
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZvwHnYtO3LK8fRP8EfmACMgPef0.roa
File: ZvwHnYtO3LK8fRP8EfmACMgPef0.roa (raw, json)
Hash identifier: hhQfyu4rLPO8nLS43ayYlXxyDFD/iiwZ29wqIxbADoY=
Subject key identifier: 66:FC:07:9D:8B:4E:DC:B2:BC:7D:13:FC:11:F9:80:08:C8:0F:79:FD
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1614
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZvwHnYtO3LK8fRP8EfmACMgPef0.roa
Signing time: Tue 31 Mar 2026 08:01:06 +0000
ROA not before: Tue 31 Mar 2026 08:01:06 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5652 (0x1614)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:01:06 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=66FC079D8B4EDCB2BC7D13FC11F98008C80F79FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:53:4d:86:bb:cf:c8:8e:dd:1b:01:07:da:b0:
cd:50:4d:3b:4a:ac:02:a8:cc:04:3a:fe:b9:df:01:
7e:70:4c:e9:fb:d0:df:b8:71:21:06:42:f6:63:98:
15:be:f4:36:a7:a1:05:ed:2c:23:ab:90:47:f3:4b:
a5:30:55:74:3e:0f:42:8d:4d:e8:28:0d:76:e9:97:
4f:30:fe:e5:08:d6:32:da:df:88:52:37:f0:33:0e:
b5:bd:fc:92:1e:5e:47:0e:99:f8:2f:2c:06:ae:f7:
4c:7c:1b:56:f7:c0:92:db:a7:b0:c4:da:b5:7f:cd:
f2:8a:a3:9a:30:46:2c:12:ee:7f:83:a4:c8:de:0e:
b9:28:07:fe:b8:9f:dc:4e:47:42:71:8c:c0:8f:a7:
ff:99:2c:f0:8f:a6:de:e7:47:ff:ee:82:83:26:82:
3c:08:0a:7c:fd:f5:f3:19:bd:13:4b:61:5f:25:1a:
fc:af:db:61:64:48:4f:15:ab:ce:46:aa:eb:39:00:
7e:e5:95:82:6b:cb:66:4b:07:1c:6c:9f:84:93:1f:
95:a2:3e:52:77:b4:7c:18:32:bd:43:db:df:5b:0f:
3a:f8:e6:03:27:08:cd:aa:6f:a6:ca:1b:3a:3a:6a:
2d:e6:26:a0:fc:a5:7d:08:0a:02:dd:1f:50:85:80:
6b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FC:07:9D:8B:4E:DC:B2:BC:7D:13:FC:11:F9:80:08:C8:0F:79:FD
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZvwHnYtO3LK8fRP8EfmACMgPef0.roa
sbgp-ipAddrBlock: critical
IPv4:
49.98.41.0/24
Signature Algorithm: sha256WithRSAEncryption
df:9d:12:ab:2b:ae:b0:73:3b:f0:47:31:a2:f6:90:4f:80:81:
ee:e2:b6:40:f6:38:81:47:ab:d7:f7:82:fa:51:f8:ec:d5:18:
12:50:bf:c9:32:9b:6e:79:da:99:10:46:16:28:b9:35:66:73:
9a:b7:94:59:9f:a4:56:9e:4f:40:75:2d:51:2e:92:56:71:d4:
ff:ee:3b:48:b4:1f:0d:48:a9:90:b9:42:66:85:5c:3c:d5:a4:
28:73:a8:27:0e:ce:08:13:07:ec:5b:72:3c:86:42:41:d6:1c:
96:21:5d:a9:c6:30:97:42:85:d2:ca:c2:e4:f5:3d:43:be:0f:
a1:4d:32:54:bc:de:b6:78:61:f7:18:4f:ab:72:6d:f8:92:e0:
c2:c4:0b:6b:bd:e2:a5:37:6f:ff:1d:95:69:7a:65:d4:01:c8:
76:1f:76:80:d8:32:ca:28:c7:f2:e1:a1:66:8f:d5:15:40:18:
e7:4b:60:26:5d:99:8b:92:03:66:67:68:84:88:b6:f1:65:78:
47:54:3a:12:40:9c:c4:71:0d:72:b1:e0:1b:e9:52:89:64:95:
48:b4:fd:85:87:09:71:c0:97:00:c5:11:be:ca:96:38:da:a7:
53:30:d4:7d:5b:db:3d:27:ed:bb:69:89:ab:15:c0:17:66:e7:
cb:12:51:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:44 2026 by rpki-client