
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20095/OX28YijipgD9eA1eyMl_cz5xQu4.roa
File: OX28YijipgD9eA1eyMl_cz5xQu4.roa (raw, json)
Hash identifier: 1pKN6tyOJXhQMQBjVY72Unvz82rK1U5RB8Y6vuBVMG0=
Subject key identifier: 39:7D:BC:62:28:E2:A6:00:FD:78:0D:5E:C8:C9:7F:73:3E:71:42:EE
Certificate issuer: /CN=29FE1E79542EB2CEFA4E283BFCAF18A398BC7611
Certificate serial: 28
Authority key identifier: 29:FE:1E:79:54:2E:B2:CE:FA:4E:28:3B:FC:AF:18:A3:98:BC:76:11
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kf4eeVQuss76Tig7_K8Yo5i8dhE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20095/OX28YijipgD9eA1eyMl_cz5xQu4.roa
Signing time: Tue 31 Mar 2026 08:38:33 +0000
ROA not before: Tue 31 Mar 2026 08:38:33 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 63779
IP address blocks: 202.208.80.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20095/Kf4eeVQuss76Tig7_K8Yo5i8dhE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20095/Kf4eeVQuss76Tig7_K8Yo5i8dhE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kf4eeVQuss76Tig7_K8Yo5i8dhE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29FE1E79542EB2CEFA4E283BFCAF18A398BC7611
Validity
Not Before: Mar 31 08:38:33 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=397DBC6228E2A600FD780D5EC8C97F733E7142EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4f:59:d1:2d:ad:8c:a3:a5:08:ee:87:93:1b:
b8:9a:48:c6:9f:1d:b3:fb:71:3c:0d:ed:d0:e1:8b:
89:21:d9:b5:95:2a:b6:1e:bb:5a:f5:7a:9f:6e:c7:
60:a3:c3:f2:48:12:df:3e:8e:71:28:bc:9f:97:b3:
d6:81:fb:42:55:c0:4c:fd:a4:c9:7b:57:59:08:81:
39:8d:cf:f2:ec:6b:78:f9:0e:bd:14:f6:96:09:56:
bc:b5:94:95:5d:bc:0a:37:27:e9:75:6a:57:83:b0:
1e:8f:34:a9:fc:54:c2:19:db:6e:27:7b:b1:a6:89:
27:cc:0e:66:a2:de:a6:4c:98:88:6d:ad:af:3f:9e:
0f:52:0c:c8:6c:41:73:f6:53:3d:ba:57:38:4d:11:
16:e7:9b:c4:60:ec:78:e2:d2:36:83:1b:0a:48:44:
dd:43:55:4b:38:a6:c5:35:53:6a:ef:03:00:39:9f:
2f:83:9f:5a:aa:19:1b:c4:6b:ce:9b:eb:eb:bd:c9:
45:22:38:30:74:66:d1:b4:49:5a:5f:0e:cd:d3:30:
28:5d:d6:d2:10:aa:8d:6d:a3:e0:d3:49:a7:bb:a1:
8d:00:11:41:e3:c4:45:82:32:a0:be:6d:ce:15:92:
b2:fa:f4:57:f1:2d:85:3c:0f:a3:9a:54:6b:24:f9:
7c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:7D:BC:62:28:E2:A6:00:FD:78:0D:5E:C8:C9:7F:73:3E:71:42:EE
X509v3 Authority Key Identifier:
keyid:29:FE:1E:79:54:2E:B2:CE:FA:4E:28:3B:FC:AF:18:A3:98:BC:76:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20095/Kf4eeVQuss76Tig7_K8Yo5i8dhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kf4eeVQuss76Tig7_K8Yo5i8dhE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20095/OX28YijipgD9eA1eyMl_cz5xQu4.roa
sbgp-ipAddrBlock: critical
IPv4:
202.208.80.0/21
Signature Algorithm: sha256WithRSAEncryption
5f:61:56:ff:9c:01:8e:ff:c2:1f:bf:1a:3b:21:05:42:67:26:
c3:34:57:f5:ef:25:d2:f8:87:69:5b:8b:c5:ea:5a:88:01:e6:
ab:05:e4:de:27:a7:6e:38:30:57:5a:df:14:c4:07:62:69:0e:
22:7a:f3:ab:d9:18:71:de:9f:4e:0a:2a:75:94:19:44:a4:cc:
a0:b4:09:ae:4c:8a:ea:9f:9c:39:67:d8:d2:ba:5b:d3:19:41:
22:ad:a6:89:15:e8:8a:4c:2f:7d:b5:16:0d:d8:2c:01:99:67:
b5:a0:53:b1:3a:6b:ef:ab:15:17:9c:31:e6:a1:29:e7:1b:30:
8c:b8:a8:75:f5:58:dc:06:73:1e:82:85:74:88:09:a4:5d:8a:
9a:49:61:0c:cd:f6:98:be:8d:d8:aa:a8:83:f4:5a:c4:e8:37:
5d:23:f8:c1:a9:00:53:3b:f6:69:ea:b5:82:65:37:7a:50:d0:
73:16:65:ac:4a:11:7b:55:18:c6:5e:b7:d9:34:58:c1:85:12:
16:43:84:07:be:f3:76:e1:85:f7:45:33:dc:41:c4:2c:c7:a9:
43:12:8d:31:52:f5:c7:b4:d6:16:8f:b8:9e:dd:a9:81:4c:8b:
5b:47:cc:3e:9d:44:59:9a:ee:51:62:97:20:da:c1:bc:bd:c1:
8d:b2:05:6b
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBKDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyOUZF
MUU3OTU0MkVCMkNFRkE0RTI4M0JGQ0FGMThBMzk4QkM3NjExMB4XDTI2MDMzMTA4
MzgzM1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMzk3REJDNjIyOEUyQTYw
MEZENzgwRDVFQzhDOTdGNzMzRTcxNDJFRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMpPWdEtrYyjpQjuh5MbuJpIxp8ds/txPA3t0OGLiSHZtZUqth67
WvV6n27HYKPD8kgS3z6OcSi8n5ez1oH7QlXATP2kyXtXWQiBOY3P8uxrePkOvRT2
lglWvLWUlV28Cjcn6XVqV4OwHo80qfxUwhnbbid7saaJJ8wOZqLepkyYiG2trz+e
D1IMyGxBc/ZTPbpXOE0RFuebxGDseOLSNoMbCkhE3UNVSzimxTVTau8DADmfL4Of
WqoZG8Rrzpvr673JRSI4MHRm0bRJWl8OzdMwKF3W0hCqjW2j4NNJp7uhjQARQePE
RYIyoL5tzhWSsvr0V/EthTwPo5pUayT5fDcCAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBQ5fbxiKOKmAP14DV7IyX9zPnFC7jAfBgNVHSMEGDAWgBQp/h55VC6yzvpOKDv8
rxijmLx2ETAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwOTUvS2Y0ZWVWUXVzczc2VGlnN19LOFlvNWk4ZGhFLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS2Y0ZWVWUXVzczc2VGlnN19LOFlv
NWk4ZGhFLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMDk1L09YMjhZaWppcGdEOWVBMWV5TWxfY3o1eFF1NC5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPK0FAwDQYJKoZIhvcNAQELBQAD
ggEBAF9hVv+cAY7/wh+/GjshBUJnJsM0V/XvJdL4h2lbi8XqWogB5qsF5N4np244
MFda3xTEB2JpDiJ686vZGHHen04KKnWUGUSkzKC0Ca5MiuqfnDln2NK6W9MZQSKt
pokV6IpML321Fg3YLAGZZ7WgU7E6a++rFRecMeahKecbMIy4qHX1WNwGcx6ChXSI
CaRdippJYQzN9pi+jdiqqIP0WsToN10j+MGpAFM79mnqtYJlN3pQ0HMWZaxKEXtV
GMZet9k0WMGFEhZDhAe+83bhhfdFM9xBxCzHqUMSjTFS9ce01haPuJ7dqYFMi1tH
zD6dRFma7lFilyDawby9wY2yBWs=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:20 2026 by rpki-client