
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/VgbtBSJgZ147Awmgr9vdsQy0fs0.roa
File: VgbtBSJgZ147Awmgr9vdsQy0fs0.roa (raw, json)
Hash identifier: Jy045rAgEEt6pDE7dzHW/DboLumD3VRcuLuZKINQJ74=
Subject key identifier: 56:06:ED:05:22:60:67:5E:3B:03:09:A0:AF:DB:DD:B1:0C:B4:7E:CD
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1383
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VgbtBSJgZ147Awmgr9vdsQy0fs0.roa
Signing time: Tue 31 Mar 2026 07:55:43 +0000
ROA not before: Tue 31 Mar 2026 07:55:44 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.97.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4995 (0x1383)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:55:44 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=5606ED052260675E3B0309A0AFDBDDB10CB47ECD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:9a:13:07:e9:66:88:53:d6:68:08:7d:fe:2f:
d1:e1:fd:a2:30:10:c4:8f:c2:59:1a:53:fc:a7:60:
15:57:1d:9f:30:12:d5:84:46:8c:c8:53:77:94:76:
a5:41:4f:29:2a:9a:a5:4a:93:90:2d:7d:03:f3:17:
47:22:6e:da:25:fe:e2:9d:57:0e:8e:78:c7:35:17:
db:df:6e:59:22:3b:a8:ac:3b:2e:f9:99:1d:e6:52:
c3:c8:48:41:29:43:1a:b0:0a:49:25:85:ee:b0:30:
99:45:aa:d9:ab:1a:08:32:79:de:3a:41:66:dc:1a:
69:98:dd:f1:1a:14:b9:69:78:1b:ab:35:a3:75:dd:
fc:17:e5:9e:8c:b6:70:6a:bf:90:8a:e4:ab:03:29:
43:93:5e:72:8d:ec:6c:d1:6b:93:8c:e2:b2:81:4c:
a5:ab:d0:d4:62:5f:8b:00:0f:f4:07:07:28:13:4a:
8a:a6:fa:56:99:b7:b2:1c:1c:28:93:51:6c:64:83:
85:41:8b:88:96:06:73:97:4e:23:9a:a7:b0:42:fc:
cb:6b:20:97:ed:c3:a4:9c:51:81:c1:c9:49:1b:4c:
10:de:82:69:44:f2:5c:3c:8a:c1:7b:6b:20:0c:2d:
89:df:5c:89:7b:0a:45:af:96:39:d3:73:a4:ad:75:
ad:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:06:ED:05:22:60:67:5E:3B:03:09:A0:AF:DB:DD:B1:0C:B4:7E:CD
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VgbtBSJgZ147Awmgr9vdsQy0fs0.roa
sbgp-ipAddrBlock: critical
IPv4:
49.97.105.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:b3:5e:63:94:b6:a0:f1:54:b9:b3:90:3e:f7:4a:33:a1:1c:
f4:2e:d2:b0:9f:e8:39:b1:06:eb:52:ae:46:c6:6a:88:6e:9f:
ee:1f:19:b4:c6:2c:5b:0b:b2:4f:4c:78:9a:f8:6c:f2:de:69:
fb:1e:5b:3e:85:57:a8:bd:8d:d4:7d:01:cf:2b:e9:2a:6f:06:
69:30:50:4d:43:48:75:5b:80:b0:6c:e0:56:c9:66:34:82:ca:
5c:2d:3e:66:ca:79:a8:34:5d:87:68:db:5d:74:04:a8:89:92:
9d:84:06:ae:20:54:4a:fe:73:0e:0b:d6:da:cc:6b:f5:30:f1:
d6:3d:0e:d6:c7:0c:3e:84:b6:cb:58:fe:d7:5e:b5:88:e5:ae:
46:74:0e:d4:a9:68:ab:03:ae:81:5e:4f:ec:8f:6c:62:4d:e6:
32:37:d7:e9:67:67:fb:5e:59:f2:87:a5:51:e6:8e:49:25:9c:
52:d2:0d:d6:c7:3d:77:92:3c:77:2e:e5:b2:08:fa:25:26:0b:
dd:f3:58:c7:66:84:c2:b3:db:88:a3:0f:de:8c:72:0f:0f:9f:
fc:b6:79:50:ca:37:ed:ae:18:98:f4:1a:db:30:2d:dc:b4:a6:
73:8b:6d:98:8d:18:cc:f4:87:a1:cd:56:b6:b3:c7:53:73:d7:
b3:f8:47:23
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICE4MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
NzU1NDRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDU2MDZFRDA1MjI2MDY3
NUUzQjAzMDlBMEFGREJEREIxMENCNDdFQ0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDymhMH6WaIU9ZoCH3+L9Hh/aIwEMSPwlkaU/ynYBVXHZ8wEtWE
RozIU3eUdqVBTykqmqVKk5AtfQPzF0cibtol/uKdVw6OeMc1F9vfblkiO6isOy75
mR3mUsPISEEpQxqwCkklhe6wMJlFqtmrGggyed46QWbcGmmY3fEaFLlpeBurNaN1
3fwX5Z6MtnBqv5CK5KsDKUOTXnKN7GzRa5OM4rKBTKWr0NRiX4sAD/QHBygTSoqm
+laZt7IcHCiTUWxkg4VBi4iWBnOXTiOap7BC/MtrIJftw6ScUYHByUkbTBDegmlE
8lw8isF7ayAMLYnfXIl7CkWvljnTc6Stda0FAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUVgbtBSJgZ147Awmgr9vdsQy0fs0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L1ZnYnRCU0pnWjE0N0F3bWdyOXZkc1F5MGZzMC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAxYWkwDQYJKoZIhvcNAQELBQADggEB
AG2zXmOUtqDxVLmzkD73SjOhHPQu0rCf6DmxButSrkbGaohun+4fGbTGLFsLsk9M
eJr4bPLeafseWz6FV6i9jdR9Ac8r6SpvBmkwUE1DSHVbgLBs4FbJZjSCylwtPmbK
eag0XYdo2110BKiJkp2EBq4gVEr+cw4L1trMa/Uw8dY9DtbHDD6EtstY/tdetYjl
rkZ0DtSpaKsDroFeT+yPbGJN5jI31+lnZ/teWfKHpVHmjkklnFLSDdbHPXeSPHcu
5bII+iUmC93zWMdmhMKz24ijD96Mcg8Pn/y2eVDKN+2uGJj0GtswLdy0pnOLbZiN
GMz0h6HNVrazx1Nz17P4RyM=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:53 2026 by rpki-client