
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/pzHoLnkgc3xI6Y3sTZ5EaqBEeCM.roa
File: pzHoLnkgc3xI6Y3sTZ5EaqBEeCM.roa (raw, json)
Hash identifier: erAHzkyila5hXKeccA4srjeIfh5CH9F1DmiG6hwt0d0=
Subject key identifier: A7:31:E8:2E:79:20:73:7C:48:E9:8D:EC:4D:9E:44:6A:A0:44:78:23
Certificate issuer: /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial: 70
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/pzHoLnkgc3xI6Y3sTZ5EaqBEeCM.roa
Signing time: Mon 29 Jun 2026 04:36:54 +0000
ROA not before: Mon 29 Jun 2026 04:36:54 +0000
ROA not after: Tue 15 Jun 2027 01:30:02 +0000
asID: 2519
IP address blocks: 1.21.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 09:28:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112 (0x70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Validity
Not Before: Jun 29 04:36:54 2026 GMT
Not After : Jun 15 01:30:02 2027 GMT
Subject: CN=A731E82E7920737C48E98DEC4D9E446AA0447823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:70:2f:fc:ba:41:b5:f6:d3:e0:de:22:0f:47:
5d:a4:97:05:96:e5:15:44:71:2a:b4:31:bf:89:39:
ab:eb:51:53:55:a2:3b:e6:46:cf:45:c6:9f:c7:c8:
aa:09:92:27:00:2f:9c:32:d1:14:53:b5:b7:0a:e0:
ee:89:e2:9c:6a:bb:e8:5e:3e:a8:3d:16:a9:9f:03:
e3:37:b0:d1:f3:21:f2:ed:72:f6:df:70:04:37:f0:
84:70:1c:ba:2c:a5:81:5e:3f:f8:1e:a4:bc:ac:13:
24:28:90:a5:ef:4b:96:49:55:38:4a:60:74:cf:6a:
47:e5:9e:57:14:d5:e8:46:2f:5b:67:88:0c:9b:e6:
2d:34:92:9e:ad:3a:0f:b6:99:19:07:c5:fd:72:88:
48:cf:a2:99:b9:c8:ba:42:1f:4f:4e:74:7b:cb:95:
08:66:8b:15:a1:d2:fc:3a:b7:69:2b:8d:cd:1e:cc:
42:16:04:f2:91:06:ad:33:83:34:6f:54:10:67:fc:
74:65:e4:8c:d4:6e:47:42:ad:c9:4e:03:f3:d0:c4:
08:dd:03:28:8a:af:0f:01:f1:33:0a:9d:26:5a:e3:
7b:4c:01:f7:ff:7b:b4:65:25:32:fa:68:d3:8b:55:
cc:ea:45:ee:bb:60:f8:ab:cc:75:0d:6a:ef:50:28:
ca:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:31:E8:2E:79:20:73:7C:48:E9:8D:EC:4D:9E:44:6A:A0:44:78:23
X509v3 Authority Key Identifier:
keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/pzHoLnkgc3xI6Y3sTZ5EaqBEeCM.roa
sbgp-ipAddrBlock: critical
IPv4:
1.21.144.0/20
Signature Algorithm: sha256WithRSAEncryption
3a:7b:62:39:f7:fc:66:23:b7:48:88:3d:43:28:e3:1b:f9:0a:
2a:25:7d:0f:c5:59:cd:4d:16:04:b5:c6:ae:e2:48:da:00:0d:
c4:e2:5e:27:26:89:b1:d3:e1:79:15:39:d6:67:33:ac:5f:cd:
51:02:b8:84:ec:39:90:44:b4:4d:2a:8e:1e:27:52:18:c8:a4:
c7:c4:73:5e:c6:d2:eb:be:b2:2f:cf:a5:ee:37:56:5b:d1:91:
d0:ed:bb:89:5a:72:ab:d3:e3:f2:ab:a5:62:b1:28:ec:e7:00:
d0:d1:8e:cf:d3:e3:b6:66:a3:74:01:c7:7f:4b:48:42:55:d3:
f5:75:86:78:30:7c:4d:5b:ab:ae:1c:a6:16:a8:15:cb:d7:09:
ff:09:e7:c4:37:86:f0:2a:e4:62:52:8a:e9:df:90:42:bc:dc:
45:9a:0e:07:a9:46:3e:ff:b2:f1:c1:7c:d6:ee:73:16:62:b8:
8e:7c:7e:e7:0b:83:51:0b:14:b6:0a:05:8e:1a:dc:53:54:8e:
e9:d0:ed:37:04:31:ed:1f:4a:3d:7a:91:ac:f2:7c:45:fa:e9:
e5:e2:5e:a6:83:0a:41:f6:e9:7b:5e:72:41:8b:27:ef:5d:21:
d6:56:5f:96:f8:78:00:ce:49:05:11:78:bc:c1:64:5e:62:ad:
51:10:81:47
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBcDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENjc4
OTFCOTRFRDlFNTU3RTc3OTc0NkJGQTIzRTAzRDFFRDIzNEVFMB4XDTI2MDYyOTA0
MzY1NFoXDTI3MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoQTczMUU4MkU3OTIwNzM3
QzQ4RTk4REVDNEQ5RTQ0NkFBMDQ0NzgyMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAN9wL/y6QbX20+DeIg9HXaSXBZblFURxKrQxv4k5q+tRU1WiO+ZG
z0XGn8fIqgmSJwAvnDLRFFO1twrg7oninGq76F4+qD0WqZ8D4zew0fMh8u1y9t9w
BDfwhHAcuiylgV4/+B6kvKwTJCiQpe9LlklVOEpgdM9qR+WeVxTV6EYvW2eIDJvm
LTSSnq06D7aZGQfF/XKISM+imbnIukIfT050e8uVCGaLFaHS/Dq3aSuNzR7MQhYE
8pEGrTODNG9UEGf8dGXkjNRuR0KtyU4D89DECN0DKIqvDwHxMwqdJlrje0wB9/97
tGUlMvpo04tVzOpF7rtg+KvMdQ1q71AoyhMCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBSnMegueSBzfEjpjexNnkRqoER4IzAfBgNVHSMEGDAWgBTWeJG5TtnlV+d5dGv6
I+A9HtI07jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDUyLzFuaVJ1VTdaNVZmbmVYUnItaVBnUFI3U05PNC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzFuaVJ1VTdaNVZmbmVYUnItaVBnUFI3
U05PNC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80NTIvcHpIb0xua2djM3hJNlkzc1RaNUVhcUJFZUNNLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBAEVkDANBgkqhkiG9w0BAQsFAAOCAQEA
OntiOff8ZiO3SIg9QyjjG/kKKiV9D8VZzU0WBLXGruJI2gANxOJeJyaJsdPheRU5
1mczrF/NUQK4hOw5kES0TSqOHidSGMikx8RzXsbS676yL8+l7jdWW9GR0O27iVpy
q9Pj8qulYrEo7OcA0NGOz9PjtmajdAHHf0tIQlXT9XWGeDB8TVurrhymFqgVy9cJ
/wnnxDeG8CrkYlKK6d+QQrzcRZoOB6lGPv+y8cF81u5zFmK4jnx+5wuDUQsUtgoF
jhrcU1SO6dDtNwQx7R9KPXqRrPJ8Rfrp5eJepoMKQfbpe15yQYsn710h1lZflvh4
AM5JBRF4vMFkXmKtURCBRw==
-----END CERTIFICATE-----
Generated at Sun Jul 5 11:14:49 2026 by rpki-client