
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/K0cpVbYygT5bZnwIYrh4157AFis.roa
File: K0cpVbYygT5bZnwIYrh4157AFis.roa (raw, json)
Hash identifier: oHCmm3VyO7LvMgd+wQ7GgeHf1AfZVDl06HH9u3wKkf4=
Subject key identifier: 2B:47:29:55:B6:32:81:3E:5B:66:7C:08:62:B8:78:D7:9E:C0:16:2B
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 167F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/K0cpVbYygT5bZnwIYrh4157AFis.roa
Signing time: Tue 31 Mar 2026 08:01:55 +0000
ROA not before: Tue 31 Mar 2026 08:01:55 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.104.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5759 (0x167f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:01:55 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=2B472955B632813E5B667C0862B878D79EC0162B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:14:a9:40:4f:95:ed:d3:05:15:fa:e9:dc:09:
d0:ce:c9:54:22:7d:f0:b3:b7:20:06:67:c6:5f:d6:
03:f0:2f:18:d2:da:63:31:19:3b:cb:82:3b:21:92:
c4:5b:b3:5b:94:f2:eb:67:a8:57:da:ee:07:21:7b:
b8:f8:0c:49:f6:68:b6:91:9b:73:34:28:a3:c1:60:
30:e1:06:1c:41:c4:72:5a:88:ee:5f:1b:a1:91:61:
91:62:92:ac:bd:88:8b:d1:a0:60:49:86:cb:77:c6:
7d:ea:eb:e6:81:5e:02:a2:db:4c:0c:2e:01:ae:0d:
a4:80:ae:41:1f:e4:d5:ae:11:a0:f2:8b:01:8f:9c:
41:19:c2:0f:ed:fb:5a:60:cd:85:95:7c:68:7e:c3:
f7:5c:34:39:0d:c2:28:d5:08:d3:e2:de:e3:48:95:
6b:e9:d0:67:42:6d:83:cd:2d:32:55:93:5c:7b:7b:
87:a7:07:d0:1a:d8:f1:8e:15:60:dc:71:8e:29:99:
d6:11:83:f7:a7:bc:16:95:03:ff:5e:b9:5d:40:34:
4c:bd:b4:6e:d8:1a:37:fd:88:ea:e4:00:52:af:d4:
0a:e9:18:1e:a9:e4:0f:55:69:12:37:7c:7d:97:f6:
1a:f1:b3:49:bf:84:05:fc:a8:21:d5:49:93:df:f1:
b9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:47:29:55:B6:32:81:3E:5B:66:7C:08:62:B8:78:D7:9E:C0:16:2B
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/K0cpVbYygT5bZnwIYrh4157AFis.roa
sbgp-ipAddrBlock: critical
IPv4:
49.104.20.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:bf:5c:6e:14:7a:59:82:0e:48:8c:fe:72:06:0e:23:3d:b7:
9f:f0:ae:aa:1e:f2:17:08:a6:6c:dc:9a:7f:46:32:26:e1:bf:
7f:09:09:38:a5:4c:b8:9c:55:6c:9e:44:10:56:87:7e:d9:51:
99:f0:bb:e0:37:e6:42:12:46:a3:e2:79:4a:2e:ab:1a:a1:ef:
af:3b:cf:af:cc:62:1b:73:80:28:92:5c:9f:6c:11:90:a3:e2:
5f:40:51:35:76:24:18:b7:1a:e5:f0:fe:74:00:23:8f:fd:6c:
cb:b9:7b:0b:10:af:3a:73:86:eb:eb:c2:00:c5:aa:fb:0e:7e:
b8:ef:17:09:18:d7:1b:03:65:c6:65:e8:52:a9:0b:c6:fa:92:
1a:e6:d6:8e:2d:a5:02:df:1b:44:35:98:8f:e6:a3:e6:77:2a:
59:01:2f:97:a4:58:92:cc:60:35:9d:aa:83:86:ba:b7:68:12:
07:34:6e:42:0d:9d:91:fd:16:8d:28:fe:51:54:cf:4d:a9:f1:
ce:d4:60:7c:98:f3:d9:8a:4f:d0:91:0d:ab:76:c1:a8:1c:2d:
96:6b:2a:c6:5f:fd:a8:44:8f:07:7b:40:23:57:b5:7a:cd:f2:
1d:09:e3:64:d5:c8:52:0c:ca:09:c1:2d:23:18:15:02:c2:37:
6c:ca:80:88
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFn8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODAxNTVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJCNDcyOTU1QjYzMjgx
M0U1QjY2N0MwODYyQjg3OEQ3OUVDMDE2MkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYFKlAT5Xt0wUV+uncCdDOyVQiffCztyAGZ8Zf1gPwLxjS2mMx
GTvLgjshksRbs1uU8utnqFfa7gche7j4DEn2aLaRm3M0KKPBYDDhBhxBxHJaiO5f
G6GRYZFikqy9iIvRoGBJhst3xn3q6+aBXgKi20wMLgGuDaSArkEf5NWuEaDyiwGP
nEEZwg/t+1pgzYWVfGh+w/dcNDkNwijVCNPi3uNIlWvp0GdCbYPNLTJVk1x7e4en
B9Aa2PGOFWDccY4pmdYRg/envBaVA/9euV1ANEy9tG7YGjf9iOrkAFKv1ArpGB6p
5A9VaRI3fH2X9hrxs0m/hAX8qCHVSZPf8bmDAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUK0cpVbYygT5bZnwIYrh4157AFiswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L0swY3BWYll5Z1Q1Ylpud0lZcmg0MTU3QUZpcy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAxaBQwDQYJKoZIhvcNAQELBQADggEB
AJu/XG4UelmCDkiM/nIGDiM9t5/wrqoe8hcIpmzcmn9GMibhv38JCTilTLicVWye
RBBWh37ZUZnwu+A35kISRqPieUouqxqh7687z6/MYhtzgCiSXJ9sEZCj4l9AUTV2
JBi3GuXw/nQAI4/9bMu5ewsQrzpzhuvrwgDFqvsOfrjvFwkY1xsDZcZl6FKpC8b6
khrm1o4tpQLfG0Q1mI/mo+Z3KlkBL5ekWJLMYDWdqoOGurdoEgc0bkINnZH9Fo0o
/lFUz02p8c7UYHyY89mKT9CRDat2wagcLZZrKsZf/ahEjwd7QCNXtXrN8h0J42TV
yFIMygnBLSMYFQLCN2zKgIg=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:45 2026 by rpki-client