
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/e7BpnVmmBw5GfWXoDE3yusCHYXo.roa
File: e7BpnVmmBw5GfWXoDE3yusCHYXo.roa (raw, json)
Hash identifier: tiPVTeEopzSrsaxe9BE31XaRhkQy3qqt6LSJMPI09so=
Subject key identifier: 7B:B0:69:9D:59:A6:07:0E:46:7D:65:E8:0C:4D:F2:BA:C0:87:61:7A
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 16C8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/e7BpnVmmBw5GfWXoDE3yusCHYXo.roa
Signing time: Tue 31 Mar 2026 08:02:29 +0000
ROA not before: Tue 31 Mar 2026 08:02:29 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 220.210.108.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5832 (0x16c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:02:29 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=7BB0699D59A6070E467D65E80C4DF2BAC087617A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:73:a3:be:dd:12:c4:cc:83:69:16:29:1b:f1:
d9:0d:66:cd:2b:d9:d7:f5:b4:1f:46:a4:26:43:4e:
dc:f9:76:a7:b4:10:c3:5f:dd:73:d9:52:67:94:74:
14:ba:3b:f5:a7:92:86:c0:b6:0c:4c:65:db:b5:ca:
ac:a4:3a:e0:8f:b8:da:f1:e8:f5:10:eb:9b:28:77:
04:e6:ee:6f:81:2a:56:ab:31:87:f1:62:bb:0b:55:
96:b9:48:64:0a:63:3a:0c:36:24:ff:25:34:97:77:
a1:6f:a6:95:cd:77:cf:e2:f6:75:31:42:5c:70:56:
17:88:4d:4d:80:f8:7e:5d:ae:f2:44:19:49:3d:6f:
b0:19:78:9f:b3:c0:47:d5:12:74:c3:bd:b1:9c:6a:
a6:28:84:d4:4c:cc:c8:26:da:2f:37:92:c8:3e:cb:
bf:17:25:11:d9:b0:4c:51:bd:18:45:d6:a5:a3:6c:
fa:53:1c:03:30:47:cf:09:f2:b1:33:43:80:f4:5f:
59:39:71:fe:f8:23:99:9e:a8:1f:50:5c:2b:1f:aa:
11:36:74:66:f0:65:ce:6a:f8:f1:71:d2:3f:7f:04:
9b:10:c0:b9:b4:91:fd:8a:6d:46:b5:54:23:38:6b:
f2:8d:4d:77:b6:b5:67:77:90:e4:08:50:03:82:78:
fc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B0:69:9D:59:A6:07:0E:46:7D:65:E8:0C:4D:F2:BA:C0:87:61:7A
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/e7BpnVmmBw5GfWXoDE3yusCHYXo.roa
sbgp-ipAddrBlock: critical
IPv4:
220.210.108.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:f3:28:b8:4f:5e:04:92:52:d2:84:27:79:e7:d5:34:b9:b1:
15:7c:6b:e9:37:05:40:3d:28:8e:78:55:b7:fe:cf:ec:35:41:
bc:1a:47:2a:e1:60:7b:e9:f4:20:c4:7c:b4:2d:16:6c:a7:1d:
15:1e:e5:9a:f4:81:ab:5a:49:45:e1:1c:5c:94:97:4c:81:9f:
01:4a:47:2b:2c:f4:fa:3f:f4:4b:65:a9:3b:b0:8f:7c:f3:70:
a9:8a:d8:d8:61:37:2d:c9:8f:9b:9c:20:8e:7c:65:3a:a6:97:
e4:fa:5b:ce:27:4f:c7:ed:63:f0:5e:57:46:51:15:7d:c2:5d:
00:b8:a6:da:4d:3b:af:03:25:9a:60:2a:47:1a:49:42:c3:c0:
3c:f6:e3:d1:5d:72:ad:96:85:91:cb:43:7b:10:c6:4b:ce:3b:
0d:1d:42:7d:78:ba:b8:19:b7:fa:58:46:78:58:f4:74:03:a3:
39:c4:d5:98:f7:b5:90:5b:85:42:ac:cc:37:50:34:25:e4:42:
2a:8f:41:a5:58:83:22:50:54:14:8d:b2:fa:60:b2:1c:d7:e1:
34:05:f5:6b:7d:8b:1a:6f:e8:f1:f8:7a:13:ae:30:0e:4b:9e:
27:56:e2:f7:ba:d9:77:bf:a4:59:ba:39:17:29:e1:db:dc:12:
44:17:41:88
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFsgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODAyMjlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDdCQjA2OTlENTlBNjA3
MEU0NjdENjVFODBDNERGMkJBQzA4NzYxN0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBc6O+3RLEzINpFikb8dkNZs0r2df1tB9GpCZDTtz5dqe0EMNf
3XPZUmeUdBS6O/WnkobAtgxMZdu1yqykOuCPuNrx6PUQ65sodwTm7m+BKlarMYfx
YrsLVZa5SGQKYzoMNiT/JTSXd6FvppXNd8/i9nUxQlxwVheITU2A+H5drvJEGUk9
b7AZeJ+zwEfVEnTDvbGcaqYohNRMzMgm2i83ksg+y78XJRHZsExRvRhF1qWjbPpT
HAMwR88J8rEzQ4D0X1k5cf74I5meqB9QXCsfqhE2dGbwZc5q+PFx0j9/BJsQwLm0
kf2KbUa1VCM4a/KNTXe2tWd3kOQIUAOCePwLAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUe7BpnVmmBw5GfWXoDE3yusCHYXowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L2U3QnBuVm1tQnc1R2ZXWG9ERTN5dXNDSFlYby5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHc0mwwDQYJKoZIhvcNAQELBQADggEB
AK7zKLhPXgSSUtKEJ3nn1TS5sRV8a+k3BUA9KI54Vbf+z+w1QbwaRyrhYHvp9CDE
fLQtFmynHRUe5Zr0gataSUXhHFyUl0yBnwFKRyss9Po/9EtlqTuwj3zzcKmK2Nhh
Ny3Jj5ucII58ZTqml+T6W84nT8ftY/BeV0ZRFX3CXQC4ptpNO68DJZpgKkcaSULD
wDz249Fdcq2WhZHLQ3sQxkvOOw0dQn14urgZt/pYRnhY9HQDoznE1Zj3tZBbhUKs
zDdQNCXkQiqPQaVYgyJQVBSNsvpgshzX4TQF9Wt9ixpv6PH4ehOuMA5LnidW4ve6
2Xe/pFm6ORcp4dvcEkQXQYg=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:25 2026 by rpki-client