
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/33/aPGF_8vWusF0aFzhMJNQypY9cxY.roa
File: aPGF_8vWusF0aFzhMJNQypY9cxY.roa (raw, json)
Hash identifier: OPMnI39nsQPnvPaknKR3M6ebPKH9qEeapTLChAi5x4E=
Subject key identifier: 68:F1:85:FF:CB:D6:BA:C1:74:68:5C:E1:30:93:50:CA:96:3D:73:16
Certificate issuer: /CN=CE05E71ADDEC0F8E361BB55AB103F53D3856C60A
Certificate serial: 33
Authority key identifier: CE:05:E7:1A:DD:EC:0F:8E:36:1B:B5:5A:B1:03:F5:3D:38:56:C6:0A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/aPGF_8vWusF0aFzhMJNQypY9cxY.roa
Signing time: Tue 31 Mar 2026 08:38:41 +0000
ROA not before: Tue 31 Mar 2026 08:38:41 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 17955
IP address blocks: 103.152.138.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE05E71ADDEC0F8E361BB55AB103F53D3856C60A
Validity
Not Before: Mar 31 08:38:41 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=68F185FFCBD6BAC174685CE1309350CA963D7316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1f:18:c3:91:f6:5c:b7:b3:c5:3a:1d:79:ef:
d7:4b:7a:9a:46:b1:84:e2:3b:b1:95:29:ad:31:4b:
e0:78:47:f0:fd:83:ff:2b:5b:aa:54:db:ed:bb:80:
59:8e:3e:5e:04:ac:9e:2f:dc:4b:c5:6a:b5:c9:2c:
e5:24:06:49:58:56:07:1b:0b:7d:09:f0:1b:b4:25:
83:55:6e:40:b7:3c:d0:f9:01:c0:c9:34:9e:ce:9f:
ce:70:22:53:cf:0d:bc:2f:81:41:9f:c8:d0:72:97:
43:fd:e9:1c:76:cb:5c:b4:6b:6c:c1:0d:4a:e7:0a:
55:fe:77:cd:87:e0:71:2d:20:07:46:ac:72:c6:3a:
e7:1b:7f:15:bc:6b:36:ad:45:bd:65:26:b6:78:04:
75:de:be:1d:08:06:b7:5b:8d:9a:90:1a:f5:1f:9f:
8d:13:de:da:f3:11:ff:b8:7e:66:e2:bd:61:98:7b:
4e:d0:0c:49:50:70:16:3b:81:71:d5:f2:68:24:85:
62:f1:fe:08:c5:c1:fe:eb:62:5f:ee:d0:6c:d2:84:
2f:e2:fe:30:6c:bc:1a:82:83:fc:ab:a5:5b:8c:7d:
ea:ff:16:8e:0f:b2:9b:11:ea:aa:d0:99:1d:0b:b7:
f5:64:16:b3:7e:4f:32:30:cb:9e:65:5a:f5:86:ef:
2a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F1:85:FF:CB:D6:BA:C1:74:68:5C:E1:30:93:50:CA:96:3D:73:16
X509v3 Authority Key Identifier:
keyid:CE:05:E7:1A:DD:EC:0F:8E:36:1B:B5:5A:B1:03:F5:3D:38:56:C6:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/aPGF_8vWusF0aFzhMJNQypY9cxY.roa
sbgp-ipAddrBlock: critical
IPv4:
103.152.138.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:f3:0d:50:dd:bd:6d:95:75:81:3b:63:bb:3f:6f:23:8a:d7:
9e:85:fd:eb:43:18:e4:06:5b:b2:71:07:db:c9:3d:4a:dc:b7:
0d:16:3a:9c:64:db:e9:0e:83:f3:b8:2d:7a:a7:fe:f6:42:c6:
0a:c4:9a:cd:fc:7e:b3:76:24:2f:ea:c8:db:9c:6e:d2:d3:30:
35:6d:c0:37:c7:7b:e6:50:74:e7:20:69:96:3f:3a:80:bb:d1:
db:d5:77:c9:b8:ce:b2:03:22:3b:6e:8b:ce:f0:05:5f:1d:13:
d9:f1:8e:e0:b1:c2:e5:f6:a8:9c:2b:82:ac:fe:a1:67:b3:73:
46:43:2c:e5:8d:38:64:34:02:35:0c:6c:9d:2d:30:95:e9:95:
bd:ba:0d:a0:96:c8:2f:f5:0c:49:77:03:01:0f:40:10:01:f0:
06:54:cf:6c:f7:48:51:77:70:7e:df:28:f5:2b:b1:60:80:c5:
fa:de:db:e6:79:83:e1:1f:22:27:b4:6c:3c:89:07:2d:70:a4:
47:ac:64:38:c7:18:54:0d:04:aa:82:18:67:e3:1a:70:8c:7a:
8a:f4:73:5e:8f:b5:71:31:24:50:9f:2f:20:c6:40:72:e6:ad:
37:43:71:f6:8b:76:e1:5e:85:90:ff:8b:e6:bf:bd:fd:47:0d:
9b:2e:e1:8f
-----BEGIN CERTIFICATE-----
MIIEujCCA6KgAwIBAgIBMzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDRTA1
RTcxQURERUMwRjhFMzYxQkI1NUFCMTAzRjUzRDM4NTZDNjBBMB4XDTI2MDMzMTA4
Mzg0MVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNjhGMTg1RkZDQkQ2QkFD
MTc0Njg1Q0UxMzA5MzUwQ0E5NjNENzMxNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJ0fGMOR9ly3s8U6HXnv10t6mkaxhOI7sZUprTFL4HhH8P2D/ytb
qlTb7buAWY4+XgSsni/cS8Vqtcks5SQGSVhWBxsLfQnwG7Qlg1VuQLc80PkBwMk0
ns6fznAiU88NvC+BQZ/I0HKXQ/3pHHbLXLRrbMENSucKVf53zYfgcS0gB0ascsY6
5xt/FbxrNq1FvWUmtngEdd6+HQgGt1uNmpAa9R+fjRPe2vMR/7h+ZuK9YZh7TtAM
SVBwFjuBcdXyaCSFYvH+CMXB/utiX+7QbNKEL+L+MGy8GoKD/KulW4x96v8Wjg+y
mxHqqtCZHQu39WQWs35PMjDLnmVa9YbvKt0CAwEAAaOCAdcwggHTMB0GA1UdDgQW
BBRo8YX/y9a6wXRoXOEwk1DKlj1zFjAfBgNVHSMEGDAWgBTOBeca3ewPjjYbtVqx
A/U9OFbGCjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzMvemdYbkd0M3NENDQyRzdWYXNRUDFQVGhXeGdvLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvemdYbkd0M3NENDQyRzdWYXNRUDFQVGhX
eGdvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUF
BzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMzL2FQR0ZfOHZXdXNGMGFGemhNSk5ReXBZOWN4WS5yb2EwHwYIKwYB
BQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnmIowDQYJKoZIhvcNAQELBQADggEBAKrz
DVDdvW2VdYE7Y7s/byOK156F/etDGOQGW7JxB9vJPUrctw0WOpxk2+kOg/O4LXqn
/vZCxgrEms38frN2JC/qyNucbtLTMDVtwDfHe+ZQdOcgaZY/OoC70dvVd8m4zrID
Ijtui87wBV8dE9nxjuCxwuX2qJwrgqz+oWezc0ZDLOWNOGQ0AjUMbJ0tMJXplb26
DaCWyC/1DEl3AwEPQBAB8AZUz2z3SFF3cH7fKPUrsWCAxfre2+Z5g+EfIie0bDyJ
By1wpEesZDjHGFQNBKqCGGfjGnCMeor0c16PtXExJFCfLyDGQHLmrTdDcfaLduFe
hZD/i+a/vf1HDZsu4Y8=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:34 2026 by rpki-client