
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/mGzc6tkd7ZTVp1rmvyFfOwmUe-8.roa
File: mGzc6tkd7ZTVp1rmvyFfOwmUe-8.roa (raw, json)
Hash identifier: ojKOt2UJbQHx/NbdnCCrHW8ycXV1WP2euYAhkNNzQro=
Subject key identifier: 98:6C:DC:EA:D9:1D:ED:94:D5:A7:5A:E6:BF:21:5F:3B:09:94:7B:EF
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 16A2
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mGzc6tkd7ZTVp1rmvyFfOwmUe-8.roa
Signing time: Tue 31 Mar 2026 08:02:10 +0000
ROA not before: Tue 31 Mar 2026 08:02:10 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.97.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5794 (0x16a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:02:10 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=986CDCEAD91DED94D5A75AE6BF215F3B09947BEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e0:80:30:91:e9:49:83:c9:7d:7c:eb:8c:cd:
d8:e1:97:17:db:4a:f9:16:f3:9c:ef:ac:ea:73:8c:
b2:8a:92:ff:ff:8e:81:81:c3:95:ef:0f:9a:8b:a2:
d5:8c:e4:03:da:09:7c:05:9d:30:61:30:cb:0e:0e:
99:9b:21:f0:fc:ca:35:bd:60:5a:e2:1b:54:3f:38:
b9:47:4f:2b:72:31:10:1b:0e:b6:d7:b9:8e:26:48:
4e:b7:ce:51:2c:77:52:3d:f1:80:f7:b7:96:af:c2:
c0:86:6f:3e:df:ac:a6:b5:e3:fc:87:5d:75:a0:ff:
1d:cb:31:2f:5d:6b:86:3a:9b:9c:bf:2d:eb:32:6a:
5a:82:e5:66:5c:9a:14:7f:1c:77:42:14:76:e2:0b:
d8:87:7a:48:e9:ea:be:17:ac:f4:90:df:a8:7f:bc:
0c:bb:a2:91:3f:3f:b5:ba:89:cc:3b:fd:80:02:2f:
56:46:b8:46:a3:64:11:78:d5:70:b7:dd:7b:f1:61:
34:84:15:d5:47:52:d1:fd:af:7d:ea:a7:bc:48:ff:
49:2e:4c:fd:f3:c6:1f:a1:2c:02:fa:44:90:47:c1:
bc:bc:3c:21:15:d2:c4:05:5a:62:a7:5c:cb:44:07:
e2:c1:a2:df:8a:9b:7e:4f:13:0c:ec:c3:40:ad:c6:
b0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6C:DC:EA:D9:1D:ED:94:D5:A7:5A:E6:BF:21:5F:3B:09:94:7B:EF
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mGzc6tkd7ZTVp1rmvyFfOwmUe-8.roa
sbgp-ipAddrBlock: critical
IPv4:
49.97.86.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:4d:40:cb:11:21:be:99:0d:08:a4:b7:bc:4f:99:2c:c3:a6:
ce:7a:46:c9:6c:67:ac:94:90:1d:43:06:05:3f:c3:19:0b:29:
81:50:b4:0d:6f:dd:a2:61:b1:2f:a2:96:93:5c:eb:7d:90:9b:
fe:37:e1:22:42:20:cb:7e:a7:17:42:2e:7c:d0:22:c2:61:a2:
c9:ac:f5:05:26:a4:29:8c:79:98:63:bd:61:8c:bb:ea:9e:a6:
0a:0a:7c:79:d7:69:d4:bf:eb:fc:31:1d:e8:4c:fa:44:ec:3d:
53:09:82:95:74:d4:a3:ac:2b:27:0f:01:0a:da:a0:59:8d:40:
41:56:57:c5:76:f1:fa:26:02:dc:cc:59:dc:ab:eb:6a:be:4e:
82:e5:f3:69:90:9e:83:a9:e5:de:d3:f3:1a:46:ee:8f:dc:47:
14:6f:e4:0f:67:09:73:69:29:36:21:85:ea:23:5b:bb:af:c4:
50:53:74:26:9d:f6:5e:cc:74:dc:ff:6e:14:e6:0c:e6:39:dc:
4d:e4:9a:da:bb:b5:3f:c6:fb:e0:ce:c9:b0:5d:65:77:51:6e:
bf:e3:2c:e5:49:4e:36:80:15:ef:dc:5c:0d:5e:6b:99:c6:6a:
6d:dd:4c:40:58:2e:f7:38:a9:2b:5b:e9:72:9c:1b:24:c2:31:
7d:98:67:cb
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFqIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODAyMTBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk4NkNEQ0VBRDkxREVE
OTRENUE3NUFFNkJGMjE1RjNCMDk5NDdCRUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCZ4IAwkelJg8l9fOuMzdjhlxfbSvkW85zvrOpzjLKKkv//joGB
w5XvD5qLotWM5APaCXwFnTBhMMsODpmbIfD8yjW9YFriG1Q/OLlHTytyMRAbDrbX
uY4mSE63zlEsd1I98YD3t5avwsCGbz7frKa14/yHXXWg/x3LMS9da4Y6m5y/Lesy
alqC5WZcmhR/HHdCFHbiC9iHekjp6r4XrPSQ36h/vAy7opE/P7W6icw7/YACL1ZG
uEajZBF41XC33XvxYTSEFdVHUtH9r33qp7xI/0kuTP3zxh+hLAL6RJBHwby8PCEV
0sQFWmKnXMtEB+LBot+Km35PEwzsw0CtxrBrAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUmGzc6tkd7ZTVp1rmvyFfOwmUe+8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L21HemM2dGtkN1pUVnAxcm12eUZmT3dtVWUtOC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAxYVYwDQYJKoZIhvcNAQELBQADggEB
ACtNQMsRIb6ZDQikt7xPmSzDps56RslsZ6yUkB1DBgU/wxkLKYFQtA1v3aJhsS+i
lpNc632Qm/434SJCIMt+pxdCLnzQIsJhosms9QUmpCmMeZhjvWGMu+qepgoKfHnX
adS/6/wxHehM+kTsPVMJgpV01KOsKycPAQraoFmNQEFWV8V28fomAtzMWdyr62q+
ToLl82mQnoOp5d7T8xpG7o/cRxRv5A9nCXNpKTYhheojW7uvxFBTdCad9l7MdNz/
bhTmDOY53E3kmtq7tT/G++DOybBdZXdRbr/jLOVJTjaAFe/cXA1ea5nGam3dTEBY
Lvc4qStb6XKcGyTCMX2YZ8s=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:55 2026 by rpki-client