
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/OlbKKmGLIJTQnQsTjfQ6PhYUFJ0.roa
File: OlbKKmGLIJTQnQsTjfQ6PhYUFJ0.roa (raw, json)
Hash identifier: E0/5GbX/zYOebIXePjUR48WwM0un8koZBp7qgx48A30=
Subject key identifier: 3A:56:CA:2A:61:8B:20:94:D0:9D:0B:13:8D:F4:3A:3E:16:14:14:9D
Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial: 015A
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/OlbKKmGLIJTQnQsTjfQ6PhYUFJ0.roa
Signing time: Tue 31 Mar 2026 07:30:27 +0000
ROA not before: Tue 31 Mar 2026 07:30:27 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9607
IP address blocks: 124.147.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 346 (0x15a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Validity
Not Before: Mar 31 07:30:27 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=3A56CA2A618B2094D09D0B138DF43A3E1614149D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:47:2e:30:53:8d:fc:35:86:29:f5:ac:ce:37:
90:33:9e:6b:3a:3e:db:68:77:9e:11:9f:dd:cf:15:
59:59:99:7f:ce:78:11:5a:0c:f3:45:15:21:e1:d0:
95:cd:08:f1:e0:21:d6:98:be:32:5d:40:7f:b2:73:
d9:4c:ec:a8:45:f1:9e:ae:6a:23:d5:f5:87:4b:99:
03:c6:00:4e:d1:17:94:ed:78:48:b7:54:0c:4c:af:
5f:e9:c9:e7:a2:11:b9:f3:dc:53:75:0f:bc:c3:fb:
88:81:3a:2b:86:89:48:5e:04:ae:7a:41:78:f3:9c:
52:63:86:7c:9f:73:2d:85:e5:95:0e:ba:aa:45:91:
63:24:48:52:d5:0e:91:d1:e3:46:5a:37:df:67:0b:
6e:2e:ff:a8:97:78:41:bb:7f:31:1f:2e:b1:0d:3c:
75:66:bf:dd:eb:8d:62:d5:42:22:71:7c:6d:36:86:
48:30:22:4b:66:15:d0:1b:43:6c:70:95:ac:e5:52:
17:0f:d6:c6:94:93:de:70:1c:1e:03:52:72:2f:d6:
f7:cb:6a:c3:69:78:f0:69:e8:69:c7:09:1b:09:63:
16:38:0b:51:d3:4f:98:fd:33:ba:ea:0d:11:9e:18:
99:25:de:da:8d:3b:2f:bc:ea:6b:ba:21:c5:21:53:
4a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:56:CA:2A:61:8B:20:94:D0:9D:0B:13:8D:F4:3A:3E:16:14:14:9D
X509v3 Authority Key Identifier:
keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/OlbKKmGLIJTQnQsTjfQ6PhYUFJ0.roa
sbgp-ipAddrBlock: critical
IPv4:
124.147.28.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:57:74:e9:cf:0d:3b:f3:7e:ec:1f:66:f1:b7:d6:bd:b9:ad:
e7:7f:db:c0:76:08:6d:1e:93:10:c0:61:aa:d4:82:22:20:36:
26:aa:3e:db:7f:af:a4:6c:3c:c8:88:06:d8:29:f0:af:e0:85:
f6:fe:20:6b:20:a9:76:26:ed:a7:fe:5c:ce:3f:a2:17:c2:b2:
40:22:e7:a5:1b:a9:6d:1a:63:30:27:95:27:a4:16:11:8f:72:
6f:17:90:64:36:12:2e:f3:05:60:0d:fb:c7:dd:1f:76:58:39:
35:f5:f4:a7:fc:dc:eb:f2:8e:c6:23:5b:99:c4:9c:3a:73:e6:
73:fb:73:4f:bc:74:a2:a1:73:ad:2e:2f:9a:10:56:d8:ad:e7:
c4:4a:5c:52:c2:e9:4d:7a:47:64:d1:d2:16:25:7f:74:9a:78:
c0:b4:bd:ca:ec:ad:32:68:c3:a2:ff:92:4b:fc:9f:bd:7b:11:
4c:d7:a7:74:77:3a:21:b2:d1:7d:43:48:6d:5b:aa:ca:66:3d:
e0:5d:14:de:dd:d0:4b:c2:cc:c0:01:5a:73:17:bb:2b:26:d2:
30:a8:a4:a5:44:0d:70:68:0f:85:9c:64:fa:15:4b:80:9b:aa:
96:61:d5:7a:86:b8:b0:52:35:59:e7:a7:01:83:56:11:cf:55:
df:21:54:3b
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAVowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEE1
QUNBQzI5OTBCRDhGODY1NUMwQzcyMUJBQ0ZGMDMwQTU5RDFGQzAeFw0yNjAzMzEw
NzMwMjdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNBNTZDQTJBNjE4QjIw
OTREMDlEMEIxMzhERjQzQTNFMTYxNDE0OUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCWRy4wU438NYYp9azON5Aznms6Pttod54Rn93PFVlZmX/OeBFa
DPNFFSHh0JXNCPHgIdaYvjJdQH+yc9lM7KhF8Z6uaiPV9YdLmQPGAE7RF5TteEi3
VAxMr1/pyeeiEbnz3FN1D7zD+4iBOiuGiUheBK56QXjznFJjhnyfcy2F5ZUOuqpF
kWMkSFLVDpHR40ZaN99nC24u/6iXeEG7fzEfLrENPHVmv93rjWLVQiJxfG02hkgw
IktmFdAbQ2xwlazlUhcP1saUk95wHB4DUnIv1vfLasNpePBp6GnHCRsJYxY4C1HT
T5j9M7rqDRGeGJkl3tqNOy+86mu6IcUhU0oPAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUOlbKKmGLIJTQnQsTjfQ6PhYUFJ0wHwYDVR0jBBgwFoAUClrKwpkL2PhlXAxy
G6z/AwpZ0fwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM1NC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3cFowZncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3
cFowZncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzU0L09sYktLbUdMSUpUUW5Rc1RqZlE2UGhZVUZKMC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ8kxwwDQYJKoZIhvcNAQELBQADggEB
ALJXdOnPDTvzfuwfZvG31r25red/28B2CG0ekxDAYarUgiIgNiaqPtt/r6RsPMiI
Btgp8K/ghfb+IGsgqXYm7af+XM4/ohfCskAi56UbqW0aYzAnlSekFhGPcm8XkGQ2
Ei7zBWAN+8fdH3ZYOTX19Kf83OvyjsYjW5nEnDpz5nP7c0+8dKKhc60uL5oQVtit
58RKXFLC6U16R2TR0hYlf3SaeMC0vcrsrTJow6L/kkv8n717EUzXp3R3OiGy0X1D
SG1bqspmPeBdFN7d0EvCzMABWnMXuysm0jCopKVEDXBoD4WcZPoVS4CbqpZh1XqG
uLBSNVnnpwGDVhHPVd8hVDs=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:48:03 2026 by rpki-client