
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/cGa8sHRo7WF0M7eitTDlm47wtZo.roa
File: cGa8sHRo7WF0M7eitTDlm47wtZo.roa (raw, json)
Hash identifier: Kx/itYTl48zDnBAIzFaLLNsRhYffKmh/XGxZwj4NaNg=
Subject key identifier: 70:66:BC:B0:74:68:ED:61:74:33:B7:A2:B5:30:E5:9B:8E:F0:B5:9A
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 16B0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cGa8sHRo7WF0M7eitTDlm47wtZo.roa
Signing time: Tue 31 Mar 2026 08:02:18 +0000
ROA not before: Tue 31 Mar 2026 08:02:18 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.103.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5808 (0x16b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:02:18 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=7066BCB07468ED617433B7A2B530E59B8EF0B59A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ae:fb:b8:28:21:6d:51:1a:4c:b7:f2:18:69:
58:68:f4:e9:ae:17:fc:21:e0:7b:fe:5a:6f:5d:14:
41:e7:50:be:22:0a:1c:01:f3:5e:a8:23:44:ea:d6:
1d:f8:85:72:36:10:60:79:88:65:be:55:c3:7d:73:
ce:94:6c:c9:47:e0:0c:e8:9d:b1:74:39:d0:cf:4a:
c4:78:8f:de:4f:81:72:73:5e:f2:e9:06:99:3f:68:
9b:61:a5:4d:d5:42:e8:3a:91:90:f1:f6:74:cd:13:
2c:36:2b:ec:ed:11:fe:dd:e1:8a:aa:9e:c5:3d:0f:
ce:43:69:36:06:69:fd:c1:0f:d7:cd:a0:d7:d1:d7:
48:ba:f0:cf:af:5e:0d:b6:45:2d:27:bd:9e:08:ac:
f3:d1:64:b6:93:ff:b6:7c:eb:e7:2a:2a:29:af:cb:
72:4b:17:6d:b3:4a:61:2e:1f:fa:df:e9:77:e5:6a:
b6:e9:1e:68:d5:0b:42:46:9a:58:59:87:49:3e:2f:
f5:d4:9c:56:e1:6a:1b:cf:23:09:1b:2e:e5:b7:7e:
b5:99:09:4c:27:50:81:8d:4b:18:89:7f:99:92:d3:
c8:55:e9:da:a6:2d:38:1f:13:7d:f1:78:8e:c4:66:
41:a5:d8:90:0f:c2:9c:b6:85:77:36:93:b0:d4:92:
dc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:66:BC:B0:74:68:ED:61:74:33:B7:A2:B5:30:E5:9B:8E:F0:B5:9A
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cGa8sHRo7WF0M7eitTDlm47wtZo.roa
sbgp-ipAddrBlock: critical
IPv4:
49.103.19.0/24
Signature Algorithm: sha256WithRSAEncryption
87:c6:81:cf:93:e6:37:38:59:45:56:da:d6:a6:3b:21:c6:3b:
f2:1f:08:01:9d:18:f7:51:9e:18:16:39:b0:0b:44:01:9b:69:
0b:c7:fa:87:88:3a:66:d0:46:e6:83:2a:76:34:40:77:21:c8:
5a:4a:ae:21:eb:f7:64:dd:e5:a7:52:92:a0:d5:ef:5b:60:ed:
11:c8:de:c5:95:95:3b:a2:46:53:53:88:b8:1e:b7:ab:93:05:
ba:35:c9:97:73:8e:7c:79:58:a6:b5:25:a0:23:0d:68:40:12:
81:22:06:2a:dd:5b:87:be:be:7c:95:de:93:f0:72:9c:64:43:
be:8f:de:8c:ce:67:44:ae:d2:26:69:fd:45:2a:95:2c:62:ba:
67:4f:9c:26:e0:cb:d4:82:94:e9:d6:97:e6:ac:0d:3a:8a:b8:
14:d7:a0:28:7c:c0:38:76:02:3c:0a:41:fb:fd:5f:a6:fa:c2:
fb:c1:da:31:8b:2e:01:74:1a:bf:5d:cc:ef:b5:7d:9c:0b:fe:
39:f7:90:98:a6:4a:74:cd:92:28:ec:ff:54:16:ed:d2:15:73:
15:21:d8:74:54:cf:06:35:c0:de:e0:09:2c:93:53:68:a3:fa:
0e:7b:66:dc:32:99:3d:c4:ef:e5:1b:8b:87:c7:46:ef:71:0d:
d2:20:ea:7e
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFrAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODAyMThaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDcwNjZCQ0IwNzQ2OEVE
NjE3NDMzQjdBMkI1MzBFNTlCOEVGMEI1OUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4rvu4KCFtURpMt/IYaVho9OmuF/wh4Hv+Wm9dFEHnUL4iChwB
816oI0Tq1h34hXI2EGB5iGW+VcN9c86UbMlH4AzonbF0OdDPSsR4j95PgXJzXvLp
Bpk/aJthpU3VQug6kZDx9nTNEyw2K+ztEf7d4YqqnsU9D85DaTYGaf3BD9fNoNfR
10i68M+vXg22RS0nvZ4IrPPRZLaT/7Z86+cqKimvy3JLF22zSmEuH/rf6Xflarbp
HmjVC0JGmlhZh0k+L/XUnFbhahvPIwkbLuW3frWZCUwnUIGNSxiJf5mS08hV6dqm
LTgfE33xeI7EZkGl2JAPwpy2hXc2k7DUktwJAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUcGa8sHRo7WF0M7eitTDlm47wtZowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L2NHYThzSFJvN1dGME03ZWl0VERsbTQ3d3Raby5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAxZxMwDQYJKoZIhvcNAQELBQADggEB
AIfGgc+T5jc4WUVW2tamOyHGO/IfCAGdGPdRnhgWObALRAGbaQvH+oeIOmbQRuaD
KnY0QHchyFpKriHr92Td5adSkqDV71tg7RHI3sWVlTuiRlNTiLget6uTBbo1yZdz
jnx5WKa1JaAjDWhAEoEiBirdW4e+vnyV3pPwcpxkQ76P3ozOZ0Su0iZp/UUqlSxi
umdPnCbgy9SClOnWl+asDTqKuBTXoCh8wDh2AjwKQfv9X6b6wvvB2jGLLgF0Gr9d
zO+1fZwL/jn3kJimSnTNkijs/1QW7dIVcxUh2HRUzwY1wN7gCSyTU2ij+g57Ztwy
mT3E7+Ubi4fHRu9xDdIg6n4=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:42:52 2026 by rpki-client