
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/rg9cJ5iZlG146OyQS5d1IC2G1d4.roa
File: rg9cJ5iZlG146OyQS5d1IC2G1d4.roa (raw, json)
Hash identifier: poxCJP8AsE/x9eHxzyOYgMPtJQkQ7xz03MIGHcYKTmw=
Subject key identifier: AE:0F:5C:27:98:99:94:6D:78:E8:EC:90:4B:97:75:20:2D:86:D5:DE
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1778
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rg9cJ5iZlG146OyQS5d1IC2G1d4.roa
Signing time: Tue 31 Mar 2026 08:03:53 +0000
ROA not before: Tue 31 Mar 2026 08:03:53 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.108.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6008 (0x1778)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:03:53 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=AE0F5C279899946D78E8EC904B9775202D86D5DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2e:48:18:37:8d:1b:1d:f7:9f:86:95:aa:87:
c9:06:69:d1:03:67:11:d7:23:1c:70:5c:b4:1a:33:
16:39:66:38:4f:c6:00:ff:7b:c0:b2:e3:d7:78:b6:
b4:e5:f0:61:f4:57:d5:7a:3a:f1:7f:e1:87:04:df:
39:14:51:80:a7:dd:6f:e8:b5:bd:fe:90:c9:ec:63:
fd:0b:c8:72:1d:a7:7a:1c:bb:67:a9:fd:f7:3c:36:
80:18:b7:d5:c0:95:a9:bb:dc:24:76:a3:c7:90:30:
0c:3d:42:2e:91:55:7f:2e:07:63:1c:28:65:db:b5:
2a:e8:7d:f3:32:c4:2e:c7:af:40:fe:c6:43:a6:0e:
fa:6d:d6:94:aa:bb:2d:7d:8e:d1:4d:08:b0:f8:d6:
af:03:3f:2b:69:e5:e5:5f:c1:c9:90:cc:c2:c0:36:
79:04:b0:cd:4f:c6:69:18:6d:1d:08:70:8f:ce:1d:
f0:ec:9d:d4:0c:af:0b:b2:50:15:dc:d9:96:d9:1e:
cb:8a:b0:0e:11:48:44:fb:ea:c0:b3:35:42:00:6a:
7e:06:21:d0:74:c0:63:67:ec:ad:35:2b:ea:f2:88:
6f:7c:71:b3:0a:3d:da:83:84:0d:a8:21:d5:70:f0:
d8:9e:34:6f:b7:c9:ff:99:11:55:59:f7:ff:be:7d:
1e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:0F:5C:27:98:99:94:6D:78:E8:EC:90:4B:97:75:20:2D:86:D5:DE
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rg9cJ5iZlG146OyQS5d1IC2G1d4.roa
sbgp-ipAddrBlock: critical
IPv4:
49.108.239.0/24
Signature Algorithm: sha256WithRSAEncryption
77:53:4d:06:a2:a3:26:34:41:b8:5b:b3:a9:f2:d2:f2:c7:ac:
c3:c5:a5:8f:c9:59:ba:3d:10:53:62:34:ca:69:07:03:f7:4d:
80:54:c1:c1:f2:8d:f8:50:23:7e:40:d5:ad:97:29:30:cf:31:
8f:33:95:d8:74:f0:6b:66:6d:3c:c8:46:4e:21:40:d1:38:d1:
65:e2:00:6d:a5:c0:7d:d8:a4:45:4b:86:70:8f:c5:b4:fd:fc:
8a:ad:9f:2d:ab:6b:39:8f:67:b4:0c:2d:f9:f0:61:df:99:f7:
cc:41:b9:8a:55:4a:25:de:a5:cf:3e:1a:30:2b:7c:5a:1d:f9:
cb:a0:b0:37:f2:23:90:7d:cb:7a:6a:65:50:17:5a:99:d9:91:
71:d7:0b:3b:36:d1:79:cb:02:7c:22:8c:53:b8:e2:3e:83:f6:
d6:20:03:ac:4b:b4:29:6c:f0:33:bf:f8:79:87:4b:f2:8b:61:
be:f8:e0:b1:57:8b:f7:75:21:08:85:24:e1:25:6b:61:17:9f:
45:e7:eb:6c:b3:d6:c6:e9:79:6e:61:47:cd:82:88:b7:be:b1:
51:54:45:3e:44:27:3e:41:eb:42:bd:ca:56:14:44:e7:04:44:
81:64:b3:a0:c1:2d:ee:3d:c2:02:fa:cd:23:44:e7:a6:55:70:
1f:a8:16:2f
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICF3gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODAzNTNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFFMEY1QzI3OTg5OTk0
NkQ3OEU4RUM5MDRCOTc3NTIwMkQ4NkQ1REUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDbLkgYN40bHfefhpWqh8kGadEDZxHXIxxwXLQaMxY5ZjhPxgD/
e8Cy49d4trTl8GH0V9V6OvF/4YcE3zkUUYCn3W/otb3+kMnsY/0LyHIdp3ocu2ep
/fc8NoAYt9XAlam73CR2o8eQMAw9Qi6RVX8uB2McKGXbtSroffMyxC7Hr0D+xkOm
Dvpt1pSquy19jtFNCLD41q8DPytp5eVfwcmQzMLANnkEsM1PxmkYbR0IcI/OHfDs
ndQMrwuyUBXc2ZbZHsuKsA4RSET76sCzNUIAan4GIdB0wGNn7K01K+ryiG98cbMK
PdqDhA2oIdVw8NieNG+3yf+ZEVVZ9/++fR4NAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUrg9cJ5iZlG146OyQS5d1IC2G1d4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L3JnOWNKNWlabEcxNDZPeVFTNWQxSUMyRzFkNC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAxbO8wDQYJKoZIhvcNAQELBQADggEB
AHdTTQaioyY0Qbhbs6ny0vLHrMPFpY/JWbo9EFNiNMppBwP3TYBUwcHyjfhQI35A
1a2XKTDPMY8zldh08GtmbTzIRk4hQNE40WXiAG2lwH3YpEVLhnCPxbT9/Iqtny2r
azmPZ7QMLfnwYd+Z98xBuYpVSiXepc8+GjArfFod+cugsDfyI5B9y3pqZVAXWpnZ
kXHXCzs20XnLAnwijFO44j6D9tYgA6xLtCls8DO/+HmHS/KLYb744LFXi/d1IQiF
JOEla2EXn0Xn62yz1sbpeW5hR82CiLe+sVFURT5EJz5B60K9ylYUROcERIFks6DB
Le49wgL6zSNE56ZVcB+oFi8=
-----END CERTIFICATE-----
Generated at Tue Apr 7 21:01:46 2026 by rpki-client