
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/PBLp_HGFlzx07cATb_cYvpJ0ziY.roa
File: PBLp_HGFlzx07cATb_cYvpJ0ziY.roa (raw, json)
Hash identifier: J5W7p/U9VFRNB7loac3lXsRO4rEBrSeyWIUxnb/YHlY=
Subject key identifier: 3C:12:E9:FC:71:85:97:3C:74:ED:C0:13:6F:F7:18:BE:92:74:CE:26
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 11A8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PBLp_HGFlzx07cATb_cYvpJ0ziY.roa
Signing time: Sun 01 Mar 2026 02:31:21 +0000
ROA not before: Sun 01 Mar 2026 02:31:21 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.104.40.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4520 (0x11a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:31:21 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=3C12E9FC7185973C74EDC0136FF718BE9274CE26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:54:14:db:02:50:cf:61:91:29:45:4e:16:b6:
e8:99:79:65:3e:74:6e:0a:29:0c:ec:b5:fe:ec:17:
9e:0b:ec:3d:91:40:d8:84:23:ab:c7:73:8d:ff:5d:
0c:c8:ee:83:95:49:26:22:44:78:64:d5:d4:e2:0a:
69:d3:c0:13:fe:28:a0:ac:1d:fc:30:c6:ad:f9:98:
3e:37:6b:b0:72:4e:7e:e1:e2:31:69:2b:c7:66:c2:
7b:4f:36:16:17:2e:36:79:ef:4b:ab:91:ac:89:07:
c9:f5:7a:98:91:a3:22:f0:e9:ff:f9:73:15:7b:16:
30:70:41:0e:d7:5a:1b:ec:b3:54:d6:fe:ed:f2:f0:
33:57:c5:3e:4f:5b:08:02:08:e9:86:5d:6f:bf:67:
a4:ec:df:0f:f3:34:16:a2:ec:ea:da:cd:37:50:7c:
96:b5:67:46:ac:e1:48:36:13:2a:0c:be:41:41:e5:
32:88:3c:e7:88:df:ec:be:b1:26:2b:67:84:1a:2d:
48:9a:46:4e:3e:e7:fb:68:d6:1e:70:d4:9a:91:6f:
de:64:6e:c5:06:9d:8c:81:e1:8b:59:d7:c9:5d:54:
61:fe:fe:b6:f0:dc:99:d6:88:1b:10:45:e2:c0:56:
c7:e0:09:4b:91:98:ec:2c:bd:65:96:6f:9b:d2:9c:
e2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:12:E9:FC:71:85:97:3C:74:ED:C0:13:6F:F7:18:BE:92:74:CE:26
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PBLp_HGFlzx07cATb_cYvpJ0ziY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.104.40.0/22
Signature Algorithm: sha256WithRSAEncryption
07:41:6d:38:0e:01:6f:46:58:5e:a7:89:8e:30:76:9f:c5:fe:
f3:8b:9f:4d:bf:d8:19:e7:48:1b:95:71:16:c3:fa:e0:63:9b:
6f:cf:3f:28:4d:72:10:60:12:1d:f0:10:bc:f1:25:49:d2:fe:
21:e4:ba:85:39:f2:56:10:f4:1a:11:87:46:59:22:4c:76:c8:
d2:b4:14:2e:2a:02:6c:6f:e4:d8:1c:72:0a:27:ae:0a:e1:53:
b7:f2:88:fe:86:c2:36:a6:3f:49:a5:33:f1:90:c9:21:9c:e2:
61:91:41:75:5a:2d:11:a3:04:80:4f:68:44:8a:53:35:14:03:
32:dd:f4:54:a1:00:c5:7f:26:64:95:65:15:85:92:dd:8f:2c:
b8:26:0d:29:07:96:b6:de:2b:c9:2c:62:ed:06:48:93:41:99:
76:19:65:88:63:77:d9:d3:ea:09:56:5d:f3:c2:de:9a:d9:f7:
ca:11:b7:05:7b:7a:99:b3:b2:4a:ad:41:b3:07:7c:31:1d:50:
81:2c:3b:ea:ee:75:ca:95:dc:cd:38:ea:80:a7:5b:25:4e:a3:
dd:e9:d7:57:09:f3:32:cc:7d:2a:e7:4d:af:1e:a7:ab:d3:0e:
b3:59:a6:aa:4c:b3:7e:ca:32:3b:51:fb:88:df:94:3c:2c:3e:
f2:16:2b:94
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEagwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MjMxMjFaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNDMTJFOUZDNzE4NTk3
M0M3NEVEQzAxMzZGRjcxOEJFOTI3NENFMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBVBTbAlDPYZEpRU4WtuiZeWU+dG4KKQzstf7sF54L7D2RQNiE
I6vHc43/XQzI7oOVSSYiRHhk1dTiCmnTwBP+KKCsHfwwxq35mD43a7ByTn7h4jFp
K8dmwntPNhYXLjZ570urkayJB8n1epiRoyLw6f/5cxV7FjBwQQ7XWhvss1TW/u3y
8DNXxT5PWwgCCOmGXW+/Z6Ts3w/zNBai7OrazTdQfJa1Z0as4Ug2EyoMvkFB5TKI
POeI3+y+sSYrZ4QaLUiaRk4+5/to1h5w1JqRb95kbsUGnYyB4YtZ18ldVGH+/rbw
3JnWiBsQReLAVsfgCUuRmOwsvWWWb5vSnOLFAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUPBLp/HGFlzx07cATb/cYvpJ0ziYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L1BCTHBfSEdGbHp4MDdjQVRiX2NZdnBKMHppWS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIxaCgwDQYJKoZIhvcNAQELBQADggEBAAdBbTgOAW9GWF6niY4wdp/F/vOL
n02/2BnnSBuVcRbD+uBjm2/PPyhNchBgEh3wELzxJUnS/iHkuoU58lYQ9BoRh0ZZ
Ikx2yNK0FC4qAmxv5NgccgonrgrhU7fyiP6GwjamP0mlM/GQySGc4mGRQXVaLRGj
BIBPaESKUzUUAzLd9FShAMV/JmSVZRWFkt2PLLgmDSkHlrbeK8ksYu0GSJNBmXYZ
ZYhjd9nT6glWXfPC3prZ98oRtwV7epmzskqtQbMHfDEdUIEsO+rudcqV3M046oCn
WyVOo93p11cJ8zLMfSrnTa8ep6vTDrNZpqpMs37KMjtR+4jflDwsPvIWK5Q=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:12 2026 by rpki-client