
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2005/kxGsWXm2nYqY38bdq0mPRiSPIxU.roa
File: kxGsWXm2nYqY38bdq0mPRiSPIxU.roa (raw, json)
Hash identifier: gT4i3KhsnLcHptUk2cN0wuTfb+KlrPtkYgbH9hSd0d8=
Subject key identifier: 93:11:AC:59:79:B6:9D:8A:98:DF:C6:DD:AB:49:8F:46:24:8F:23:15
Certificate issuer: /CN=0DF81D1E559B0F1955274E1E362C50C70362F461
Certificate serial: 38
Authority key identifier: 0D:F8:1D:1E:55:9B:0F:19:55:27:4E:1E:36:2C:50:C7:03:62:F4:61
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DfgdHlWbDxlVJ04eNixQxwNi9GE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2005/kxGsWXm2nYqY38bdq0mPRiSPIxU.roa
Signing time: Tue 31 Mar 2026 08:24:19 +0000
ROA not before: Tue 31 Mar 2026 08:24:19 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 0
IP address blocks: 160.195.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2005/DfgdHlWbDxlVJ04eNixQxwNi9GE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2005/DfgdHlWbDxlVJ04eNixQxwNi9GE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DfgdHlWbDxlVJ04eNixQxwNi9GE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DF81D1E559B0F1955274E1E362C50C70362F461
Validity
Not Before: Mar 31 08:24:19 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=9311AC5979B69D8A98DFC6DDAB498F46248F2315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7e:11:89:c3:2b:df:db:d1:77:55:aa:a9:d2:
45:0a:c9:be:9b:d9:5c:78:eb:ae:b3:f5:02:a8:d2:
7a:5a:0f:5d:42:5f:5f:e1:e9:f0:38:16:8b:13:48:
37:ae:a9:af:9f:a1:f5:0b:2e:10:91:9a:3e:d6:d7:
bc:f6:37:08:36:e1:41:0d:04:b3:56:c0:43:49:7a:
e7:ac:27:5f:31:a5:4a:65:28:13:55:30:f5:df:39:
5d:60:a4:21:91:38:9a:27:f2:6d:be:c5:00:65:a7:
f9:eb:83:9c:f3:2d:e7:27:45:b7:10:10:2c:f9:b7:
28:1d:1f:e1:bd:13:e8:fa:ae:6f:02:cc:8c:68:da:
62:ae:27:ea:15:3f:55:0b:db:d4:32:4a:16:3f:d8:
9c:ab:70:44:8c:4c:f7:c3:ab:89:77:3f:e2:49:84:
ac:a5:4e:9b:af:61:2e:f1:cc:9f:28:94:39:3d:28:
0e:8f:ea:26:47:1f:6f:00:7b:f1:4a:08:72:cb:5f:
77:9c:36:05:9b:a0:ca:66:62:b7:1a:31:72:f9:1a:
1c:b2:e2:ab:95:68:79:c1:ab:4b:4b:13:8d:0b:8d:
9e:b3:05:a6:da:9f:e3:0d:69:48:ad:af:4e:1f:2b:
28:af:58:0b:76:67:f6:55:a2:e8:af:eb:bf:6f:74:
39:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:11:AC:59:79:B6:9D:8A:98:DF:C6:DD:AB:49:8F:46:24:8F:23:15
X509v3 Authority Key Identifier:
keyid:0D:F8:1D:1E:55:9B:0F:19:55:27:4E:1E:36:2C:50:C7:03:62:F4:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2005/DfgdHlWbDxlVJ04eNixQxwNi9GE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DfgdHlWbDxlVJ04eNixQxwNi9GE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2005/kxGsWXm2nYqY38bdq0mPRiSPIxU.roa
sbgp-ipAddrBlock: critical
IPv4:
160.195.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0e:b1:3b:72:36:1f:0f:ee:49:20:c7:f4:92:c5:b3:eb:4b:a9:
56:5b:7a:d8:7f:5e:d4:0a:a0:4e:d1:df:58:69:bf:60:96:39:
f1:4b:26:95:de:28:a7:c1:71:f1:1b:1a:6e:96:60:0c:9a:ad:
4d:b2:cb:0f:e4:58:1f:33:57:a8:72:86:6d:0a:70:6e:16:74:
78:a4:93:cb:25:66:ee:6c:0a:1e:54:ec:00:3b:77:b2:fb:58:
89:3a:db:f7:a5:11:94:6b:e0:36:10:6c:96:35:1d:45:ed:c9:
51:65:ce:12:57:98:52:e5:25:7d:86:97:bf:22:99:2f:2c:95:
b2:9b:fa:4d:5b:1e:23:4b:12:17:90:3d:50:1e:55:ee:b9:86:
ef:77:8d:ac:e0:15:2f:78:ba:fa:64:e6:f2:39:ea:28:20:87:
fe:be:2c:83:73:8b:86:64:bc:f1:2b:2e:05:78:28:64:e0:a0:
6c:44:71:b3:62:11:44:e1:31:55:fd:62:5c:bd:2a:4a:99:e8:
cd:c8:6c:08:38:32:ef:f4:31:55:9b:3d:22:6f:54:43:a9:25:
2b:5c:c3:49:94:88:c7:5b:72:ab:72:a6:01:2b:71:27:5f:c2:
f0:4b:21:54:4d:cf:b1:7d:fe:3b:67:92:bc:33:33:3a:be:3e:
1b:4a:92:0a
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgIBODANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwREY4
MUQxRTU1OUIwRjE5NTUyNzRFMUUzNjJDNTBDNzAzNjJGNDYxMB4XDTI2MDMzMTA4
MjQxOVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoOTMxMUFDNTk3OUI2OUQ4
QTk4REZDNkREQUI0OThGNDYyNDhGMjMxNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJ1+EYnDK9/b0XdVqqnSRQrJvpvZXHjrrrP1AqjSeloPXUJfX+Hp
8DgWixNIN66pr5+h9QsuEJGaPtbXvPY3CDbhQQ0Es1bAQ0l656wnXzGlSmUoE1Uw
9d85XWCkIZE4mifybb7FAGWn+euDnPMt5ydFtxAQLPm3KB0f4b0T6PqubwLMjGja
Yq4n6hU/VQvb1DJKFj/YnKtwRIxM98OriXc/4kmErKVOm69hLvHMnyiUOT0oDo/q
JkcfbwB78UoIcstfd5w2BZugymZitxoxcvkaHLLiq5VoecGrS0sTjQuNnrMFptqf
4w1pSK2vTh8rKK9YC3Zn9lWi6K/rv290ORcCAwEAAaOCAdowggHWMB0GA1UdDgQW
BBSTEaxZebadipjfxt2rSY9GJI8jFTAfBgNVHSMEGDAWgBQN+B0eVZsPGVUnTh42
LFDHA2L0YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNS9EZmdkSGxXYkR4bFZKMDRlTml4UXh3Tmk5R0UuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EZmdkSGxXYkR4bFZKMDRlTml4UXh3
Tmk5R0UuY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB
BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMjAwNS9reEdzV1htMm5ZcVkzOGJkcTBtUFJpU1BJeFUucm9hMB4G
CCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoMMwDQYJKoZIhvcNAQELBQADggEB
AA6xO3I2Hw/uSSDH9JLFs+tLqVZbeth/XtQKoE7R31hpv2CWOfFLJpXeKKfBcfEb
Gm6WYAyarU2yyw/kWB8zV6hyhm0KcG4WdHikk8slZu5sCh5U7AA7d7L7WIk62/el
EZRr4DYQbJY1HUXtyVFlzhJXmFLlJX2Gl78imS8slbKb+k1bHiNLEheQPVAeVe65
hu93jazgFS94uvpk5vI56iggh/6+LINzi4ZkvPErLgV4KGTgoGxEcbNiEUThMVX9
Yly9KkqZ6M3IbAg4Mu/0MVWbPSJvVEOpJStcw0mUiMdbcqtypgErcSdfwvBLIVRN
z7F9/jtnkrwzMzq+PhtKkgo=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:49 2026 by rpki-client