
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/vrX1HrnmAfklYHolHDYZUBTbSQs.roa
File: vrX1HrnmAfklYHolHDYZUBTbSQs.roa (raw, json)
Hash identifier: T0CtvUeu5E1pzYGswJLK13cVUrUn0+fZMrBiNwOfKuU=
Subject key identifier: BE:B5:F5:1E:B9:E6:01:F9:25:60:7A:25:1C:36:19:50:14:DB:49:0B
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1458
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vrX1HrnmAfklYHolHDYZUBTbSQs.roa
Signing time: Tue 31 Mar 2026 07:57:22 +0000
ROA not before: Tue 31 Mar 2026 07:57:22 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 110.163.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5208 (0x1458)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:57:22 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=BEB5F51EB9E601F925607A251C36195014DB490B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:08:a8:32:29:46:51:4a:56:19:64:07:56:75:
40:5f:9b:37:32:0c:6e:68:2a:e3:25:ff:90:18:b9:
e5:be:34:99:38:9e:a9:80:59:f1:39:b0:52:bb:e6:
80:51:8f:20:ed:ff:7c:03:da:da:16:18:ce:67:3f:
4c:d7:ab:f6:e8:7b:69:a6:ee:3b:ec:7e:a1:67:a4:
08:cf:7d:d1:b9:fa:90:39:31:74:1a:55:d9:dd:d2:
d7:43:26:e4:19:7e:21:60:e1:80:33:c8:d1:97:c9:
f4:58:b3:de:b0:86:8d:32:e3:f8:12:40:72:66:a1:
ae:7c:00:b6:72:f7:fd:a8:4a:7a:0a:f7:13:f0:c3:
34:40:7f:6f:c2:87:2f:a1:44:c4:8d:3e:ec:3b:d0:
7a:00:7d:c8:28:24:63:36:09:a5:5f:54:03:58:99:
bf:92:6f:87:02:9a:e2:ba:16:34:6c:7a:e2:5c:b1:
18:cd:7d:50:8e:95:b0:e9:31:54:75:c7:8f:7b:65:
63:fa:68:f7:5a:dc:28:5c:fc:bd:3c:37:c7:a8:68:
cc:7b:9e:27:9c:81:3c:ac:f4:ba:9d:b1:41:c0:8c:
6a:fc:38:c7:50:9d:a7:b3:e7:8c:36:60:5d:df:8f:
76:04:02:38:1e:c4:90:83:ce:a3:c4:9a:fd:9f:9f:
f2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B5:F5:1E:B9:E6:01:F9:25:60:7A:25:1C:36:19:50:14:DB:49:0B
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vrX1HrnmAfklYHolHDYZUBTbSQs.roa
sbgp-ipAddrBlock: critical
IPv4:
110.163.42.0/24
Signature Algorithm: sha256WithRSAEncryption
85:87:45:c9:7a:a6:f7:59:53:b6:d4:97:ad:a3:2f:72:9e:e2:
9c:85:48:04:96:4d:9c:20:59:18:0b:61:4d:ac:7e:09:7c:66:
fe:8b:0b:d8:ac:4c:d2:38:62:61:3a:93:4e:92:b1:7c:8d:f8:
f4:e0:e7:8d:57:33:c0:ab:c1:18:c5:7a:ab:19:5b:b1:5b:29:
24:63:d1:51:e2:d5:95:7b:3b:05:39:e7:76:ae:37:01:06:fa:
62:4e:48:39:e4:40:18:9a:11:2b:48:9a:f6:02:86:58:d2:bc:
d9:2c:11:79:19:35:24:8b:ea:f8:37:b9:8d:01:d4:2c:77:20:
23:c6:d4:e1:b7:ef:1f:79:8d:40:fa:47:95:b1:b9:aa:85:d5:
54:63:80:5d:05:c9:42:ef:ef:3d:35:6f:a1:b7:6a:b2:8f:5c:
7d:d1:49:2b:b7:5e:04:6d:8e:60:12:97:cc:8a:1f:eb:51:7b:
04:e9:bd:76:09:eb:34:48:c9:87:1c:c2:39:c2:58:7b:4b:36:
9f:2a:bd:27:c2:68:1a:65:30:e1:db:a2:a3:e9:ac:ab:1e:cb:
97:9f:fa:e3:4e:f4:5a:10:ab:5c:23:e3:9c:5e:a6:14:f8:33:
c2:e4:07:43:52:67:75:1a:44:04:69:98:5f:64:3a:68:13:00:
21:0a:4b:8b
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFFgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
NzU3MjJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEJFQjVGNTFFQjlFNjAx
RjkyNTYwN0EyNTFDMzYxOTUwMTREQjQ5MEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCmCKgyKUZRSlYZZAdWdUBfmzcyDG5oKuMl/5AYueW+NJk4nqmA
WfE5sFK75oBRjyDt/3wD2toWGM5nP0zXq/boe2mm7jvsfqFnpAjPfdG5+pA5MXQa
Vdnd0tdDJuQZfiFg4YAzyNGXyfRYs96who0y4/gSQHJmoa58ALZy9/2oSnoK9xPw
wzRAf2/Chy+hRMSNPuw70HoAfcgoJGM2CaVfVANYmb+Sb4cCmuK6FjRseuJcsRjN
fVCOlbDpMVR1x497ZWP6aPda3Chc/L08N8eoaMx7niecgTys9LqdsUHAjGr8OMdQ
naez54w2YF3fj3YEAjgexJCDzqPEmv2fn/KNAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUvrX1HrnmAfklYHolHDYZUBTbSQswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L3ZyWDFIcm5tQWZrbFlIb2xIRFlaVUJUYlNRcy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABuoyowDQYJKoZIhvcNAQELBQADggEB
AIWHRcl6pvdZU7bUl62jL3Ke4pyFSASWTZwgWRgLYU2sfgl8Zv6LC9isTNI4YmE6
k06SsXyN+PTg541XM8CrwRjFeqsZW7FbKSRj0VHi1ZV7OwU553auNwEG+mJOSDnk
QBiaEStImvYChljSvNksEXkZNSSL6vg3uY0B1Cx3ICPG1OG37x95jUD6R5WxuaqF
1VRjgF0FyULv7z01b6G3arKPXH3RSSu3XgRtjmASl8yKH+tRewTpvXYJ6zRIyYcc
wjnCWHtLNp8qvSfCaBplMOHboqPprKsey5ef+uNO9FoQq1wj45xephT4M8LkB0NS
Z3UaRARpmF9kOmgTACEKS4s=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:29 2026 by rpki-client