8c:25:
28:a1:be:39:57:30:53:0b:31:69:62:ef:86:11:94:
ae:3a:64:f7:9f:42:7d:ad:09:01:87:a0:2f:43:5c:
4a:7b:e5:fa:d3:85:fb:49:2e:1e:a7:a1:e5:cf:9b:
f2:59:a1:d1:8c:65:c6:ea:0d:a5:24:43:40:50:3e:
19:22:5e:dd:5f:f0:34:72:3d:38:8c:75:2a:b7:a9:
00:17:f2:c3:0e:2c:ab:05:30:b3:b7:e4:0f:6e:b5:
8a:1e:28:7d:8c:f2:30:07:3e:aa:fd:27:cb:37:e7:
f7:d6:a6:34:0b:d0:93:f0:e3:4c:cc:92:5b:f4:87:
b2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:38:6C:D3:D1:59:74:A9:D7:0B:D1:69:42:EF:4E:9E:39:5F:80:35
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Bjhs09FZdKnXC9FpQu9OnjlfgDU.roa
sbgp-ipAddrBlock: critical
IPv4:
49.106.205.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:34:da:5a:09:35:04:93:a2:32:1f:f6:8d:ae:1e:cc:de:15:
81:a7:e5:c8:83:27:b3:d2:59:41:67:57:99:15:9d:99:22:95:
36:e3:2e:b2:23:ff:17:05:16:29:cf:01:34:b1:92:93:56:5e:
ce:88:93:6f:06:2e:67:92:58:6d:1b:01:57:66:a6:dc:b6:9c:
92:25:d6:91:4d:12:43:e3:e0:20:bf:f2:61:af:0d:56:cc:0f:
86:50:4f:ac:d8:52:ee:50:b9:71:a7:cb:91:ee:35:43:94:d8:
63:ac:f8:c5:8b:f8:07:a8:6c:ad:67:a5:3d:3d:f9:66:80:ab:
78:e5:c6:4a:ea:fc:17:21:86:0e:46:fe:5c:8a:0d:87:1e:d4:
51:1f:9e:5a:d9:ee:be:2d:a0:a9:d6:3a:27:be:41:9a:e4:f8:
70:a6:6c:1c:a9:05:11:d9:56:fd:4c:da:45:ff:be:75:78:d8:
84:d1:1e:91:54:7e:81:5f:b3:cc:97:e5:9a:66:5a:9b:02:1f:
ec:76:99:71:6c:ec:dc:a8:a1:bd:41:45:7f:73:69:07:81:23:
43:df:c3:6d:16:34:7c:d6:bf:ad:c6:61:8f:ce:20:7c:5a:31:
68:be:f4:2c:41:f3:88:58:13:88:8f:56:91:c9:13:df:d3:23:
a0:20:40:12
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFoQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODAxNTdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA2Mzg2Q0QzRDE1OTc0
QTlENzBCRDE2OTQyRUY0RTlFMzk1RjgwMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+iqNvm7kFel+VH1xCjwP8T8N6y7NJFf2/vGNuutIvcK6rVTEK
wwhTjXtwwIYeQxpZfpnjWeHv5xTO1n1ROG1BrZh6w65E2y5qmuQ8FDodv47eZ5l4
PXlULqpGDu4gBsG6zqtaQgNpiPF5CIEcato60hywztm+0NEyrTBPwj+ypwYie9+M
JSihvjlXMFMLMWli74YRlK46ZPefQn2tCQGHoC9DXEp75frThftJLh6noeXPm/JZ
odGMZcbqDaUkQ0BQPhkiXt1f8DRyPTiMdSq3qQAX8sMOLKsFMLO35A9utYoeKH2M
8jAHPqr9J8s35/fWpjQL0JPw40zMklv0h7IZAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUBjhs09FZdKnXC9FpQu9OnjlfgDUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L0JqaHMwOUZaZEtuWEM5RnBRdTlPbmpsZmdEVS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAxas0wDQYJKoZIhvcNAQELBQADggEB
AMA02loJNQSTojIf9o2uHszeFYGn5ciDJ7PSWUFnV5kVnZkilTbjLrIj/xcFFinP
ATSxkpNWXs6Ik28GLmeSWG0bAVdmpty2nJIl1pFNEkPj4CC/8mGvDVbMD4ZQT6zY
Uu5QuXGny5HuNUOU2GOs+MWL+AeobK1npT09+WaAq3jlxkrq/Bchhg5G/lyKDYce
1FEfnlrZ7r4toKnWOie+QZrk+HCmbBypBRHZVv1M2kX/vnV42ITRHpFUfoFfs8yX
5ZpmWpsCH+x2mXFs7Nyoob1BRX9zaQeBI0Pfw20WNHzWv63GYY/OIHxaMWi+9CxB
84hYE4iPVpHJE9/TI6AgQBI=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:00 2026 by rpki-client