
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/YW-CXw_ghap1raDm-hbK9wqoafE.roa
File: YW-CXw_ghap1raDm-hbK9wqoafE.roa (raw, json)
Hash identifier: auFCXTomlUPoWvLNwIYpyBEIeaHMDwg8FdhiwYqJi6E=
Subject key identifier: 61:6F:82:5F:0F:E0:85:AA:75:AD:A0:E6:FA:16:CA:F7:0A:A8:69:F1
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1811
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YW-CXw_ghap1raDm-hbK9wqoafE.roa
Signing time: Tue 31 Mar 2026 08:05:14 +0000
ROA not before: Tue 31 Mar 2026 08:05:14 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.103.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6161 (0x1811)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:05:14 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=616F825F0FE085AA75ADA0E6FA16CAF70AA869F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e1:93:35:6b:fc:36:0d:4c:76:35:b6:74:de:
1e:e0:75:7f:44:3b:6f:3d:f2:81:ce:ce:af:1d:ef:
fd:76:75:b7:cc:f3:e3:39:90:0f:80:78:9d:33:f4:
d2:f0:81:df:d0:21:80:f4:fb:5b:d9:d4:ab:f8:f1:
e5:59:b5:9e:9a:d9:5b:ac:f6:60:bd:53:05:10:b7:
d2:46:e3:e7:0d:f0:0d:d1:4c:82:9d:2c:c1:5a:54:
38:d7:ae:7f:40:6c:cb:38:c1:5e:09:84:0e:5a:b3:
ff:e4:96:87:94:f1:c1:cc:5f:0e:6a:09:31:8c:8d:
91:f1:51:37:47:c3:dd:0b:67:09:ea:65:df:7f:9e:
43:91:d2:4e:ce:4a:44:ea:6b:ee:a5:25:06:14:9a:
21:26:d3:7a:e7:b2:94:e4:98:2a:45:82:81:79:3d:
4a:5b:34:71:c5:7f:1d:5c:c7:5c:80:c5:44:57:e2:
18:0e:bf:62:14:72:5a:38:28:9d:bb:35:01:32:10:
b8:e4:96:57:c4:7e:39:98:55:e1:74:50:b6:b3:4c:
75:3b:34:19:ca:bf:dd:45:dc:71:ea:88:0a:8a:4b:
21:ce:6e:d8:fa:c8:dc:ff:13:49:f5:90:a4:a7:d8:
c7:76:56:c4:49:01:a3:fd:80:ce:ab:a4:6f:96:83:
47:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:6F:82:5F:0F:E0:85:AA:75:AD:A0:E6:FA:16:CA:F7:0A:A8:69:F1
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YW-CXw_ghap1raDm-hbK9wqoafE.roa
sbgp-ipAddrBlock: critical
IPv4:
49.103.16.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:85:de:64:b5:aa:15:b9:3e:79:86:33:26:11:97:2e:7b:d3:
6a:31:c5:67:d4:59:47:fd:b1:80:a3:c3:ad:90:ea:ec:d5:b4:
ba:f6:d3:b7:00:46:37:82:be:29:25:a1:9a:ab:f9:0e:61:dd:
2a:27:ec:ab:f4:5b:89:53:91:88:80:79:75:d5:3e:bb:0d:37:
e7:af:e0:d4:55:a9:c0:d6:e3:a4:e7:8e:37:98:de:0f:9d:b0:
96:9f:96:2a:5f:92:ad:a2:6d:ac:85:bb:53:d8:b4:53:23:01:
fc:05:0b:92:89:1f:b1:e4:00:74:56:24:93:b2:26:4c:f2:eb:
14:f8:ab:b9:d1:ba:dc:47:a7:27:c0:37:87:85:62:cd:ca:64:
c0:6f:1d:41:d5:92:34:2d:5c:a9:80:e0:0a:e9:80:f3:84:89:
e8:9f:94:a1:89:ea:00:25:c8:12:0d:08:ac:e9:17:6c:3b:59:
9e:8d:e0:0a:6f:97:af:ff:5b:7d:00:35:f0:e2:a2:c6:bc:90:
2e:12:96:4c:b3:ca:12:da:68:0f:76:3c:b5:2d:11:08:9a:e5:
4c:42:9e:6a:e0:44:32:4a:11:e3:df:57:63:43:00:32:b9:06:
c6:42:d6:be:8f:15:a4:e6:77:69:ca:47:03:bf:99:bb:62:c8:
5b:f3:6f:15
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICGBEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODA1MTRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDYxNkY4MjVGMEZFMDg1
QUE3NUFEQTBFNkZBMTZDQUY3MEFBODY5RjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCe4ZM1a/w2DUx2NbZ03h7gdX9EO2898oHOzq8d7/12dbfM8+M5
kA+AeJ0z9NLwgd/QIYD0+1vZ1Kv48eVZtZ6a2Vus9mC9UwUQt9JG4+cN8A3RTIKd
LMFaVDjXrn9AbMs4wV4JhA5as//kloeU8cHMXw5qCTGMjZHxUTdHw90LZwnqZd9/
nkOR0k7OSkTqa+6lJQYUmiEm03rnspTkmCpFgoF5PUpbNHHFfx1cx1yAxURX4hgO
v2IUclo4KJ27NQEyELjkllfEfjmYVeF0ULazTHU7NBnKv91F3HHqiAqKSyHObtj6
yNz/E0n1kKSn2Md2VsRJAaP9gM6rpG+Wg0elAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUYW+CXw/ghap1raDm+hbK9wqoafEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L1lXLUNYd19naGFwMXJhRG0taGJLOXdxb2FmRS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAxZxAwDQYJKoZIhvcNAQELBQADggEB
AK6F3mS1qhW5PnmGMyYRly5702oxxWfUWUf9sYCjw62Q6uzVtLr207cARjeCvikl
oZqr+Q5h3Son7Kv0W4lTkYiAeXXVPrsNN+ev4NRVqcDW46TnjjeY3g+dsJaflipf
kq2ibayFu1PYtFMjAfwFC5KJH7HkAHRWJJOyJkzy6xT4q7nRutxHpyfAN4eFYs3K
ZMBvHUHVkjQtXKmA4ArpgPOEieiflKGJ6gAlyBINCKzpF2w7WZ6N4Apvl6//W30A
NfDiosa8kC4SlkyzyhLaaA92PLUtEQia5UxCnmrgRDJKEePfV2NDADK5BsZC1r6P
FaTmd2nKRwO/mbtiyFvzbxU=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:53 2026 by rpki-client