
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20109/PZTdYFsjGkl0HHSGBtcb1-8pVp8.roa
File: PZTdYFsjGkl0HHSGBtcb1-8pVp8.roa (raw, json)
Hash identifier: H036hfR0zSOaddKvgSJvcs24Tl9jeGgmCQvIXQM+QUc=
Subject key identifier: 3D:94:DD:60:5B:23:1A:49:74:1C:74:86:06:D7:1B:D7:EF:29:56:9F
Certificate issuer: /CN=61F25814E8C3EAED2C0D9CA9CF3B0870B9E6E076
Certificate serial: 22
Authority key identifier: 61:F2:58:14:E8:C3:EA:ED:2C:0D:9C:A9:CF:3B:08:70:B9:E6:E0:76
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YfJYFOjD6u0sDZypzzsIcLnm4HY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20109/PZTdYFsjGkl0HHSGBtcb1-8pVp8.roa
Signing time: Tue 31 Mar 2026 08:40:50 +0000
ROA not before: Tue 31 Mar 2026 08:40:50 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 131960
IP address blocks: 103.146.64.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20109/YfJYFOjD6u0sDZypzzsIcLnm4HY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20109/YfJYFOjD6u0sDZypzzsIcLnm4HY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YfJYFOjD6u0sDZypzzsIcLnm4HY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61F25814E8C3EAED2C0D9CA9CF3B0870B9E6E076
Validity
Not Before: Mar 31 08:40:50 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=3D94DD605B231A49741C748606D71BD7EF29569F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8d:04:61:e1:56:08:53:28:24:11:08:19:0f:
9e:b1:33:fb:7c:19:60:18:76:d9:19:28:f3:b7:f4:
f3:e3:ad:11:21:3c:e8:37:aa:ed:bd:03:1c:b6:63:
54:e9:24:ae:82:4f:50:ac:a3:ba:7e:80:e0:10:83:
99:c9:aa:49:0b:d1:bd:72:b1:1f:ec:cb:a7:5b:e8:
f4:48:6b:28:b8:54:6e:99:7f:be:24:6c:81:1b:63:
11:dd:e8:8f:1a:2c:e6:40:f1:a0:e1:54:ee:cb:cc:
ff:82:73:a1:1b:9e:7b:52:e8:b6:4a:28:09:a7:b7:
87:c3:9f:a0:ea:e5:b2:33:48:ff:b3:2c:79:99:d4:
a2:a9:c1:f6:8c:18:d1:6f:7e:99:3c:f6:46:2e:54:
7a:be:30:bd:b7:b3:b7:d0:39:e4:23:1a:75:4b:e3:
6e:46:4d:61:43:a3:a8:92:99:c2:e4:ec:57:75:11:
13:77:7e:a4:f3:61:bb:26:30:b5:5e:7f:17:63:44:
bd:29:ae:42:53:43:c8:a8:25:23:87:49:ce:0b:c2:
af:cd:6c:ca:b4:ac:a8:53:6c:1f:f7:33:8d:26:29:
d1:ea:84:f6:3a:9b:7b:6b:72:44:20:4b:ec:c6:27:
67:0a:a2:bb:90:37:7b:94:18:f6:95:72:94:8a:f1:
cc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:94:DD:60:5B:23:1A:49:74:1C:74:86:06:D7:1B:D7:EF:29:56:9F
X509v3 Authority Key Identifier:
keyid:61:F2:58:14:E8:C3:EA:ED:2C:0D:9C:A9:CF:3B:08:70:B9:E6:E0:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20109/YfJYFOjD6u0sDZypzzsIcLnm4HY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YfJYFOjD6u0sDZypzzsIcLnm4HY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20109/PZTdYFsjGkl0HHSGBtcb1-8pVp8.roa
sbgp-ipAddrBlock: critical
IPv4:
103.146.64.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:89:37:c4:5a:bb:16:dc:ee:19:73:13:6d:e0:8a:18:99:b1:
9e:c1:bf:e5:73:6b:86:1c:c8:c7:c4:80:96:78:4e:f4:7b:60:
a3:9a:64:99:0c:94:37:37:35:86:c3:27:cd:e1:48:a6:f9:36:
3b:e8:28:ab:aa:ca:e9:61:9b:1f:39:ee:13:fc:03:ab:6b:de:
94:c6:a0:a0:2d:19:fe:87:f4:15:08:f0:87:97:41:88:20:1b:
6c:bc:01:f7:89:b5:95:80:82:3e:11:5a:56:7c:75:94:2a:9c:
10:99:39:c8:2b:bf:3c:f6:16:f4:17:92:4d:25:54:97:28:a6:
de:46:79:c8:24:b1:0e:08:98:ad:37:8e:29:3b:08:4d:c0:35:
b7:dd:06:e0:4a:f4:55:52:97:dc:60:55:1e:4a:c8:16:76:b4:
f9:8c:47:de:de:f7:e6:e0:4b:36:4d:f2:0b:8d:3b:2e:b7:06:
b8:85:d0:ee:ce:a3:43:cb:b5:30:b0:bf:c1:3f:86:fe:69:9b:
fa:42:38:b2:ce:cb:3e:74:8d:d4:43:17:c9:b7:dc:7c:1d:14:
24:07:d1:53:aa:f8:bf:03:05:8d:bc:3f:70:8d:4d:c6:23:92:
29:b0:6e:91:63:24:7f:e7:ea:48:78:fb:98:13:4b:71:95:e5:
88:48:ba:99
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBIjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2MUYy
NTgxNEU4QzNFQUVEMkMwRDlDQTlDRjNCMDg3MEI5RTZFMDc2MB4XDTI2MDMzMTA4
NDA1MFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoM0Q5NERENjA1QjIzMUE0
OTc0MUM3NDg2MDZENzFCRDdFRjI5NTY5RjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAN6NBGHhVghTKCQRCBkPnrEz+3wZYBh22Rko87f08+OtESE86Deq
7b0DHLZjVOkkroJPUKyjun6A4BCDmcmqSQvRvXKxH+zLp1vo9EhrKLhUbpl/viRs
gRtjEd3ojxos5kDxoOFU7svM/4JzoRuee1LotkooCae3h8OfoOrlsjNI/7MseZnU
oqnB9owY0W9+mTz2Ri5Uer4wvbezt9A55CMadUvjbkZNYUOjqJKZwuTsV3URE3d+
pPNhuyYwtV5/F2NEvSmuQlNDyKglI4dJzgvCr81syrSsqFNsH/czjSYp0eqE9jqb
e2tyRCBL7MYnZwqiu5A3e5QY9pVylIrxzFUCAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBQ9lN1gWyMaSXQcdIYG1xvX7ylWnzAfBgNVHSMEGDAWgBRh8lgU6MPq7SwNnKnP
OwhwuebgdjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAxMDkvWWZKWUZPakQ2dTBzRFp5cHp6c0ljTG5tNEhZLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWWZKWUZPakQ2dTBzRFp5cHp6c0lj
TG5tNEhZLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMTA5L1BaVGRZRnNqR2tsMEhIU0dCdGNiMS04cFZwOC5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnkkAwDQYJKoZIhvcNAQELBQAD
ggEBALiJN8Rauxbc7hlzE23gihiZsZ7Bv+Vza4YcyMfEgJZ4TvR7YKOaZJkMlDc3
NYbDJ83hSKb5NjvoKKuqyulhmx857hP8A6tr3pTGoKAtGf6H9BUI8IeXQYggG2y8
AfeJtZWAgj4RWlZ8dZQqnBCZOcgrvzz2FvQXkk0lVJcopt5GecgksQ4ImK03jik7
CE3ANbfdBuBK9FVSl9xgVR5KyBZ2tPmMR97e9+bgSzZN8guNOy63BriF0O7Oo0PL
tTCwv8E/hv5pm/pCOLLOyz50jdRDF8m33HwdFCQH0VOq+L8DBY28P3CNTcYjkimw
bpFjJH/n6kh4+5gTS3GV5YhIupk=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:18 2026 by rpki-client