
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/233/YICbx-OHalUZ7KztbcpnBdDfiNk.roa
File: YICbx-OHalUZ7KztbcpnBdDfiNk.roa (raw, json)
Hash identifier: b7y2usTRikape5P9h1jACqpOul1Dcd9XIdK+mVfakbM=
Subject key identifier: 60:80:9B:C7:E3:87:6A:55:19:EC:AC:ED:6D:CA:67:05:D0:DF:88:D9
Certificate issuer: /CN=D788678E64D29184C23DAAADB594BFD9BAE2405C
Certificate serial: 6D
Authority key identifier: D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/YICbx-OHalUZ7KztbcpnBdDfiNk.roa
Signing time: Tue 31 Mar 2026 07:50:25 +0000
ROA not before: Tue 31 Mar 2026 07:50:25 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 7670
IP address blocks: 210.253.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109 (0x6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D788678E64D29184C23DAAADB594BFD9BAE2405C
Validity
Not Before: Mar 31 07:50:25 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=60809BC7E3876A5519ECACED6DCA6705D0DF88D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:61:44:23:e9:8a:f4:af:a1:ef:b0:f8:45:bf:
1d:3b:76:ce:ef:31:98:38:d2:59:69:d6:e5:31:59:
22:5b:19:d5:ef:68:e4:eb:13:2b:10:fe:62:09:78:
a6:1d:44:5e:8e:13:82:f4:d6:5c:b6:2b:21:6b:53:
fa:43:2e:20:aa:68:30:7f:3d:7f:b6:f8:74:aa:4e:
7a:9d:70:2b:bb:a3:71:5a:55:21:0c:40:9b:ee:86:
9a:f2:84:89:0c:2f:b7:2e:22:33:3c:a1:bf:f9:1b:
b8:9d:a1:c6:9f:8b:16:c4:50:a1:7d:99:33:c5:42:
7b:6b:6c:5e:ff:a1:c6:4b:25:d3:e6:6d:02:9e:33:
19:8f:6f:a0:62:6a:d3:f0:63:7e:9e:d9:8e:c9:e9:
a2:03:75:d7:d2:23:43:c2:0e:5a:13:61:77:c6:94:
49:61:38:90:f1:81:a9:24:b8:9a:b5:e2:d5:83:1e:
06:28:df:34:ee:dc:0e:40:e4:02:87:78:b6:9a:42:
d4:2f:8a:5a:28:e1:4a:8b:b8:e8:29:cd:51:fa:47:
c3:3a:28:c9:8d:2d:1a:a9:ca:ae:c3:5e:77:b9:8c:
f6:83:a8:a6:b5:4a:98:40:68:39:ac:d0:5d:5d:6f:
2e:8f:37:9f:de:f0:1c:98:32:9f:e6:4f:9a:5c:5f:
0b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:80:9B:C7:E3:87:6A:55:19:EC:AC:ED:6D:CA:67:05:D0:DF:88:D9
X509v3 Authority Key Identifier:
keyid:D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/YICbx-OHalUZ7KztbcpnBdDfiNk.roa
sbgp-ipAddrBlock: critical
IPv4:
210.253.32.0/19
Signature Algorithm: sha256WithRSAEncryption
30:dd:b8:c2:80:9a:cf:be:38:96:3f:89:05:98:00:86:19:6d:
08:32:30:a9:4e:3a:bc:a5:60:45:0e:46:6c:41:ac:34:d5:da:
ae:c3:2f:6e:32:49:61:d1:f0:da:81:7c:ad:de:6a:10:af:a4:
65:9e:ea:0a:df:8d:01:88:4a:46:86:e3:6f:37:a0:f3:5b:06:
fd:67:75:00:cb:ac:82:d6:e4:91:3c:8a:55:3b:3e:35:98:d2:
db:81:3b:d5:fd:7d:7a:f4:05:32:25:9f:98:e8:71:87:e0:73:
d8:a8:4f:c4:37:bb:7b:78:d7:4d:23:b3:ed:bc:b4:62:fa:22:
92:e6:a9:d0:d3:84:22:6c:52:4e:ae:45:12:1c:29:5c:5d:b2:
90:a3:d0:db:33:15:0f:f7:dd:fb:1d:0f:30:b1:1c:81:ce:77:
e9:ec:d7:41:7b:4b:39:cd:22:99:22:25:c8:72:08:8f:05:ad:
13:29:05:2f:5a:5b:03:2f:35:fb:91:ec:a5:a7:61:db:67:1f:
5c:32:79:c4:fc:1e:ba:f9:65:a1:7f:7e:4c:7f:81:ae:3f:e0:
fa:44:b3:8e:f2:05:69:7b:83:94:b4:d1:85:2b:19:80:7a:82:
af:43:dc:01:20:40:1c:57:3f:06:d7:60:53:06:1e:b6:0e:a9:
f5:8d:55:b3
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBbTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENzg4
Njc4RTY0RDI5MTg0QzIzREFBQURCNTk0QkZEOUJBRTI0MDVDMB4XDTI2MDMzMTA3
NTAyNVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNjA4MDlCQzdFMzg3NkE1
NTE5RUNBQ0VENkRDQTY3MDVEMERGODhEOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMphRCPpivSvoe+w+EW/HTt2zu8xmDjSWWnW5TFZIlsZ1e9o5OsT
KxD+Ygl4ph1EXo4TgvTWXLYrIWtT+kMuIKpoMH89f7b4dKpOep1wK7ujcVpVIQxA
m+6GmvKEiQwvty4iMzyhv/kbuJ2hxp+LFsRQoX2ZM8VCe2tsXv+hxksl0+ZtAp4z
GY9voGJq0/Bjfp7ZjsnpogN119IjQ8IOWhNhd8aUSWE4kPGBqSS4mrXi1YMeBijf
NO7cDkDkAod4tppC1C+KWijhSou46CnNUfpHwzooyY0tGqnKrsNed7mM9oOoprVK
mEBoOazQXV1vLo83n97wHJgyn+ZPmlxfC9sCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBRggJvH44dqVRnsrO1tymcF0N+I2TAfBgNVHSMEGDAWgBTXiGeOZNKRhMI9qq21
lL/ZuuJAXDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjMzLzE0aG5qbVRTa1lUQ1BhcXR0WlNfMmJyaVFGdy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzE0aG5qbVRTa1lUQ1BhcXR0WlNfMmJy
aVFGdy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8yMzMvWUlDYngtT0hhbFVaN0t6dGJjcG5CZERmaU5rLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBdL9IDANBgkqhkiG9w0BAQsFAAOCAQEA
MN24woCaz744lj+JBZgAhhltCDIwqU46vKVgRQ5GbEGsNNXarsMvbjJJYdHw2oF8
rd5qEK+kZZ7qCt+NAYhKRobjbzeg81sG/Wd1AMusgtbkkTyKVTs+NZjS24E71f19
evQFMiWfmOhxh+Bz2KhPxDe7e3jXTSOz7by0Yvoikuap0NOEImxSTq5FEhwpXF2y
kKPQ2zMVD/fd+x0PMLEcgc536ezXQXtLOc0imSIlyHIIjwWtEykFL1pbAy81+5Hs
padh22cfXDJ5xPweuvlloX9+TH+Brj/g+kSzjvIFaXuDlLTRhSsZgHqCr0PcASBA
HFc/BtdgUwYetg6p9Y1Vsw==
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:18 2026 by rpki-client