
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/tYI0Uqi_6Ey-pYmI-SLqDVgwaMg.roa
File: tYI0Uqi_6Ey-pYmI-SLqDVgwaMg.roa (raw, json)
Hash identifier: XYbrwt+Z7+XKKXfZX4BuVJf5hKqIeN3oUQJ9mprZJss=
Subject key identifier: B5:82:34:52:A8:BF:E8:4C:BE:A5:89:88:F9:22:EA:0D:58:30:68:C8
Certificate issuer: /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial: AC
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/tYI0Uqi_6Ey-pYmI-SLqDVgwaMg.roa
Signing time: Tue 31 Mar 2026 07:52:22 +0000
ROA not before: Tue 31 Mar 2026 07:52:22 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 24277
IP address blocks: 115.166.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172 (0xac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Validity
Not Before: Mar 31 07:52:22 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=B5823452A8BFE84CBEA58988F922EA0D583068C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a7:38:42:db:05:ed:e9:55:a3:ab:53:77:a3:
29:90:71:43:82:4a:92:a5:fc:33:a1:38:45:5c:1f:
62:9d:2d:0b:4a:ee:85:d5:ab:e3:04:aa:d3:6a:04:
bb:00:20:fd:91:cf:60:fb:80:47:51:fd:a1:6f:cd:
4f:26:84:5e:ec:83:d1:d4:d9:d5:cd:c7:11:bb:35:
62:74:01:81:1e:11:d7:ce:3f:5b:35:24:52:cc:33:
3b:83:ca:0d:c6:47:84:5d:e4:e9:e5:0d:30:fc:38:
98:dc:ad:b9:c9:c0:6d:ba:65:f2:69:4d:80:ea:9a:
d5:c7:dd:33:7a:ed:0b:35:8a:e2:73:da:1b:1b:0a:
00:0c:94:e6:7a:17:e4:50:6c:55:95:c7:bd:b9:fe:
bb:97:8c:17:e4:35:3e:8e:0e:d4:42:6c:60:3f:11:
e9:cc:9a:27:43:b4:7e:3f:a9:7e:c3:b9:bb:2d:e7:
35:6a:c1:38:2d:cd:98:b2:cc:24:d6:f0:cd:9f:cd:
ec:4b:e1:28:79:8d:43:b5:40:9a:71:41:ef:fc:f8:
35:59:cd:13:9c:c3:78:62:85:3a:b3:92:1d:05:be:
46:91:cb:14:11:12:6b:dc:fa:22:63:2f:e2:4f:8d:
38:d2:d8:c6:16:bd:a5:fb:92:ca:ee:d1:31:a8:52:
76:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:82:34:52:A8:BF:E8:4C:BE:A5:89:88:F9:22:EA:0D:58:30:68:C8
X509v3 Authority Key Identifier:
keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/tYI0Uqi_6Ey-pYmI-SLqDVgwaMg.roa
sbgp-ipAddrBlock: critical
IPv4:
115.166.160.0/19
Signature Algorithm: sha256WithRSAEncryption
90:1b:aa:a7:59:82:92:b5:43:29:b5:a1:a6:91:13:f4:60:59:
7b:90:75:37:87:42:48:2c:93:38:c0:3d:cd:18:12:d3:04:1c:
75:c9:fa:7e:5e:23:c9:c5:c9:72:16:82:18:19:f4:3e:f1:23:
a5:99:63:28:81:9f:16:7b:0c:68:74:32:d6:4e:e6:77:fa:10:
09:8a:99:a2:a7:97:98:52:99:81:9b:e6:2c:58:84:a0:04:fd:
a2:b2:e0:29:6b:1b:1f:1f:ed:ac:df:6f:f8:85:2f:b5:34:eb:
f9:79:8c:ad:72:72:39:1a:7f:09:35:cc:b5:0b:68:80:12:61:
50:1f:73:ad:5d:f1:04:bc:38:4a:c2:4c:b1:dd:e3:d0:d6:6d:
f7:df:97:ad:33:e7:7f:49:98:22:fa:ba:c3:77:a0:19:33:7d:
cd:a6:1c:ef:ae:5a:5e:2b:dd:62:4e:b6:9b:15:a2:4c:25:b1:
3e:51:29:11:6f:34:67:65:e8:4a:78:3a:5a:49:8b:1d:ee:3e:
bb:5d:0c:07:4b:25:b7:3e:32:36:ea:c6:4d:60:54:25:e9:87:
1a:f8:b6:73:1e:1e:5c:63:e4:94:06:0c:6f:ee:98:e2:98:e3:
cb:81:87:87:2d:80:47:b1:0e:c2:2a:9b:97:b5:54:a2:69:61:
bc:99:11:95
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOURC
MDc2NEM2REZDMUUzREY2QkQ1ODBFQTY5OTRBMUU3MDk4RjUyQTAeFw0yNjAzMzEw
NzUyMjJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEI1ODIzNDUyQThCRkU4
NENCRUE1ODk4OEY5MjJFQTBENTgzMDY4QzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8pzhC2wXt6VWjq1N3oymQcUOCSpKl/DOhOEVcH2KdLQtK7oXV
q+MEqtNqBLsAIP2Rz2D7gEdR/aFvzU8mhF7sg9HU2dXNxxG7NWJ0AYEeEdfOP1s1
JFLMMzuDyg3GR4Rd5OnlDTD8OJjcrbnJwG26ZfJpTYDqmtXH3TN67Qs1iuJz2hsb
CgAMlOZ6F+RQbFWVx725/ruXjBfkNT6ODtRCbGA/EenMmidDtH4/qX7Dubst5zVq
wTgtzZiyzCTW8M2fzexL4Sh5jUO1QJpxQe/8+DVZzROcw3hihTqzkh0FvkaRyxQR
Emvc+iJjL+JPjTjS2MYWvaX7ksru0TGoUnZhAgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQUtYI0Uqi/6Ey+pYmI+SLqDVgwaMgwHwYDVR0jBBgwFoAUnbB2TG38Hj32vVgO
pplKHnCY9SowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMDYzL25iQjJURzM4SGozMnZWZ09wcGxLSG5DWTlTby5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL25iQjJURzM4SGozMnZWZ09wcGxL
SG5DWTlTby5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMDA2My90WUkwVXFpXzZFeS1wWW1JLVNMcURWZ3dhTWcucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFc6agMA0GCSqGSIb3DQEBCwUA
A4IBAQCQG6qnWYKStUMptaGmkRP0YFl7kHU3h0JILJM4wD3NGBLTBBx1yfp+XiPJ
xclyFoIYGfQ+8SOlmWMogZ8WewxodDLWTuZ3+hAJipmip5eYUpmBm+YsWISgBP2i
suApaxsfH+2s32/4hS+1NOv5eYytcnI5Gn8JNcy1C2iAEmFQH3OtXfEEvDhKwkyx
3ePQ1m3335etM+d/SZgi+rrDd6AZM33NphzvrlpeK91iTrabFaJMJbE+USkRbzRn
ZehKeDpaSYsd7j67XQwHSyW3PjI26sZNYFQl6Yca+LZzHh5cY+SUBgxv7pjimOPL
gYeHLYBHsQ7CKpuXtVSiaWG8mRGV
-----END CERTIFICATE-----
Generated at Tue Apr 7 22:27:17 2026 by rpki-client