
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/I1jMv7JsmdLaXwGTctAQGGKVIqU.roa
File: I1jMv7JsmdLaXwGTctAQGGKVIqU.roa (raw, json)
Hash identifier: h1W3+ZL1fmY5JUi5oBahcLpv6qMuwsfcCwHpERmB3HA=
Subject key identifier: 23:58:CC:BF:B2:6C:99:D2:DA:5F:01:93:72:D0:10:18:62:95:22:A5
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1638
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/I1jMv7JsmdLaXwGTctAQGGKVIqU.roa
Signing time: Tue 31 Mar 2026 08:01:24 +0000
ROA not before: Tue 31 Mar 2026 08:01:24 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5688 (0x1638)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:01:24 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=2358CCBFB26C99D2DA5F019372D01018629522A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ff:fc:4f:e4:8e:76:46:5b:50:84:7e:a5:46:
27:5b:d6:98:a1:f9:1f:ff:29:36:55:0d:c0:29:a2:
03:bb:de:32:fd:74:c4:ed:b5:85:82:7b:5e:a1:11:
a3:54:5e:89:23:26:20:bf:27:6a:65:92:19:4e:7c:
3b:ce:0d:22:74:6b:53:81:ef:eb:96:24:50:37:a0:
02:1d:08:b6:d2:37:9d:58:d5:7c:ec:a1:6a:ee:fe:
56:2b:e3:05:94:ef:6f:68:b7:4b:f1:bd:6f:f8:53:
0b:e5:0b:61:ab:2d:46:38:d4:6b:48:f4:8f:40:93:
1e:25:24:8a:cf:14:d7:7c:d1:aa:fb:47:bf:fe:20:
7e:f4:af:75:8f:98:b2:64:66:10:20:98:24:79:cd:
48:17:06:3f:54:87:d2:89:fa:d8:46:a9:51:87:0a:
1d:d8:34:00:6a:33:f8:9b:da:8e:07:56:9a:21:fe:
4b:51:82:34:6e:64:68:c1:e0:d4:00:5e:6c:93:78:
c4:be:33:cf:a0:46:4a:15:3f:2e:a5:08:7f:48:4a:
df:a1:9b:26:22:7d:51:f5:33:4c:8c:f2:5f:73:5a:
eb:86:12:46:cb:73:be:4e:6b:89:23:cf:65:ff:84:
9b:44:36:65:35:bb:82:53:ee:f2:3b:21:00:ca:aa:
1f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:58:CC:BF:B2:6C:99:D2:DA:5F:01:93:72:D0:10:18:62:95:22:A5
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/I1jMv7JsmdLaXwGTctAQGGKVIqU.roa
sbgp-ipAddrBlock: critical
IPv4:
49.106.216.0/24
Signature Algorithm: sha256WithRSAEncryption
92:c4:3c:9e:8c:e1:ce:69:fe:4a:cc:fc:f0:7f:90:16:ab:b0:
9c:0b:6d:aa:72:9c:84:da:e6:e2:3e:b9:ea:f8:eb:61:2a:07:
d9:f4:c0:56:c3:5c:26:c7:89:bb:de:73:e8:c6:8d:45:31:56:
fe:0a:a9:4e:a8:40:e9:65:76:f8:77:ab:57:58:38:5d:48:20:
69:78:b9:7e:93:b9:49:12:6c:12:68:d3:77:6f:6c:13:02:f1:
19:68:09:9e:a4:7d:ed:85:bb:2d:8a:a9:45:ff:41:20:ae:19:
8a:2d:08:d2:f7:76:bc:08:d9:35:59:a9:ee:d3:5e:75:b9:b9:
9f:2d:13:be:f9:c7:43:d8:a5:d6:38:10:6a:01:8c:e9:2d:7e:
8f:8c:48:68:da:49:3b:b7:fd:16:f1:d7:08:99:39:91:29:9d:
60:db:9b:c7:30:f6:87:35:98:3e:82:da:8b:c8:b1:c2:a4:e9:
f9:10:8d:02:72:75:a1:d3:ab:26:9a:1e:2b:ef:62:f4:92:48:
e4:d9:d6:4f:fc:ec:85:cb:a4:2c:aa:f7:1c:30:66:4e:59:3d:
99:51:d8:48:23:4e:bb:48:b2:69:7a:c6:f8:6c:7b:6b:cb:13:
52:9b:42:db:ed:4f:39:c7:fc:2e:10:c6:4e:7a:1f:d2:eb:6e:
46:10:65:b1
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFjgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODAxMjRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDIzNThDQ0JGQjI2Qzk5
RDJEQTVGMDE5MzcyRDAxMDE4NjI5NTIyQTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDB//xP5I52RltQhH6lRidb1pih+R//KTZVDcApogO73jL9dMTt
tYWCe16hEaNUXokjJiC/J2plkhlOfDvODSJ0a1OB7+uWJFA3oAIdCLbSN51Y1Xzs
oWru/lYr4wWU729ot0vxvW/4UwvlC2GrLUY41GtI9I9Akx4lJIrPFNd80ar7R7/+
IH70r3WPmLJkZhAgmCR5zUgXBj9Uh9KJ+thGqVGHCh3YNABqM/ib2o4HVpoh/ktR
gjRuZGjB4NQAXmyTeMS+M8+gRkoVPy6lCH9ISt+hmyYifVH1M0yM8l9zWuuGEkbL
c75Oa4kjz2X/hJtENmU1u4JT7vI7IQDKqh8nAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUI1jMv7JsmdLaXwGTctAQGGKVIqUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L0kxak12N0pzbWRMYVh3R1RjdEFRR0dLVklxVS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAxatgwDQYJKoZIhvcNAQELBQADggEB
AJLEPJ6M4c5p/krM/PB/kBarsJwLbapynITa5uI+uer462EqB9n0wFbDXCbHibve
c+jGjUUxVv4KqU6oQOlldvh3q1dYOF1IIGl4uX6TuUkSbBJo03dvbBMC8RloCZ6k
fe2Fuy2KqUX/QSCuGYotCNL3drwI2TVZqe7TXnW5uZ8tE775x0PYpdY4EGoBjOkt
fo+MSGjaSTu3/Rbx1wiZOZEpnWDbm8cw9oc1mD6C2ovIscKk6fkQjQJydaHTqyaa
HivvYvSSSOTZ1k/87IXLpCyq9xwwZk5ZPZlR2EgjTrtIsml6xvhse2vLE1KbQtvt
TznH/C4Qxk56H9LrbkYQZbE=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:48:09 2026 by rpki-client