
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Jzybfxj2Gd6nRvpwlErYdJVF_CU.roa
File: Jzybfxj2Gd6nRvpwlErYdJVF_CU.roa (raw, json)
Hash identifier: zjog7luAPztYtNclfZgdkWGOJnXkiiAqoFNrA86RUSY=
Subject key identifier: 27:3C:9B:7F:18:F6:19:DE:A7:46:FA:70:94:4A:D8:74:95:45:FC:25
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0E10
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Jzybfxj2Gd6nRvpwlErYdJVF_CU.roa
Signing time: Tue 01 Apr 2025 02:31:28 +0000
ROA not before: Tue 01 Apr 2025 02:31:28 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 49.104.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3600 (0xe10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 1 02:31:28 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=273C9B7F18F619DEA746FA70944AD8749545FC25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:51:0e:94:91:e0:49:ae:98:3e:73:b9:51:10:
72:b5:cd:63:85:b4:a3:ef:0a:83:f6:51:03:5c:20:
38:a5:b8:a5:19:5c:ce:75:24:fa:80:d7:8d:4f:1a:
47:3f:01:01:90:88:63:0e:11:df:f9:cd:28:f9:57:
de:67:4d:95:fd:65:b3:91:4d:0d:c1:6f:ac:72:6a:
b7:12:6e:dc:ab:55:0b:47:16:fc:37:f8:0b:a5:4b:
ae:e1:55:8b:4a:aa:7c:bf:a3:43:70:b5:49:a1:fd:
9a:9f:91:1b:0f:ed:f9:17:31:c0:fb:d5:69:46:f7:
b4:05:33:5f:c8:23:da:da:8d:07:fd:24:f1:e8:b0:
f5:ce:c9:92:a2:93:a4:8e:3d:af:48:06:f0:c0:2e:
9f:14:da:d9:a8:10:80:fc:37:fb:7b:dc:6d:59:1e:
2b:b4:93:41:f8:b7:d6:fd:ef:1e:b7:57:f6:93:69:
47:dd:51:1e:f1:ce:eb:8c:97:14:ea:3d:4c:65:f4:
40:4b:24:b8:9d:73:67:c1:46:41:98:4e:f0:0b:ae:
4b:49:e7:38:02:96:c3:9c:62:a9:8c:af:cd:a0:b9:
c9:55:ad:84:66:b1:a7:8e:56:ba:1e:16:1e:9b:c5:
16:8e:b6:8b:cb:b0:f6:6d:27:97:11:61:80:a1:ef:
e9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3C:9B:7F:18:F6:19:DE:A7:46:FA:70:94:4A:D8:74:95:45:FC:25
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Jzybfxj2Gd6nRvpwlErYdJVF_CU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.104.28.0/22
Signature Algorithm: sha256WithRSAEncryption
54:6d:4c:79:60:fc:2b:2c:b6:ca:d4:83:e8:aa:77:d1:7b:1e:
de:76:1e:0e:f4:1b:d9:f9:1f:cf:ba:20:ff:97:84:74:e3:a0:
e1:7c:3a:35:aa:a9:ad:f2:03:6d:34:34:b9:64:6d:e0:9d:8b:
10:d8:1a:c6:f8:60:a1:69:35:fe:0d:21:76:ce:6f:01:eb:d0:
f5:83:88:34:7a:e4:6f:60:98:a9:ee:b2:eb:7a:15:7a:e9:39:
9a:e4:9c:fc:4d:27:4e:70:0f:99:5e:d9:5c:76:cc:0f:a1:8f:
cc:bb:84:79:00:d0:86:9a:7a:ac:73:4c:0f:18:3d:d9:a5:8d:
6f:11:4b:f1:c0:34:df:b8:2b:2e:19:a0:4b:6d:7b:8a:10:f7:
26:be:a3:7a:ce:5c:d5:64:84:39:db:f2:f5:6e:2d:e1:d4:fa:
7a:aa:7d:6d:e5:75:30:17:a7:ac:0b:29:54:5d:9b:73:8d:84:
ae:b7:7d:75:c0:66:85:05:14:d0:db:88:b4:f7:fa:ee:43:c5:
4f:7c:6e:e6:84:08:9d:7c:5b:7e:80:72:9f:76:ae:65:26:f9:
86:50:c7:ed:d7:7e:f1:7b:15:46:1c:a5:cd:42:f7:eb:30:a8:
4f:7f:b5:b3:f3:ed:7e:3e:d4:f6:4b:3e:ce:fd:b7:12:92:0d:
e7:94:c1:11
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICDhAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw
MjMxMjhaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDI3M0M5QjdGMThGNjE5
REVBNzQ2RkE3MDk0NEFEODc0OTU0NUZDMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRUQ6UkeBJrpg+c7lREHK1zWOFtKPvCoP2UQNcIDiluKUZXM51
JPqA141PGkc/AQGQiGMOEd/5zSj5V95nTZX9ZbORTQ3Bb6xyarcSbtyrVQtHFvw3
+AulS67hVYtKqny/o0NwtUmh/ZqfkRsP7fkXMcD71WlG97QFM1/II9rajQf9JPHo
sPXOyZKik6SOPa9IBvDALp8U2tmoEID8N/t73G1ZHiu0k0H4t9b97x63V/aTaUfd
UR7xzuuMlxTqPUxl9EBLJLidc2fBRkGYTvALrktJ5zgClsOcYqmMr82guclVrYRm
saeOVroeFh6bxRaOtovLsPZtJ5cRYYCh7+k/AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUJzybfxj2Gd6nRvpwlErYdJVF/CUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0p6eWJmeGoyR2Q2blJ2cHdsRXJZZEpWRl9DVS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIxaBwwDQYJKoZIhvcNAQELBQADggEBAFRtTHlg/CsstsrUg+iqd9F7Ht52
Hg70G9n5H8+6IP+XhHTjoOF8OjWqqa3yA200NLlkbeCdixDYGsb4YKFpNf4NIXbO
bwHr0PWDiDR65G9gmKnusut6FXrpOZrknPxNJ05wD5le2Vx2zA+hj8y7hHkA0Iaa
eqxzTA8YPdmljW8RS/HANN+4Ky4ZoEtte4oQ9ya+o3rOXNVkhDnb8vVuLeHU+nqq
fW3ldTAXp6wLKVRdm3ONhK63fXXAZoUFFNDbiLT3+u5DxU98buaECJ18W36Acp92
rmUm+YZQx+3XfvF7FUYcpc1C9+swqE9/tbPz7X4+1PZLPs79txKSDeeUwRE=
-----END CERTIFICATE-----
Generated at Thu Nov 6 00:26:05 2025 by rpki-client