
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/3FGZAcBXVUFCZyomB8PjWVM8_e4.roa
File: 3FGZAcBXVUFCZyomB8PjWVM8_e4.roa (raw, json)
Hash identifier: wv/hPDGfYl2N3g2/3TCfI3Na8d0TWy13HDhK0XUd/H4=
Subject key identifier: DC:51:99:01:C0:57:55:41:42:67:2A:26:07:C3:E3:59:53:3C:FD:EE
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 139E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3FGZAcBXVUFCZyomB8PjWVM8_e4.roa
Signing time: Tue 31 Mar 2026 07:55:56 +0000
ROA not before: Tue 31 Mar 2026 07:55:56 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.97.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5022 (0x139e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:55:56 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=DC519901C057554142672A2607C3E359533CFDEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b3:c4:3f:8d:af:0f:3b:77:26:bc:0e:b5:4e:
11:7c:9c:98:99:46:15:8d:07:e3:b9:83:ed:65:0a:
f9:7a:12:36:ac:a1:8b:e8:51:cd:14:0c:39:c6:71:
1a:8f:e6:8f:78:85:a5:79:53:3e:06:8d:1e:a8:dc:
11:ef:52:76:d4:b4:17:c8:6d:02:a1:19:70:0f:2e:
b5:8d:2a:7d:ae:12:bc:e7:cf:e4:de:5e:9f:72:7c:
33:61:18:be:60:55:a3:cc:98:24:aa:6f:0b:9c:7e:
ff:c6:37:80:87:b6:a4:b0:9f:d2:5e:6c:22:24:f2:
d2:d6:4a:fe:a3:c7:5d:fe:c7:bf:91:3d:c3:ce:60:
81:96:70:51:f1:9e:83:41:f6:5f:d1:1e:23:3e:27:
ad:4e:66:20:8a:9a:ef:18:7b:8d:5e:32:c4:a0:57:
95:b3:ce:be:bb:ab:d2:23:0b:2d:6f:27:d2:57:99:
31:04:b6:82:a9:a1:0a:79:bd:cd:ee:00:dc:65:68:
64:1f:85:dd:46:99:5f:1e:da:95:29:86:50:a7:42:
9b:37:31:af:a1:de:84:64:f6:d4:09:24:c6:99:d9:
b4:d4:48:b4:87:b8:34:c3:7a:91:e5:e2:a9:2f:a6:
88:94:b6:50:3a:0f:db:08:bd:c2:6d:cb:4e:46:55:
26:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:51:99:01:C0:57:55:41:42:67:2A:26:07:C3:E3:59:53:3C:FD:EE
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3FGZAcBXVUFCZyomB8PjWVM8_e4.roa
sbgp-ipAddrBlock: critical
IPv4:
49.97.110.0/24
Signature Algorithm: sha256WithRSAEncryption
e0:78:81:54:76:b4:f1:50:48:00:18:30:47:18:c7:7b:35:76:
40:24:1a:7d:d4:96:bc:6f:c1:bb:34:f2:92:4a:95:52:2e:97:
92:da:88:9f:c1:28:af:9c:62:e4:e8:26:0b:d1:cd:1f:51:18:
b5:55:72:56:f5:f0:88:93:dc:8c:11:ee:4e:58:dc:f5:17:e0:
6f:0b:29:83:5e:20:85:26:7a:43:d9:a5:c0:b9:3f:99:36:a2:
bc:f8:f8:30:e3:a3:9a:0e:b2:20:21:1a:c1:26:9e:be:ea:d4:
ca:50:75:3e:26:ff:4f:55:17:87:55:02:86:27:49:98:9a:d5:
e5:7d:62:10:5d:14:dc:2d:ac:98:2c:f6:f9:c5:70:98:46:db:
ce:db:62:ef:e6:61:4f:7e:94:49:fe:9f:30:22:26:9a:98:99:
12:2a:a4:89:1f:5e:1e:cb:6f:a5:a7:04:19:bd:7c:74:c4:76:
7c:f5:a7:92:8e:99:e2:df:30:e2:62:78:5b:47:f7:2e:bf:84:
fd:2c:8a:2f:4a:50:b2:ec:db:4a:cd:75:bb:77:aa:a9:54:56:
9d:ef:bb:28:f4:a3:cf:fb:15:f6:fa:4f:e0:6e:01:f1:4c:5e:
24:d8:d5:7d:9f:d3:86:5c:01:ab:97:e1:76:8c:e3:47:f5:0b:
e8:51:ff:8c
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICE54wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
NzU1NTZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKERDNTE5OTAxQzA1NzU1
NDE0MjY3MkEyNjA3QzNFMzU5NTMzQ0ZERUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDUs8Q/ja8PO3cmvA61ThF8nJiZRhWNB+O5g+1lCvl6EjasoYvo
Uc0UDDnGcRqP5o94haV5Uz4GjR6o3BHvUnbUtBfIbQKhGXAPLrWNKn2uErznz+Te
Xp9yfDNhGL5gVaPMmCSqbwucfv/GN4CHtqSwn9JebCIk8tLWSv6jx13+x7+RPcPO
YIGWcFHxnoNB9l/RHiM+J61OZiCKmu8Ye41eMsSgV5Wzzr67q9IjCy1vJ9JXmTEE
toKpoQp5vc3uANxlaGQfhd1GmV8e2pUphlCnQps3Ma+h3oRk9tQJJMaZ2bTUSLSH
uDTDepHl4qkvpoiUtlA6D9sIvcJty05GVSZ3AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU3FGZAcBXVUFCZyomB8PjWVM8/e4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5LzNGR1pBY0JYVlVGQ1p5b21COFBqV1ZNOF9lNC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAxYW4wDQYJKoZIhvcNAQELBQADggEB
AOB4gVR2tPFQSAAYMEcYx3s1dkAkGn3Ulrxvwbs08pJKlVIul5LaiJ/BKK+cYuTo
JgvRzR9RGLVVclb18IiT3IwR7k5Y3PUX4G8LKYNeIIUmekPZpcC5P5k2orz4+DDj
o5oOsiAhGsEmnr7q1MpQdT4m/09VF4dVAoYnSZia1eV9YhBdFNwtrJgs9vnFcJhG
287bYu/mYU9+lEn+nzAiJpqYmRIqpIkfXh7Lb6WnBBm9fHTEdnz1p5KOmeLfMOJi
eFtH9y6/hP0sii9KULLs20rNdbt3qqlUVp3vuyj0o8/7Ffb6T+BuAfFMXiTY1X2f
04ZcAauX4XaM40f1C+hR/4w=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:42:54 2026 by rpki-client