
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Pvz7hXkPtVh0aVA7tJ9oMWfFnro.roa
File: Pvz7hXkPtVh0aVA7tJ9oMWfFnro.roa (raw, json)
Hash identifier: SizNmM/cXAKbFVJKDyy2v70gZeUdN+1hYUP/7SkJuq8=
Subject key identifier: 3E:FC:FB:85:79:0F:B5:58:74:69:50:3B:B4:9F:68:31:67:C5:9E:BA
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1634
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Pvz7hXkPtVh0aVA7tJ9oMWfFnro.roa
Signing time: Tue 31 Mar 2026 08:01:22 +0000
ROA not before: Tue 31 Mar 2026 08:01:22 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.104.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5684 (0x1634)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:01:22 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=3EFCFB85790FB5587469503BB49F683167C59EBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e1:63:46:2d:f3:90:c4:12:06:ea:3c:ab:4c:
3f:d3:c6:15:3d:fa:bc:b1:0a:00:6f:e4:52:7a:9d:
50:6b:a3:1d:9f:3c:45:d4:28:3f:ec:08:29:7e:ff:
05:d5:65:b7:82:ea:4b:4c:77:e2:6e:4a:61:6e:12:
8a:ac:9a:74:f5:57:25:32:18:04:f9:11:3c:51:75:
54:ca:e0:7a:81:e1:44:4f:be:26:17:e1:39:16:a2:
03:96:98:64:a4:c4:0b:5f:13:11:52:b1:5b:05:b3:
98:b1:ba:ed:38:b9:0f:fe:47:15:34:89:30:7a:a1:
b6:a1:1b:8d:27:a3:be:f6:1c:8d:5f:e1:87:d6:ac:
9e:a5:a0:71:f8:70:f1:17:55:47:52:1f:07:41:aa:
9f:61:d6:92:5b:f0:ae:35:b8:28:e0:28:ed:f5:31:
53:ee:bc:be:97:52:e7:bb:35:42:40:8b:b6:58:e0:
d8:97:af:b1:fc:3d:8c:ad:9c:49:ba:9e:d5:27:06:
99:80:0d:f9:a5:94:e4:57:41:e9:fd:08:83:68:27:
86:92:27:30:68:4a:33:93:bc:d5:52:a6:bf:9a:33:
8c:0c:8a:ad:90:31:3e:13:c8:d3:5c:bf:1d:33:94:
49:82:36:76:0f:5e:70:11:7f:1c:62:44:34:f4:df:
87:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FC:FB:85:79:0F:B5:58:74:69:50:3B:B4:9F:68:31:67:C5:9E:BA
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Pvz7hXkPtVh0aVA7tJ9oMWfFnro.roa
sbgp-ipAddrBlock: critical
IPv4:
49.104.21.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:c2:88:4c:52:19:d6:b4:91:d0:0c:e7:ff:1d:b8:bf:7f:e7:
3c:01:8a:9d:05:57:1c:8a:5e:72:11:77:c7:f4:5a:ea:16:62:
23:75:8a:1d:19:73:b2:48:34:70:b1:8a:c9:5d:e2:10:75:de:
b6:23:44:8f:43:fd:a5:5e:55:1d:2a:7d:4f:66:3a:a5:dd:5e:
93:3c:ca:ce:3c:f8:8c:27:e0:83:14:a2:f1:c5:fb:da:1a:29:
f9:fe:2d:fc:2a:44:d8:fa:63:62:ff:20:39:ef:78:aa:cf:5f:
16:02:37:b9:ad:33:5d:ad:f9:b2:5c:15:18:68:37:20:2c:68:
78:20:1d:5c:d0:ce:72:b1:60:b1:2f:13:46:03:bb:a7:79:25:
cd:75:3c:fe:e4:48:ee:9a:8e:18:59:8f:23:c0:fe:e0:6f:52:
36:aa:e7:84:3d:8f:68:0f:87:98:04:33:ca:8c:d6:7d:ea:eb:
1c:3f:97:ec:a8:39:ef:8e:1d:60:73:a3:8c:1d:14:71:57:34:
f9:2d:50:85:c5:86:57:98:46:c8:53:d9:ba:9b:e3:7a:a6:4d:
cb:07:45:f6:e4:b1:79:1c:7a:01:07:71:bf:69:08:ba:0c:54:
bc:7e:0e:95:b7:54:e4:c3:65:25:22:b3:63:66:53:07:0e:ad:
e9:1f:50:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:13 2026 by rpki-client