
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/l0Neo9vtMGjqVL6ziwEIQo7ecJE.roa
File: l0Neo9vtMGjqVL6ziwEIQo7ecJE.roa (raw, json)
Hash identifier: ho6sG1lkO5AARPWB0JlCK9iNu+7j7l1jh16COCsYoa0=
Subject key identifier: 97:43:5E:A3:DB:ED:30:68:EA:54:BE:B3:8B:01:08:42:8E:DE:70:91
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 170E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/l0Neo9vtMGjqVL6ziwEIQo7ecJE.roa
Signing time: Tue 31 Mar 2026 08:03:02 +0000
ROA not before: Tue 31 Mar 2026 08:03:02 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 220.159.224.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5902 (0x170e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:03:02 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=97435EA3DBED3068EA54BEB38B0108428EDE7091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0f:31:a6:03:7b:85:c1:4c:41:b1:09:44:c8:
9f:f4:5e:d0:e5:7a:f1:5d:5e:28:a9:e5:f6:9c:ae:
3d:d3:fe:64:47:b9:9c:dc:4e:98:61:87:1f:ed:11:
0c:7c:a7:bd:c1:04:9d:6f:4a:a4:da:4c:52:25:43:
c6:a7:0d:53:21:6f:49:8a:32:46:b1:70:22:46:7f:
1c:d6:70:92:52:b1:80:06:83:74:52:9a:c0:70:4c:
62:75:f9:9b:e7:da:eb:dd:7a:aa:ac:4f:df:c4:41:
72:90:e5:7a:09:63:14:41:96:3e:8d:d4:c0:31:c7:
b4:6d:ff:b6:06:f7:9a:ee:8f:6d:e8:fe:cb:23:cf:
a6:0f:4c:5a:85:cd:ef:20:b2:4f:7c:21:33:92:3f:
2f:b0:14:27:6e:92:c9:09:eb:f9:a0:5d:1e:03:82:
2d:91:52:db:4f:4b:88:50:fd:1b:77:23:45:55:d9:
6b:c2:03:10:38:52:2c:07:46:90:e2:29:28:58:e5:
32:c4:f8:d9:0e:09:93:65:70:92:64:51:7c:8d:0c:
6b:1b:b9:2e:5b:2f:30:c4:19:1c:4c:09:46:6f:18:
6d:39:5c:e4:4a:5c:9d:9f:21:8e:4e:6f:db:f3:58:
fb:bc:f2:1c:40:ad:d2:e0:d0:7e:02:ce:c3:70:f3:
57:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:43:5E:A3:DB:ED:30:68:EA:54:BE:B3:8B:01:08:42:8E:DE:70:91
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/l0Neo9vtMGjqVL6ziwEIQo7ecJE.roa
sbgp-ipAddrBlock: critical
IPv4:
220.159.224.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:3f:d8:b6:79:e1:7f:5e:7a:7e:72:0e:9b:27:0d:66:88:85:
03:e9:41:45:09:1c:92:39:c8:39:e7:4b:8e:ea:bc:30:52:8a:
55:8b:f7:b5:53:d7:4f:cd:88:fe:f6:69:c9:02:87:d5:5f:46:
3f:31:53:31:40:60:a8:ce:b1:e5:d3:c3:e7:10:d0:54:d7:4f:
14:7f:69:6f:7d:e3:00:5d:ad:2e:3b:ad:89:fe:d1:2f:8d:5b:
4a:bc:d1:82:15:60:fd:99:0a:78:b4:2c:93:cc:c5:a9:93:be:
84:67:65:17:55:46:4d:4f:70:88:c3:18:47:e3:1e:2d:fe:14:
0e:47:6e:60:e3:bc:e1:7f:22:5e:09:e3:69:fa:ce:9d:88:9d:
a6:99:6e:d1:01:79:e6:4f:86:8a:16:58:c8:13:e0:ec:79:d5:
23:f7:21:97:69:50:1b:8e:20:74:1c:84:d9:33:5d:9f:44:b4:
c4:1f:b6:d1:eb:b3:cc:3c:88:7e:ff:81:ee:07:e1:8e:12:1e:
c9:a0:98:08:3d:9f:44:6d:eb:65:64:72:d5:57:80:f4:e3:27:
02:30:20:d6:c0:da:5c:44:35:16:08:f7:34:68:52:39:ba:e0:
c5:b9:e3:1a:5e:f2:66:8b:39:a0:79:7d:9d:67:05:3b:f0:d5:
b4:cb:33:46
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFw4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODAzMDJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk3NDM1RUEzREJFRDMw
NjhFQTU0QkVCMzhCMDEwODQyOEVERTcwOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXDzGmA3uFwUxBsQlEyJ/0XtDlevFdXiip5facrj3T/mRHuZzc
Tphhhx/tEQx8p73BBJ1vSqTaTFIlQ8anDVMhb0mKMkaxcCJGfxzWcJJSsYAGg3RS
msBwTGJ1+Zvn2uvdeqqsT9/EQXKQ5XoJYxRBlj6N1MAxx7Rt/7YG95ruj23o/ssj
z6YPTFqFze8gsk98ITOSPy+wFCdukskJ6/mgXR4Dgi2RUttPS4hQ/Rt3I0VV2WvC
AxA4UiwHRpDiKShY5TLE+NkOCZNlcJJkUXyNDGsbuS5bLzDEGRxMCUZvGG05XORK
XJ2fIY5Ob9vzWPu88hxArdLg0H4CzsNw81edAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUl0Neo9vtMGjqVL6ziwEIQo7ecJEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L2wwTmVvOXZ0TUdqcVZMNnppd0VJUW83ZWNKRS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHcn+AwDQYJKoZIhvcNAQELBQADggEB
AD0/2LZ54X9een5yDpsnDWaIhQPpQUUJHJI5yDnnS47qvDBSilWL97VT10/NiP72
ackCh9VfRj8xUzFAYKjOseXTw+cQ0FTXTxR/aW994wBdrS47rYn+0S+NW0q80YIV
YP2ZCni0LJPMxamTvoRnZRdVRk1PcIjDGEfjHi3+FA5HbmDjvOF/Il4J42n6zp2I
naaZbtEBeeZPhooWWMgT4Ox51SP3IZdpUBuOIHQchNkzXZ9EtMQfttHrs8w8iH7/
ge4H4Y4SHsmgmAg9n0Rt62VkctVXgPTjJwIwINbA2lxENRYI9zRoUjm64MW54xpe
8maLOaB5fZ1nBTvw1bTLM0Y=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:38 2026 by rpki-client