
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20006/JKfpkLX7jmmJfmoZE7v5ihadrCE.roa
File: JKfpkLX7jmmJfmoZE7v5ihadrCE.roa (raw, json)
Hash identifier: 4qwcREMZqZneKxSu1GYiY/rk/E9jY6GelVISTf6l0ns=
Subject key identifier: 24:A7:E9:90:B5:FB:8E:69:89:7E:6A:19:13:BB:F9:8A:16:9D:AC:21
Certificate issuer: /CN=F5AD1A7FD49951CD1B1D482A82F28A95A7B54E1E
Certificate serial: 0E
Authority key identifier: F5:AD:1A:7F:D4:99:51:CD:1B:1D:48:2A:82:F2:8A:95:A7:B5:4E:1E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9a0af9SZUc0bHUgqgvKKlae1Th4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20006/JKfpkLX7jmmJfmoZE7v5ihadrCE.roa
Signing time: Tue 31 Mar 2026 08:46:22 +0000
ROA not before: Tue 31 Mar 2026 08:46:22 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 0
IP address blocks: 202.235.0.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20006/9a0af9SZUc0bHUgqgvKKlae1Th4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20006/9a0af9SZUc0bHUgqgvKKlae1Th4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9a0af9SZUc0bHUgqgvKKlae1Th4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F5AD1A7FD49951CD1B1D482A82F28A95A7B54E1E
Validity
Not Before: Mar 31 08:46:22 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=24A7E990B5FB8E69897E6A1913BBF98A169DAC21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:32:f1:eb:5c:25:cc:e9:b8:94:b9:57:a7:8f:
2d:ae:17:d5:b2:8d:41:69:03:78:5c:87:8f:7d:4f:
3d:21:86:84:d0:5a:92:b2:99:bc:25:69:57:f2:93:
0a:6d:40:41:e9:33:6d:13:99:9b:8b:69:2f:f2:88:
7d:90:b5:7c:55:5e:30:fc:a4:65:24:6b:61:39:15:
ef:1f:59:6c:10:e5:69:c1:35:1a:85:33:7c:bd:f9:
f4:85:37:ca:06:88:ba:09:21:18:54:0f:1a:03:1c:
2f:01:f3:cb:e0:f6:2d:be:22:6c:11:1b:01:cf:a4:
32:68:2d:1b:0c:a0:d2:f7:4a:a1:4c:8b:75:d7:56:
5f:de:65:5a:79:c8:64:00:e4:9f:44:59:45:a9:41:
3e:02:0a:5c:47:2e:6e:02:f2:89:15:d6:38:ee:aa:
35:fa:ad:43:4f:b1:9f:e1:9f:82:91:ee:c8:8c:1a:
d0:40:df:88:bf:1d:84:bb:38:5c:68:12:36:4c:1b:
14:74:3c:8a:90:63:3e:5e:ac:3e:db:43:13:e0:8c:
a7:85:cf:42:38:ec:90:45:34:d8:17:22:fe:7c:c6:
b6:78:01:7d:d8:d4:08:45:03:b5:eb:9d:41:14:73:
12:01:26:d1:18:04:c3:6a:32:0d:94:c3:73:8e:a3:
bc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A7:E9:90:B5:FB:8E:69:89:7E:6A:19:13:BB:F9:8A:16:9D:AC:21
X509v3 Authority Key Identifier:
keyid:F5:AD:1A:7F:D4:99:51:CD:1B:1D:48:2A:82:F2:8A:95:A7:B5:4E:1E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20006/9a0af9SZUc0bHUgqgvKKlae1Th4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9a0af9SZUc0bHUgqgvKKlae1Th4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20006/JKfpkLX7jmmJfmoZE7v5ihadrCE.roa
sbgp-ipAddrBlock: critical
IPv4:
202.235.0.0/21
Signature Algorithm: sha256WithRSAEncryption
7c:ca:60:12:bd:2a:cf:c8:c2:4c:70:b7:b6:60:74:a9:e4:ea:
b7:6b:03:87:c8:72:69:c9:ab:c4:e9:88:f3:c1:ca:e2:a0:05:
ee:eb:a2:5d:b6:c3:e6:a2:fc:ba:31:0b:78:79:99:d9:c0:7f:
eb:4b:59:a3:0f:09:9e:d3:61:a0:93:97:c5:b4:65:d0:a7:5d:
ae:11:40:a4:96:f1:a4:77:43:2d:67:39:04:db:32:78:dd:92:
f1:c0:d1:34:2f:e6:4e:f1:5c:de:37:08:b9:f7:8d:b0:a2:31:
ba:07:4b:1e:6f:17:0e:95:e5:17:e7:b9:fb:43:82:0c:4a:e8:
57:a8:65:b6:cf:1b:a2:d2:2f:99:93:29:ab:ff:f9:93:27:d7:
52:5d:97:66:b8:79:a8:e9:9a:3d:90:c6:63:fc:b6:6f:fe:bc:
f4:0f:81:1d:11:bb:31:30:e6:3b:57:1a:d5:54:ca:37:8e:a3:
d7:d0:97:3a:f5:d8:36:4d:76:60:46:7f:c3:d4:e0:d0:7d:56:
5c:e9:a1:31:00:37:02:2d:e0:3f:0d:30:1a:db:3c:bb:1f:f7:
bf:d8:dc:e5:59:e8:48:7d:84:0a:a5:04:94:61:40:15:2e:79:
f9:e7:69:cd:21:fe:b1:3b:a2:8e:2d:86:c0:0a:4b:91:81:25:
6f:a3:9c:6c
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBDjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGNUFE
MUE3RkQ0OTk1MUNEMUIxRDQ4MkE4MkYyOEE5NUE3QjU0RTFFMB4XDTI2MDMzMTA4
NDYyMloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMjRBN0U5OTBCNUZCOEU2
OTg5N0U2QTE5MTNCQkY5OEExNjlEQUMyMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALgy8etcJczpuJS5V6ePLa4X1bKNQWkDeFyHj31PPSGGhNBakrKZ
vCVpV/KTCm1AQekzbROZm4tpL/KIfZC1fFVeMPykZSRrYTkV7x9ZbBDlacE1GoUz
fL359IU3ygaIugkhGFQPGgMcLwHzy+D2Lb4ibBEbAc+kMmgtGwyg0vdKoUyLdddW
X95lWnnIZADkn0RZRalBPgIKXEcubgLyiRXWOO6qNfqtQ0+xn+GfgpHuyIwa0EDf
iL8dhLs4XGgSNkwbFHQ8ipBjPl6sPttDE+CMp4XPQjjskEU02Bci/nzGtngBfdjU
CEUDteudQRRzEgEm0RgEw2oyDZTDc46jvGECAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBQkp+mQtfuOaYl+ahkTu/mKFp2sITAfBgNVHSMEGDAWgBT1rRp/1JlRzRsdSCqC
8oqVp7VOHjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwMDYvOWEwYWY5U1pVYzBiSFVncWd2S0tsYWUxVGg0LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvOWEwYWY5U1pVYzBiSFVncWd2S0ts
YWUxVGg0LmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMDA2L0pLZnBrTFg3am1tSmZtb1pFN3Y1aWhhZHJDRS5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPK6wAwDQYJKoZIhvcNAQELBQAD
ggEBAHzKYBK9Ks/Iwkxwt7ZgdKnk6rdrA4fIcmnJq8TpiPPByuKgBe7rol22w+ai
/LoxC3h5mdnAf+tLWaMPCZ7TYaCTl8W0ZdCnXa4RQKSW8aR3Qy1nOQTbMnjdkvHA
0TQv5k7xXN43CLn3jbCiMboHSx5vFw6V5RfnuftDggxK6FeoZbbPG6LSL5mTKav/
+ZMn11Jdl2a4eajpmj2QxmP8tm/+vPQPgR0RuzEw5jtXGtVUyjeOo9fQlzr12DZN
dmBGf8PU4NB9VlzpoTEANwIt4D8NMBrbPLsf97/Y3OVZ6Eh9hAqlBJRhQBUuefnn
ac0h/rE7oo4thsAKS5GBJW+jnGw=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:17 2026 by rpki-client