
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20034/ocq9mA2e1R7PYpHKP-zbvbozUJ4.roa
File: ocq9mA2e1R7PYpHKP-zbvbozUJ4.roa (raw, json)
Hash identifier: DoB61NtyqMC8Bvb2p5SHH8pAVDN7iUB4gO+HJ6dENbc=
Subject key identifier: A1:CA:BD:98:0D:9E:D5:1E:CF:62:91:CA:3F:EC:DB:BD:BA:33:50:9E
Certificate issuer: /CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
Certificate serial: 61
Authority key identifier: 8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/ocq9mA2e1R7PYpHKP-zbvbozUJ4.roa
Signing time: Tue 31 Mar 2026 08:31:09 +0000
ROA not before: Tue 31 Mar 2026 08:31:09 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 131923
IP address blocks: 218.45.64.0/19 maxlen: 25
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97 (0x61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
Validity
Not Before: Mar 31 08:31:09 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=A1CABD980D9ED51ECF6291CA3FECDBBDBA33509E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:07:3b:1e:52:0f:e1:67:3e:d1:70:f4:2a:a7:
ea:df:85:47:8b:a6:aa:90:46:48:ba:11:ef:48:ec:
67:ee:0c:d3:90:42:23:b7:5c:0b:26:10:86:a1:7d:
e5:1c:d4:ec:86:54:79:a3:5e:45:76:2f:93:9b:64:
64:ac:cb:bd:fa:17:11:d3:26:4b:9e:fc:ee:cd:f5:
70:a4:7d:7d:30:cb:b8:50:31:be:c6:c9:a8:ad:09:
2f:73:6d:e3:f7:62:d8:ea:e6:32:f4:f5:50:2a:2b:
a1:9e:c0:44:4e:05:b3:71:a8:e9:c2:78:ac:e3:1b:
8b:e3:63:92:d4:c0:28:08:0c:30:0f:7a:32:29:a5:
5f:43:79:04:7d:1a:9c:3d:e0:5f:98:16:d9:34:6d:
b1:7b:8f:dd:da:04:40:41:7e:8c:a1:6c:7d:5f:45:
57:3e:5b:05:82:30:39:11:c0:10:a6:8e:1c:28:95:
1f:e4:48:d8:5d:79:71:4f:39:41:cb:0b:09:a2:fa:
c4:20:5f:ce:98:6d:25:bb:74:86:7d:b4:7b:f4:1c:
b3:98:1b:ac:07:2b:fa:bf:b6:ef:74:f4:74:44:d4:
35:9c:35:0c:ee:af:fb:7e:1f:bc:5a:80:22:57:a5:
21:bd:38:df:4d:b3:1a:1d:b4:6d:ce:e1:30:c9:fc:
e8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CA:BD:98:0D:9E:D5:1E:CF:62:91:CA:3F:EC:DB:BD:BA:33:50:9E
X509v3 Authority Key Identifier:
keyid:8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/ocq9mA2e1R7PYpHKP-zbvbozUJ4.roa
sbgp-ipAddrBlock: critical
IPv4:
218.45.64.0/19
Signature Algorithm: sha256WithRSAEncryption
96:20:96:ba:35:e7:bd:04:ce:a0:50:12:7c:72:75:26:22:1f:
40:68:86:f9:01:fa:98:a0:0e:9f:91:46:b4:28:8b:11:21:d4:
9b:3c:da:2d:45:01:0d:95:b8:2a:db:f0:6e:29:cd:f3:93:77:
bc:a1:06:45:95:9e:0f:c1:4d:07:df:0b:0d:9c:0c:fb:8b:0a:
20:07:aa:59:58:c1:02:fb:8b:e1:cc:6e:4e:fd:f3:1d:d2:a4:
90:dc:d9:36:26:9e:ee:3a:66:22:ac:eb:7c:92:3e:38:1e:65:
c7:53:ec:9c:8f:e8:86:f1:28:0a:65:b4:c2:9e:d7:9d:f7:c7:
1b:c3:4c:b0:e9:9d:e9:87:58:38:17:f0:3a:c0:26:92:12:d5:
d7:d1:c2:4b:81:ba:30:7c:cf:fc:96:a4:75:df:74:03:6b:d9:
51:46:8e:bb:87:12:61:2b:70:60:5e:01:c6:8c:b4:06:8f:e8:
02:9f:8a:26:5e:e0:14:92:ad:85:b6:3c:e3:f4:01:72:53:0d:
3d:d6:07:d1:5e:41:b0:d9:01:a4:ae:3f:b8:a8:26:39:e1:61:
67:18:d0:99:af:e0:e9:46:cf:eb:91:8e:c5:74:bd:3f:cb:13:
34:3c:f5:46:dd:1e:7f:27:7f:80:6c:85:c6:59:73:57:f9:43:
8f:d9:42:f7
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBYTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDYy
QTg2RUFCMzlGQzQwRTMxOUJFNzM0NkYyMkNDOEY1QjE5MUEzMB4XDTI2MDMzMTA4
MzEwOVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQTFDQUJEOTgwRDlFRDUx
RUNGNjI5MUNBM0ZFQ0RCQkRCQTMzNTA5RTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALQHOx5SD+FnPtFw9Cqn6t+FR4umqpBGSLoR70jsZ+4M05BCI7dc
CyYQhqF95RzU7IZUeaNeRXYvk5tkZKzLvfoXEdMmS5787s31cKR9fTDLuFAxvsbJ
qK0JL3Nt4/di2OrmMvT1UCoroZ7ARE4Fs3Go6cJ4rOMbi+NjktTAKAgMMA96Miml
X0N5BH0anD3gX5gW2TRtsXuP3doEQEF+jKFsfV9FVz5bBYIwORHAEKaOHCiVH+RI
2F15cU85QcsLCaL6xCBfzphtJbt0hn20e/Qcs5gbrAcr+r+273T0dETUNZw1DO6v
+34fvFqAIlelIb04302zGh20bc7hMMn86OUCAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBShyr2YDZ7VHs9ikco/7Nu9ujNQnjAfBgNVHSMEGDAWgBSNYqhuqzn8QOMZvnNG
8izI9bGRozAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwMzQvaldLb2JxczVfRURqR2I1elJ2SXN5UFd4a2FNLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvaldLb2JxczVfRURqR2I1elJ2SXN5
UFd4a2FNLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMDM0L29jcTltQTJlMVI3UFlwSEtQLXpidmJvelVKNC5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXaLUAwDQYJKoZIhvcNAQELBQAD
ggEBAJYglro1570EzqBQEnxydSYiH0BohvkB+pigDp+RRrQoixEh1Js82i1FAQ2V
uCrb8G4pzfOTd7yhBkWVng/BTQffCw2cDPuLCiAHqllYwQL7i+HMbk798x3SpJDc
2TYmnu46ZiKs63ySPjgeZcdT7JyP6IbxKApltMKe1533xxvDTLDpnemHWDgX8DrA
JpIS1dfRwkuBujB8z/yWpHXfdANr2VFGjruHEmErcGBeAcaMtAaP6AKfiiZe4BSS
rYW2POP0AXJTDT3WB9FeQbDZAaSuP7ioJjnhYWcY0Jmv4OlGz+uRjsV0vT/LEzQ8
9UbdHn8nf4BshcZZc1f5Q4/ZQvc=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:03 2026 by rpki-client