
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/425/PnzybaiqswQA0iDg6UC3wbpk7rQ.roa
File: PnzybaiqswQA0iDg6UC3wbpk7rQ.roa (raw, json)
Hash identifier: n5jF37wSga/1WlgtWehhbjHqnYvycX9JujnCkDeeP0U=
Subject key identifier: 3E:7C:F2:6D:A8:AA:B3:04:00:D2:20:E0:E9:40:B7:C1:BA:64:EE:B4
Certificate issuer: /CN=B990BFD63F8675B7B44563623E42F729256CA1E8
Certificate serial: 0F
Authority key identifier: B9:90:BF:D6:3F:86:75:B7:B4:45:63:62:3E:42:F7:29:25:6C:A1:E8
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/PnzybaiqswQA0iDg6UC3wbpk7rQ.roa
Signing time: Tue 31 Mar 2026 08:49:05 +0000
ROA not before: Tue 31 Mar 2026 08:49:05 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 10001
IP address blocks: 61.195.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B990BFD63F8675B7B44563623E42F729256CA1E8
Validity
Not Before: Mar 31 08:49:05 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=3E7CF26DA8AAB30400D220E0E940B7C1BA64EEB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:69:69:86:47:ab:5f:9f:c2:b2:58:d7:e0:e8:
c2:26:b2:80:ea:e5:9d:4e:85:46:f9:53:d8:0e:b8:
ca:de:2e:4f:19:3d:27:de:7c:eb:ae:32:ed:cd:ac:
ae:22:c9:be:2f:28:3e:1f:e0:9c:44:fe:c1:4d:c5:
2c:2d:29:ff:b5:7e:96:0c:9f:81:94:6e:6b:dc:b1:
69:e9:81:64:20:cf:a2:21:cd:34:dc:82:0b:a5:7a:
4d:6f:4e:4c:62:3c:0b:94:80:34:f0:27:86:c5:db:
ba:8e:67:df:29:45:73:9c:2d:6d:07:45:17:3a:58:
29:64:a0:91:99:85:e0:53:82:b6:de:2a:d0:c1:bc:
92:15:cb:f0:fa:7d:ba:5f:f7:3e:02:e7:0b:a7:e9:
67:6d:2c:0a:b9:65:9b:90:98:dc:35:ec:f2:57:ca:
d7:d4:ec:7f:29:f4:17:c0:b1:fa:e3:d4:c0:3a:e2:
a8:28:f3:55:79:98:93:80:5a:e1:90:62:66:64:d8:
3c:82:bb:2d:1f:fd:d9:2b:50:0d:5d:dd:0c:0e:bb:
1b:22:f5:c6:0e:a1:20:52:a8:39:51:8c:35:d3:1c:
ea:ce:e4:49:17:46:9b:60:c4:07:52:44:a4:db:e7:
f9:eb:4f:2d:ad:c1:5d:2c:22:7d:58:f8:18:a9:ad:
a1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7C:F2:6D:A8:AA:B3:04:00:D2:20:E0:E9:40:B7:C1:BA:64:EE:B4
X509v3 Authority Key Identifier:
keyid:B9:90:BF:D6:3F:86:75:B7:B4:45:63:62:3E:42:F7:29:25:6C:A1:E8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/PnzybaiqswQA0iDg6UC3wbpk7rQ.roa
sbgp-ipAddrBlock: critical
IPv4:
61.195.240.0/20
Signature Algorithm: sha256WithRSAEncryption
39:42:ba:4a:2b:fb:b9:7a:a3:00:29:37:02:21:a7:c6:76:8b:
fb:43:76:63:74:a6:8a:83:6e:48:fc:ff:9a:1c:7a:9a:e2:5b:
14:61:f3:6e:96:f3:d0:b7:70:81:ff:b8:b6:d8:c4:b7:4e:f1:
2f:0d:53:df:d4:ae:39:2e:25:0a:be:3f:2c:4b:83:e0:27:5c:
a0:19:ac:24:65:c0:c8:89:f4:c6:6d:36:b2:61:f1:b2:66:e5:
d4:ae:62:db:b2:2c:09:eb:ca:c0:13:66:3c:10:8a:3b:44:b3:
3b:be:7d:ac:b9:4f:7b:50:73:d8:43:bf:6e:f6:56:fc:80:4b:
fb:02:8e:73:01:ec:1f:ec:c3:6e:53:6b:8f:87:21:e5:1b:3e:
6e:47:54:98:a9:f5:a6:45:26:eb:e3:6d:3e:a1:80:0e:b7:53:
97:d3:59:94:2c:9b:8d:54:80:69:40:d6:f1:7d:83:9f:dd:5c:
5f:27:cd:78:10:0c:22:1d:45:41:0f:09:96:21:72:0a:35:a4:
16:ac:35:bc:23:d5:ac:32:3c:14:2d:4f:05:88:18:e5:ee:ad:
55:ce:e3:f3:ab:50:27:81:a6:dd:f4:84:67:66:74:e2:d6:63:
ac:8e:87:22:f5:2c:d8:6c:9f:10:48:32:b6:e8:f6:1b:43:27:
b6:58:c6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:36:40 2026 by rpki-client