
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/8kceCppFM3pFRDgAvC0I7M_Wl0w.roa
File: 8kceCppFM3pFRDgAvC0I7M_Wl0w.roa (raw, json)
Hash identifier: nvYp0WQ5xR5DJzlYVPnwZVhlasL74i14n5ZO1Hzktj8=
Subject key identifier: F2:47:1E:0A:9A:45:33:7A:45:44:38:00:BC:2D:08:EC:CF:D6:97:4C
Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial: 0159
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/8kceCppFM3pFRDgAvC0I7M_Wl0w.roa
Signing time: Tue 31 Mar 2026 07:30:26 +0000
ROA not before: Tue 31 Mar 2026 07:30:26 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9607
IP address blocks: 124.147.0.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 345 (0x159)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Validity
Not Before: Mar 31 07:30:26 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=F2471E0A9A45337A45443800BC2D08ECCFD6974C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:16:0b:28:81:ef:8f:06:84:56:59:e6:6e:62:
7a:15:4a:7e:97:84:4d:ff:43:0f:1f:c8:54:4f:ec:
7e:b4:98:ed:c5:88:57:e8:61:e3:49:ee:90:44:7f:
f6:b1:bd:94:27:f6:41:5c:0c:40:f0:c1:9e:16:4b:
62:3e:32:5c:3a:28:c9:f4:19:f5:e1:d4:91:59:6f:
29:06:50:d7:d8:90:b1:d9:6e:0f:a2:46:75:fb:0f:
00:02:61:af:f2:07:fe:6c:38:5b:c6:86:49:6f:9e:
29:a5:0c:6e:72:46:10:0a:a1:3c:c0:ee:eb:3c:57:
43:73:85:87:5c:18:d4:ea:a5:56:e7:2a:69:7c:cb:
9a:22:60:38:c6:bb:77:3a:7d:67:ef:d2:75:60:f0:
26:40:ba:31:bb:df:c4:d1:8c:2b:d6:ab:e7:f6:7d:
0d:a7:bc:83:d8:f0:28:ce:57:57:52:8d:f0:5b:7f:
89:4d:dd:1d:a1:92:17:23:5d:06:3c:a9:4f:d0:a5:
c7:53:ed:c8:a5:51:11:d8:58:32:2b:67:cb:56:92:
43:88:a2:f8:d4:e4:ef:d2:7b:5f:2c:24:c8:a4:76:
d4:d1:ca:08:a1:dd:2e:5f:a9:c8:d3:9f:1b:b4:2e:
2b:b6:60:b1:e5:ea:d9:bb:d8:c8:1e:60:41:e6:71:
d9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:47:1E:0A:9A:45:33:7A:45:44:38:00:BC:2D:08:EC:CF:D6:97:4C
X509v3 Authority Key Identifier:
keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/8kceCppFM3pFRDgAvC0I7M_Wl0w.roa
sbgp-ipAddrBlock: critical
IPv4:
124.147.0.0/20
Signature Algorithm: sha256WithRSAEncryption
69:7e:45:1f:64:0d:b1:ea:5a:c1:c3:0a:ab:2b:1e:4f:9d:e6:
a7:92:0b:4c:b1:b5:7e:a9:00:6c:19:ce:a6:71:7b:90:12:e5:
0f:c0:09:cd:95:ad:d6:56:b8:dc:4c:54:16:75:26:ac:44:b5:
b0:28:96:26:f8:9c:83:d5:0c:1d:77:70:e8:bc:7e:b0:3a:2b:
c5:27:6b:0c:3e:01:3a:dd:f4:a2:fb:9b:27:82:c3:2b:73:09:
2d:cc:41:da:a6:5f:15:26:cb:4f:1d:c1:e6:2d:00:e2:0f:4a:
fe:2f:fe:93:7d:c8:9a:12:19:c9:d8:10:7f:37:5a:91:6b:00:
d1:fe:ae:1f:f2:2e:4f:80:7e:50:ac:8c:c9:27:13:29:1d:66:
c9:7b:71:73:e2:af:64:a7:e9:13:57:18:fc:12:5c:00:bb:6a:
08:cf:fe:07:61:4a:31:cf:5d:0f:0a:f4:d6:b2:3c:fb:5f:55:
ad:68:c1:40:4d:1e:82:fa:21:b0:63:98:0d:34:47:bc:5a:8e:
78:89:c0:c0:7c:07:a4:fd:07:80:8f:f5:03:f1:6a:4e:2e:a7:
2b:25:56:eb:70:14:fb:6a:3e:b1:3f:4c:66:ad:38:c3:f1:b3:
f7:81:98:06:72:6f:2b:fe:60:d7:d4:25:09:b6:ca:c4:04:4b:
d3:4b:1d:6c
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEE1
QUNBQzI5OTBCRDhGODY1NUMwQzcyMUJBQ0ZGMDMwQTU5RDFGQzAeFw0yNjAzMzEw
NzMwMjZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEYyNDcxRTBBOUE0NTMz
N0E0NTQ0MzgwMEJDMkQwOEVDQ0ZENjk3NEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2Fgsoge+PBoRWWeZuYnoVSn6XhE3/Qw8fyFRP7H60mO3FiFfo
YeNJ7pBEf/axvZQn9kFcDEDwwZ4WS2I+Mlw6KMn0GfXh1JFZbykGUNfYkLHZbg+i
RnX7DwACYa/yB/5sOFvGhklvnimlDG5yRhAKoTzA7us8V0NzhYdcGNTqpVbnKml8
y5oiYDjGu3c6fWfv0nVg8CZAujG738TRjCvWq+f2fQ2nvIPY8CjOV1dSjfBbf4lN
3R2hkhcjXQY8qU/QpcdT7cilURHYWDIrZ8tWkkOIovjU5O/Se18sJMikdtTRygih
3S5fqcjTnxu0Liu2YLHl6tm72MgeYEHmcdlzAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU8kceCppFM3pFRDgAvC0I7M/Wl0wwHwYDVR0jBBgwFoAUClrKwpkL2PhlXAxy
G6z/AwpZ0fwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM1NC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3cFowZncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3
cFowZncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzU0LzhrY2VDcHBGTTNwRlJEZ0F2QzBJN01fV2wwdy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR8kwAwDQYJKoZIhvcNAQELBQADggEB
AGl+RR9kDbHqWsHDCqsrHk+d5qeSC0yxtX6pAGwZzqZxe5AS5Q/ACc2VrdZWuNxM
VBZ1JqxEtbAolib4nIPVDB13cOi8frA6K8Unaww+ATrd9KL7myeCwytzCS3MQdqm
XxUmy08dweYtAOIPSv4v/pN9yJoSGcnYEH83WpFrANH+rh/yLk+AflCsjMknEykd
Zsl7cXPir2Sn6RNXGPwSXAC7agjP/gdhSjHPXQ8K9NayPPtfVa1owUBNHoL6IbBj
mA00R7xajniJwMB8B6T9B4CP9QPxak4upyslVutwFPtqPrE/TGatOMPxs/eBmAZy
byv+YNfUJQm2ysQES9NLHWw=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:49 2026 by rpki-client