
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20245/z8zc6FILGXhHspYrYvjiUPHwVb4.roa
File: z8zc6FILGXhHspYrYvjiUPHwVb4.roa (raw, json)
Hash identifier: +8NvAax1U+qZ1aht9gFQ3pXNGzKVfxOyw8atyXoxe5c=
Subject key identifier: CF:CC:DC:E8:52:0B:19:78:47:B2:96:2B:62:F8:E2:50:F1:F0:55:BE
Certificate issuer: /CN=EC4B5C02A42E82DDAD39B6FAE6ECA0F33EF8CA6D
Certificate serial: 31
Authority key identifier: EC:4B:5C:02:A4:2E:82:DD:AD:39:B6:FA:E6:EC:A0:F3:3E:F8:CA:6D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7EtcAqQugt2tObb65uyg8z74ym0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20245/z8zc6FILGXhHspYrYvjiUPHwVb4.roa
Signing time: Tue 31 Mar 2026 08:35:43 +0000
ROA not before: Tue 31 Mar 2026 08:35:43 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 151375
IP address blocks: 61.245.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20245/7EtcAqQugt2tObb65uyg8z74ym0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20245/7EtcAqQugt2tObb65uyg8z74ym0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7EtcAqQugt2tObb65uyg8z74ym0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC4B5C02A42E82DDAD39B6FAE6ECA0F33EF8CA6D
Validity
Not Before: Mar 31 08:35:43 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=CFCCDCE8520B197847B2962B62F8E250F1F055BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f7:6f:bf:44:29:a9:5c:cd:e4:3c:4b:f3:61:
f1:ac:bd:d5:e4:8b:cf:aa:ec:0d:20:31:8b:27:0a:
e4:8c:f0:98:1a:c6:36:55:55:25:b5:30:d8:28:a1:
7a:35:21:01:d9:3e:85:2f:6d:74:a2:d2:3d:94:ca:
42:fc:f7:28:df:b6:6d:08:f3:78:0e:05:20:52:2c:
7d:71:cd:96:0e:b9:67:27:97:2d:ca:53:fa:43:9d:
95:9b:af:fd:2e:51:44:01:3b:c2:55:43:9c:5f:6c:
dd:3a:6d:25:10:49:d1:72:9f:28:4e:8b:4d:26:9c:
dc:3a:89:e8:d5:01:36:95:a6:04:40:f6:cf:c2:ae:
41:21:df:73:b6:4e:55:9b:08:7b:2f:66:5e:8e:a3:
6c:0e:ea:bd:45:0c:a1:70:64:c6:66:cf:92:99:fa:
8f:4d:34:80:e4:48:69:5e:4d:43:e4:d1:67:60:2c:
53:bd:ce:9b:55:f6:5a:b7:8b:c8:bc:8d:e2:d2:97:
d5:e8:75:bc:4b:72:2b:73:ed:41:68:18:74:ea:9f:
03:7f:cb:58:48:ba:b6:7b:87:d4:ed:3d:42:1a:07:
3b:9d:26:30:f2:e2:a2:72:02:c8:ce:ac:1f:36:59:
22:34:e3:d1:ce:91:8e:6b:56:8d:eb:6f:d1:8e:ef:
64:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CC:DC:E8:52:0B:19:78:47:B2:96:2B:62:F8:E2:50:F1:F0:55:BE
X509v3 Authority Key Identifier:
keyid:EC:4B:5C:02:A4:2E:82:DD:AD:39:B6:FA:E6:EC:A0:F3:3E:F8:CA:6D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20245/7EtcAqQugt2tObb65uyg8z74ym0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7EtcAqQugt2tObb65uyg8z74ym0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20245/z8zc6FILGXhHspYrYvjiUPHwVb4.roa
sbgp-ipAddrBlock: critical
IPv4:
61.245.64.0/19
Signature Algorithm: sha256WithRSAEncryption
13:f2:8a:fc:af:23:cf:01:39:00:42:a9:c3:0c:02:bb:86:eb:
52:d3:7a:5f:09:64:33:1c:f9:1e:55:35:86:6c:0e:62:ac:d0:
aa:69:cb:15:ef:b6:72:c2:48:86:c7:15:b6:f0:64:b9:90:db:
9e:91:fd:6b:43:d2:ad:37:67:20:12:77:b2:85:a2:e2:09:4b:
ef:ee:02:ce:54:a9:13:95:67:9c:45:5e:a9:bb:bb:76:60:7d:
a1:cc:ac:2f:fb:3f:cc:c9:62:77:13:40:d5:94:e0:dd:d1:28:
54:b0:b7:fe:d7:e5:03:c0:82:a7:0a:ea:88:8b:42:85:46:8c:
f2:c4:a3:96:df:28:49:d4:d1:c0:b1:e5:f5:b1:92:ba:05:8e:
ee:9f:17:34:18:3a:6f:24:3e:82:bb:54:bc:5c:12:30:76:ba:
44:81:9a:4f:90:a5:df:50:f5:dd:84:67:24:c2:ea:79:39:0f:
d1:dc:00:43:a5:11:0c:1e:0c:70:38:42:62:06:7a:c9:59:92:
ab:c9:52:cd:f6:08:09:2c:3b:46:35:40:cd:f4:3c:9c:dc:95:
67:0d:f6:02:11:09:8c:62:65:70:fd:b8:f7:9b:c5:b4:28:48:
27:c4:34:2c:9d:74:b3:e3:9d:5b:7c:9f:c8:9f:94:a8:82:b5:
22:d8:7f:e5
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBMTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFQzRC
NUMwMkE0MkU4MkREQUQzOUI2RkFFNkVDQTBGMzNFRjhDQTZEMB4XDTI2MDMzMTA4
MzU0M1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQ0ZDQ0RDRTg1MjBCMTk3
ODQ3QjI5NjJCNjJGOEUyNTBGMUYwNTVCRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALn3b79EKalczeQ8S/Nh8ay91eSLz6rsDSAxiycK5IzwmBrGNlVV
JbUw2CihejUhAdk+hS9tdKLSPZTKQvz3KN+2bQjzeA4FIFIsfXHNlg65ZyeXLcpT
+kOdlZuv/S5RRAE7wlVDnF9s3TptJRBJ0XKfKE6LTSac3DqJ6NUBNpWmBED2z8Ku
QSHfc7ZOVZsIey9mXo6jbA7qvUUMoXBkxmbPkpn6j000gORIaV5NQ+TRZ2AsU73O
m1X2WreLyLyN4tKX1eh1vEtyK3PtQWgYdOqfA3/LWEi6tnuH1O09QhoHO50mMPLi
onICyM6sHzZZIjTj0c6RjmtWjetv0Y7vZCMCAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBTPzNzoUgsZeEeyliti+OJQ8fBVvjAfBgNVHSMEGDAWgBTsS1wCpC6C3a05tvrm
7KDzPvjKbTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAyNDUvN0V0Y0FxUXVndDJ0T2JiNjV1eWc4ejc0eW0wLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvN0V0Y0FxUXVndDJ0T2JiNjV1eWc4
ejc0eW0wLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMjQ1L3o4emM2RklMR1hoSHNwWXJZdmppVVBId1ZiNC5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAU99UAwDQYJKoZIhvcNAQELBQAD
ggEBABPyivyvI88BOQBCqcMMAruG61LTel8JZDMc+R5VNYZsDmKs0KppyxXvtnLC
SIbHFbbwZLmQ256R/WtD0q03ZyASd7KFouIJS+/uAs5UqROVZ5xFXqm7u3ZgfaHM
rC/7P8zJYncTQNWU4N3RKFSwt/7X5QPAgqcK6oiLQoVGjPLEo5bfKEnU0cCx5fWx
kroFju6fFzQYOm8kPoK7VLxcEjB2ukSBmk+Qpd9Q9d2EZyTC6nk5D9HcAEOlEQwe
DHA4QmIGeslZkqvJUs32CAksO0Y1QM30PJzclWcN9gIRCYxiZXD9uPebxbQoSCfE
NCyddLPjnVt8n8iflKiCtSLYf+U=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:09 2026 by rpki-client