
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/hvP-NG_bcj3dFKzIhmzY_efMTSs.roa
File: hvP-NG_bcj3dFKzIhmzY_efMTSs.roa (raw, json)
Hash identifier: BnLeC01t6ho5nX9GDVot3Ezvub+3DVufHeTdfwbR+gM=
Subject key identifier: 86:F3:FE:34:6F:DB:72:3D:DD:14:AC:C8:86:6C:D8:FD:E7:CC:4D:2B
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1860
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hvP-NG_bcj3dFKzIhmzY_efMTSs.roa
Signing time: Tue 31 Mar 2026 08:05:52 +0000
ROA not before: Tue 31 Mar 2026 08:05:52 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.102.176.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6240 (0x1860)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:05:52 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=86F3FE346FDB723DDD14ACC8866CD8FDE7CC4D2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:59:0e:cf:7e:f7:c0:d6:22:f8:ea:ff:20:41:
8f:c9:1b:7e:92:ab:d2:69:c4:56:da:bb:2c:72:29:
97:91:97:04:93:a1:7b:43:f6:f5:3a:37:fb:1b:d6:
43:54:ed:1e:7c:87:82:fb:eb:f0:14:b2:b3:69:c8:
12:fa:2e:a3:29:d1:d1:bd:10:b9:3a:ab:8a:28:99:
f8:2d:a6:4b:e8:e2:ff:49:c2:c8:49:3d:e6:f6:af:
2d:1c:eb:bc:23:7f:d0:07:8a:f9:e0:2e:ed:49:55:
59:ac:0e:40:9c:e5:e9:65:ea:b6:34:ee:63:1f:ce:
d4:23:70:8f:86:7a:8d:72:fe:c7:5d:3b:fe:8f:f7:
be:82:fe:66:d5:8a:16:02:5e:e4:84:ec:1c:da:3b:
19:4b:5d:29:a4:5f:66:c2:1f:e6:91:4c:5a:be:de:
5c:1a:4f:7e:e3:0a:74:8d:8f:ec:95:ad:f2:9c:db:
4a:c4:55:bd:9f:6d:de:a4:12:ce:93:58:b2:09:30:
76:bc:de:6f:6b:2a:d0:5e:4f:e5:ba:40:01:60:98:
4a:4f:0f:1c:36:92:40:5e:e8:ca:ef:b5:bc:e6:5d:
04:ca:7f:ee:16:82:84:08:70:57:4a:af:f9:c1:12:
71:94:04:2f:de:0f:ba:52:db:0b:1b:16:52:81:92:
08:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F3:FE:34:6F:DB:72:3D:DD:14:AC:C8:86:6C:D8:FD:E7:CC:4D:2B
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hvP-NG_bcj3dFKzIhmzY_efMTSs.roa
sbgp-ipAddrBlock: critical
IPv4:
49.102.176.0/20
Signature Algorithm: sha256WithRSAEncryption
05:9c:3d:61:d2:b8:7a:38:0a:e3:cb:29:00:c6:9e:14:98:18:
59:c7:54:b4:92:cd:3d:6e:f2:96:81:d1:65:da:d6:f2:9c:8b:
95:06:f5:8a:22:33:8a:f8:c8:51:ee:3f:9d:64:19:e6:19:d0:
23:0f:ab:ec:14:52:19:05:ac:46:79:86:fd:96:c5:94:f5:d9:
8f:74:10:fe:da:f7:27:2b:e0:89:de:ed:9a:ff:b4:56:d0:ae:
e8:7a:a7:f8:51:90:e8:a5:5d:47:cc:03:1a:3e:a3:47:20:5f:
62:2e:1c:bd:d2:37:c5:83:93:18:0e:96:df:dd:9d:33:6e:8b:
58:6f:f1:b4:78:85:7f:71:ba:fc:59:0e:e2:c4:c4:ce:50:55:
60:a0:db:76:c0:be:29:e4:58:85:6e:45:18:55:b5:5b:87:c1:
65:3f:be:8c:c1:e7:af:e0:b7:6a:2a:40:bd:68:34:59:a2:80:
88:91:90:be:4d:ed:d0:d3:72:7d:57:1b:d6:e0:23:f4:b5:47:
62:0a:5a:14:dd:07:7b:a9:e3:9f:66:26:6b:0f:8b:03:5d:44:
7e:98:35:4a:a6:9f:d2:9f:79:c0:28:cf:af:20:cd:36:0a:6a:
fa:47:b6:29:0e:e2:eb:fd:69:14:ba:f4:b6:42:6f:4d:67:0e:
2f:77:05:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:57 2026 by rpki-client