
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20010/Oto9ifCRx_bJgrWZqCTmy_JgCJE.roa
File: Oto9ifCRx_bJgrWZqCTmy_JgCJE.roa (raw, json)
Hash identifier: U4WFY04rpQRTYh8NaMUyuaRjRV4Q2X1JTKkcdY4LYrI=
Subject key identifier: 3A:DA:3D:89:F0:91:C7:F6:C9:82:B5:99:A8:24:E6:CB:F2:60:08:91
Certificate issuer: /CN=C556EE5CED033BC6A1D1D2EFCCF98216208C7DD1
Certificate serial: 05
Authority key identifier: C5:56:EE:5C:ED:03:3B:C6:A1:D1:D2:EF:CC:F9:82:16:20:8C:7D:D1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xVbuXO0DO8ah0dLvzPmCFiCMfdE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20010/Oto9ifCRx_bJgrWZqCTmy_JgCJE.roa
Signing time: Tue 31 Mar 2026 08:48:41 +0000
ROA not before: Tue 31 Mar 2026 08:48:41 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 59122
IP address blocks: 103.215.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20010/xVbuXO0DO8ah0dLvzPmCFiCMfdE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20010/xVbuXO0DO8ah0dLvzPmCFiCMfdE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xVbuXO0DO8ah0dLvzPmCFiCMfdE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C556EE5CED033BC6A1D1D2EFCCF98216208C7DD1
Validity
Not Before: Mar 31 08:48:41 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=3ADA3D89F091C7F6C982B599A824E6CBF2600891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cf:21:12:eb:65:d2:30:8a:e7:bc:d7:4e:d0:
4b:14:93:7a:43:d8:19:65:c7:44:bb:a3:a7:fa:ec:
38:0f:9d:f6:11:04:86:e1:a4:eb:5e:a2:0c:f8:7f:
88:69:1c:00:6d:11:da:3d:e2:b7:eb:2a:d2:36:52:
a5:dd:3c:91:49:40:54:c1:eb:35:99:b7:c1:32:75:
5f:d9:a0:cf:73:e5:60:ba:13:3b:5b:a0:46:a5:53:
0b:9d:ed:85:7b:97:4a:bf:c7:2b:1f:2f:e1:85:d8:
23:76:e9:f2:89:a8:10:c4:53:5b:05:b8:30:9f:88:
f1:05:6f:39:d0:21:4c:0d:e0:99:b0:0f:42:c8:f3:
b9:51:26:02:ef:cc:bb:fc:dc:75:ea:3f:df:50:8e:
e6:d1:51:e7:2b:8c:e6:e6:da:2a:8d:b7:1f:7d:c9:
2a:ac:03:4a:96:89:d0:4c:20:00:90:2a:9c:b5:89:
ce:c9:ac:98:27:cc:1f:d0:09:24:ce:ac:0c:bf:06:
bf:56:92:29:94:41:43:fb:72:cf:f4:2c:c9:5f:6a:
6c:ee:f2:75:16:b3:a3:f0:17:d7:e3:c5:0f:d0:f7:
75:19:21:11:e1:f5:45:92:c0:fa:a1:94:26:88:0c:
e6:79:90:6b:7d:8c:a7:48:30:82:37:cd:fe:59:c3:
8b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DA:3D:89:F0:91:C7:F6:C9:82:B5:99:A8:24:E6:CB:F2:60:08:91
X509v3 Authority Key Identifier:
keyid:C5:56:EE:5C:ED:03:3B:C6:A1:D1:D2:EF:CC:F9:82:16:20:8C:7D:D1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20010/xVbuXO0DO8ah0dLvzPmCFiCMfdE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xVbuXO0DO8ah0dLvzPmCFiCMfdE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20010/Oto9ifCRx_bJgrWZqCTmy_JgCJE.roa
sbgp-ipAddrBlock: critical
IPv4:
103.215.56.0/22
Signature Algorithm: sha256WithRSAEncryption
61:7b:60:f9:13:86:0d:dc:26:58:a7:01:8c:cd:44:0e:21:1f:
11:1c:40:72:ff:66:d0:ee:79:04:6f:04:69:7e:10:f9:3c:f4:
44:fb:a1:66:78:64:2a:95:d1:60:70:ec:bd:46:0a:5c:9f:58:
63:18:21:0d:2f:bc:84:1b:31:a9:9f:9b:aa:89:d2:42:fa:ac:
da:93:64:6c:61:63:a1:1a:42:12:04:39:a1:9d:b1:88:a5:66:
f5:b4:8e:b0:7e:79:ed:4a:55:8c:fa:2c:69:a2:af:51:d3:84:
52:6b:fc:56:4b:d0:9e:ab:71:a6:33:4c:60:8e:bf:cf:68:8c:
ef:83:3c:45:58:cf:3b:3c:91:66:4c:bc:1c:2e:e7:1e:11:14:
ab:2a:73:66:57:e3:30:e8:c0:a0:11:ae:84:16:5a:59:ee:8a:
0f:42:e1:6b:73:7a:7f:72:ba:5e:59:be:b2:7b:17:1f:28:fe:
e6:fc:ef:db:4d:a9:2c:b5:cd:ee:fc:0c:44:92:3f:54:24:c1:
4c:c4:07:1a:63:dd:3f:fd:ba:a2:18:14:1c:45:ef:c6:c5:2a:
87:65:34:0a:b4:fb:9d:6a:31:df:7e:10:ff:56:a3:b7:5c:5b:
8b:67:51:a3:48:7e:1f:f7:af:9b:43:41:df:29:20:4d:8c:d7:
42:f7:7f:35
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBBTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNTU2
RUU1Q0VEMDMzQkM2QTFEMUQyRUZDQ0Y5ODIxNjIwOEM3REQxMB4XDTI2MDMzMTA4
NDg0MVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoM0FEQTNEODlGMDkxQzdG
NkM5ODJCNTk5QTgyNEU2Q0JGMjYwMDg5MTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALnPIRLrZdIwiue8107QSxSTekPYGWXHRLujp/rsOA+d9hEEhuGk
616iDPh/iGkcAG0R2j3it+sq0jZSpd08kUlAVMHrNZm3wTJ1X9mgz3PlYLoTO1ug
RqVTC53thXuXSr/HKx8v4YXYI3bp8omoEMRTWwW4MJ+I8QVvOdAhTA3gmbAPQsjz
uVEmAu/Mu/zcdeo/31CO5tFR5yuM5ubaKo23H33JKqwDSpaJ0EwgAJAqnLWJzsms
mCfMH9AJJM6sDL8Gv1aSKZRBQ/tyz/QsyV9qbO7ydRazo/AX1+PFD9D3dRkhEeH1
RZLA+qGUJogM5nmQa32Mp0gwgjfN/lnDi+UCAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBQ62j2J8JHH9smCtZmoJObL8mAIkTAfBgNVHSMEGDAWgBTFVu5c7QM7xqHR0u/M
+YIWIIx90TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwMTAveFZidVhPMERPOGFoMGRMdnpQbUNGaUNNZmRFLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveFZidVhPMERPOGFoMGRMdnpQbUNG
aUNNZmRFLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMDEwL090bzlpZkNSeF9iSmdyV1pxQ1RteV9KZ0NKRS5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJn1zgwDQYJKoZIhvcNAQELBQAD
ggEBAGF7YPkThg3cJlinAYzNRA4hHxEcQHL/ZtDueQRvBGl+EPk89ET7oWZ4ZCqV
0WBw7L1GClyfWGMYIQ0vvIQbMamfm6qJ0kL6rNqTZGxhY6EaQhIEOaGdsYilZvW0
jrB+ee1KVYz6LGmir1HThFJr/FZL0J6rcaYzTGCOv89ojO+DPEVYzzs8kWZMvBwu
5x4RFKsqc2ZX4zDowKARroQWWlnuig9C4Wtzen9yul5ZvrJ7Fx8o/ub879tNqSy1
ze78DESSP1QkwUzEBxpj3T/9uqIYFBxF78bFKodlNAq0+51qMd9+EP9Wo7dcW4tn
UaNIfh/3r5tDQd8pIE2M10L3fzU=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:16 2026 by rpki-client