
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/373/qZmqYhZ5Ya_pQWvwVukvPzr006s.roa
File: qZmqYhZ5Ya_pQWvwVukvPzr006s.roa (raw, json)
Hash identifier: VsxoVJBeqdr5uWvTeCpNvsi+Dupt8H+mIyMyjx1NMkw=
Subject key identifier: A9:99:AA:62:16:79:61:AF:E9:41:6B:F0:56:E9:2F:3F:3A:F4:D3:AB
Certificate issuer: /CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
Certificate serial: 60
Authority key identifier: 89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/qZmqYhZ5Ya_pQWvwVukvPzr006s.roa
Signing time: Tue 31 Mar 2026 08:23:27 +0000
ROA not before: Tue 31 Mar 2026 08:23:27 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9615
IP address blocks: 202.129.176.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96 (0x60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
Validity
Not Before: Mar 31 08:23:27 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=A999AA62167961AFE9416BF056E92F3F3AF4D3AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:93:6f:32:bc:40:c0:bd:ea:9d:35:11:f5:56:
d1:87:64:72:3a:87:79:ef:58:ec:61:a3:ea:05:c3:
39:7f:c6:c0:00:93:69:d4:d2:90:92:75:68:9a:ef:
39:9f:79:d7:06:b4:d7:ff:c3:1e:ad:20:d3:0b:07:
4c:c4:0a:c9:c1:33:a7:a1:e3:09:9e:8b:d1:a2:b9:
bf:9b:33:92:e3:d3:44:31:07:10:60:20:4e:d5:d6:
e3:6a:44:42:07:8f:5b:42:55:a1:4f:bb:0e:c6:df:
98:d6:38:1a:41:f1:2b:26:6e:0c:a9:a5:13:0f:27:
cd:8a:a8:60:27:45:4d:05:35:14:84:4b:ca:0c:ca:
90:51:f6:05:2b:8d:84:7d:72:f4:fc:24:bf:0a:d7:
a7:b9:81:51:45:11:4c:21:0b:7a:59:a7:fd:24:86:
64:22:a2:c6:5c:82:22:c8:7c:0a:35:d5:44:8b:2a:
b5:48:de:92:d1:75:80:c2:6d:03:81:61:85:21:fa:
0b:5c:af:c5:7f:33:4b:70:83:9f:b0:68:23:77:2d:
1f:e5:77:79:1e:89:3f:46:4e:86:82:11:04:f5:f0:
f5:51:44:1f:9a:f0:cb:10:fc:0b:b8:fa:dc:04:30:
bc:08:d3:a4:b3:f2:e7:32:2e:e3:7a:46:be:2b:a6:
47:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:99:AA:62:16:79:61:AF:E9:41:6B:F0:56:E9:2F:3F:3A:F4:D3:AB
X509v3 Authority Key Identifier:
keyid:89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/qZmqYhZ5Ya_pQWvwVukvPzr006s.roa
sbgp-ipAddrBlock: critical
IPv4:
202.129.176.0/21
Signature Algorithm: sha256WithRSAEncryption
b2:5c:04:7d:b8:f8:a1:ae:27:d6:9e:a8:9b:14:1c:d4:29:7d:
db:12:8c:df:85:d7:1d:c2:26:df:86:2e:b5:30:74:4c:18:b7:
fb:9d:c8:33:d0:71:6e:99:d9:9b:e4:41:ff:cf:de:4c:3d:fb:
79:98:01:bd:ff:75:d9:86:a1:c1:64:72:53:30:81:73:28:bf:
83:b1:45:3b:bf:d8:76:07:43:a6:ed:f8:35:eb:76:d1:56:ab:
4b:ea:34:e9:11:cc:44:d9:d3:3c:d8:39:4e:36:4e:8c:7e:0d:
7c:e2:d0:99:98:50:4e:15:0c:d1:a4:4a:70:93:8e:ac:08:3f:
77:0e:94:7b:b7:a7:2e:9a:e8:7d:0b:b3:57:0a:59:12:04:b9:
20:be:43:9a:21:0f:ff:3e:04:58:d9:eb:6c:64:dd:2e:61:cf:
59:d0:71:ac:89:db:cd:f1:99:36:cb:ab:ec:2a:fa:bc:5c:e3:
a4:e5:07:96:74:7a:60:ae:76:1d:50:2f:cd:ae:f3:45:31:18:
2e:06:27:46:39:3c:8a:4c:33:13:cc:79:ea:2f:d7:cb:45:b8:
f2:49:f7:03:cc:b8:43:d6:cd:95:84:4b:73:b2:9e:6a:22:cd:
8f:2b:26:8d:ec:b2:7c:51:47:1c:bc:ec:e5:de:52:a4:5f:5d:
cf:4f:96:f1
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBYDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4OUNG
NUMyQUZBNUI1NzY1NzczNTFDNDE5OTAxOEQ0NENEQzJENkRBMB4XDTI2MDMzMTA4
MjMyN1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQTk5OUFBNjIxNjc5NjFB
RkU5NDE2QkYwNTZFOTJGM0YzQUY0RDNBQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOuTbzK8QMC96p01EfVW0YdkcjqHee9Y7GGj6gXDOX/GwACTadTS
kJJ1aJrvOZ951wa01//DHq0g0wsHTMQKycEzp6HjCZ6L0aK5v5szkuPTRDEHEGAg
TtXW42pEQgePW0JVoU+7DsbfmNY4GkHxKyZuDKmlEw8nzYqoYCdFTQU1FIRLygzK
kFH2BSuNhH1y9PwkvwrXp7mBUUURTCELelmn/SSGZCKixlyCIsh8CjXVRIsqtUje
ktF1gMJtA4FhhSH6C1yvxX8zS3CDn7BoI3ctH+V3eR6JP0ZOhoIRBPXw9VFEH5rw
yxD8C7j63AQwvAjTpLPy5zIu43pGviumR88CAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBSpmapiFnlhr+lBa/BW6S8/OvTTqzAfBgNVHSMEGDAWgBSJz1wq+ltXZXc1HEGZ
AY1EzcLW2jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzczL2ljOWNLdnBiVjJWM05SeEJtUUdOUk0zQzF0by5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2ljOWNLdnBiVjJWM05SeEJtUUdOUk0z
QzF0by5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8zNzMvcVptcVloWjVZYV9wUVd2d1Z1a3ZQenIwMDZzLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8qBsDANBgkqhkiG9w0BAQsFAAOCAQEA
slwEfbj4oa4n1p6omxQc1Cl92xKM34XXHcIm34YutTB0TBi3+53IM9BxbpnZm+RB
/8/eTD37eZgBvf912YahwWRyUzCBcyi/g7FFO7/YdgdDpu34Net20VarS+o06RHM
RNnTPNg5TjZOjH4NfOLQmZhQThUM0aRKcJOOrAg/dw6Ue7enLprofQuzVwpZEgS5
IL5DmiEP/z4EWNnrbGTdLmHPWdBxrInbzfGZNsur7Cr6vFzjpOUHlnR6YK52HVAv
za7zRTEYLgYnRjk8ikwzE8x56i/Xy0W48kn3A8y4Q9bNlYRLc7KeaiLNjysmjeyy
fFFHHLzs5d5SpF9dz0+W8Q==
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:27 2026 by rpki-client