
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/4098/DJU4rxHwIslJdH3FrryKsengje0.roa
File: DJU4rxHwIslJdH3FrryKsengje0.roa (raw, json)
Hash identifier: +TQpq+giN2fevJtflHKpp+o+GP+GRiQ8iuSmcT8X7Hg=
Subject key identifier: 0C:95:38:AF:11:F0:22:C9:49:74:7D:C5:AE:BC:8A:B1:E9:E0:8D:ED
Certificate issuer: /CN=4867E40A23D097EA0025F6DDEB062F7B53D51B27
Certificate serial: 0F
Authority key identifier: 48:67:E4:0A:23:D0:97:EA:00:25:F6:DD:EB:06:2F:7B:53:D5:1B:27
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SGfkCiPQl-oAJfbd6wYve1PVGyc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4098/DJU4rxHwIslJdH3FrryKsengje0.roa
Signing time: Tue 31 Mar 2026 08:46:49 +0000
ROA not before: Tue 31 Mar 2026 08:46:49 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 14618
IP address blocks: 202.244.96.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4098/SGfkCiPQl-oAJfbd6wYve1PVGyc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4098/SGfkCiPQl-oAJfbd6wYve1PVGyc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SGfkCiPQl-oAJfbd6wYve1PVGyc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 07:24:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4867E40A23D097EA0025F6DDEB062F7B53D51B27
Validity
Not Before: Mar 31 08:46:49 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=0C9538AF11F022C949747DC5AEBC8AB1E9E08DED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:58:ec:f3:2b:6b:0b:af:ea:36:ec:09:ef:86:
de:db:76:e7:43:90:7a:b8:18:86:53:85:fa:83:5d:
20:de:15:87:f0:b2:c0:ef:39:ac:3b:04:41:06:ce:
fb:2d:e9:ea:0c:87:15:a1:c1:19:ba:41:fb:18:ae:
3a:56:75:9a:4c:bc:a7:e8:81:50:4f:7d:ad:5e:27:
74:d5:a4:18:1b:47:4d:c8:2f:20:83:99:73:2c:c8:
b2:a3:80:f8:b1:a0:96:d1:e6:1a:b8:f2:41:63:a6:
7e:5c:4a:bf:3c:de:c2:e9:46:e9:69:8f:aa:a8:4e:
c0:e5:07:88:af:7e:07:53:57:e4:b5:1a:61:bf:51:
6c:cf:11:40:d0:2b:7a:f7:b8:79:f9:c7:06:e4:4c:
4d:a9:24:93:20:fa:79:33:87:5c:6d:2e:ea:29:ce:
9f:4c:b3:84:25:bb:f6:23:16:67:23:4f:a7:a6:8f:
2a:22:24:d0:85:2e:b9:60:0d:30:d0:f0:00:f7:1d:
3f:91:3d:d1:f5:92:5d:0b:31:a7:b1:6a:62:00:7b:
04:07:7e:69:84:58:be:44:f0:42:3f:4c:b8:29:3e:
88:d3:b0:ae:93:b3:47:3c:fc:38:84:37:ee:0a:ea:
a1:43:4d:fb:76:78:ba:c4:66:a3:24:22:70:46:d0:
d2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:95:38:AF:11:F0:22:C9:49:74:7D:C5:AE:BC:8A:B1:E9:E0:8D:ED
X509v3 Authority Key Identifier:
keyid:48:67:E4:0A:23:D0:97:EA:00:25:F6:DD:EB:06:2F:7B:53:D5:1B:27
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4098/SGfkCiPQl-oAJfbd6wYve1PVGyc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SGfkCiPQl-oAJfbd6wYve1PVGyc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4098/DJU4rxHwIslJdH3FrryKsengje0.roa
sbgp-ipAddrBlock: critical
IPv4:
202.244.96.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:e9:76:2d:28:2c:87:3a:df:c3:c4:ed:72:ef:e3:8e:82:99:
e1:39:30:2c:5c:00:a1:3b:68:7b:0a:cc:75:1c:ee:05:dd:af:
24:3c:e8:f7:46:c2:46:3c:33:3c:d9:47:3d:28:65:4c:9c:ca:
69:62:38:25:0f:2e:27:64:1a:26:05:f8:98:e6:a3:04:9c:0a:
b3:52:d7:a7:1f:3e:18:d7:5f:36:0a:1c:9d:fe:5a:13:b7:83:
74:f7:56:cb:84:c9:f4:9d:a9:9d:7d:ef:34:05:f7:6e:85:ef:
e1:3c:8d:b3:3f:dc:98:a7:50:b4:20:9f:95:03:94:b5:87:b1:
55:c9:ef:7c:87:68:3b:7b:86:6b:73:f2:44:bd:c5:06:c3:f4:
b1:01:e8:e6:d8:35:12:e0:ef:3a:75:31:d8:89:36:09:68:a3:
74:64:20:45:1b:5a:68:6a:f1:0c:87:18:1d:01:25:4d:7e:39:
f2:c0:4c:37:38:2f:60:a1:f4:0f:e7:5d:eb:9e:30:57:b8:e5:
cb:14:eb:3d:e4:b8:f2:05:b4:23:ec:1f:d0:62:33:15:e2:33:
67:f8:9b:ba:d9:28:80:b8:15:31:d7:eb:17:50:b6:6a:f7:21:
f9:3b:9f:af:7f:2b:10:e0:6e:2c:72:dd:5a:fb:9d:c0:89:0e:
ac:14:41:ca
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIBDzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0ODY3
RTQwQTIzRDA5N0VBMDAyNUY2RERFQjA2MkY3QjUzRDUxQjI3MB4XDTI2MDMzMTA4
NDY0OVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMEM5NTM4QUYxMUYwMjJD
OTQ5NzQ3REM1QUVCQzhBQjFFOUUwOERFRDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKdY7PMrawuv6jbsCe+G3tt250OQergYhlOF+oNdIN4Vh/CywO85
rDsEQQbO+y3p6gyHFaHBGbpB+xiuOlZ1mky8p+iBUE99rV4ndNWkGBtHTcgvIIOZ
cyzIsqOA+LGgltHmGrjyQWOmflxKvzzewulG6WmPqqhOwOUHiK9+B1NX5LUaYb9R
bM8RQNAreve4efnHBuRMTakkkyD6eTOHXG0u6inOn0yzhCW79iMWZyNPp6aPKiIk
0IUuuWANMNDwAPcdP5E90fWSXQsxp7FqYgB7BAd+aYRYvkTwQj9MuCk+iNOwrpOz
Rzz8OIQ37grqoUNN+3Z4usRmoyQicEbQ0vkCAwEAAaOCAdswggHXMB0GA1UdDgQW
BBQMlTivEfAiyUl0fcWuvIqx6eCN7TAfBgNVHSMEGDAWgBRIZ+QKI9CX6gAl9t3r
Bi97U9UbJzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDA5OC9TR2ZrQ2lQUWwtb0FKZmJkNndZdmUxUFZHeWMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9TR2ZrQ2lQUWwtb0FKZmJkNndZdmUx
UFZHeWMuY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB
BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNDA5OC9ESlU0cnhId0lzbEpkSDNGcnJ5S3NlbmdqZTAucm9hMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyvRgMA0GCSqGSIb3DQEBCwUAA4IB
AQBc6XYtKCyHOt/DxO1y7+OOgpnhOTAsXAChO2h7Csx1HO4F3a8kPOj3RsJGPDM8
2Uc9KGVMnMppYjglDy4nZBomBfiY5qMEnAqzUtenHz4Y1182Chyd/loTt4N091bL
hMn0namdfe80Bfduhe/hPI2zP9yYp1C0IJ+VA5S1h7FVye98h2g7e4Zrc/JEvcUG
w/SxAejm2DUS4O86dTHYiTYJaKN0ZCBFG1poavEMhxgdASVNfjnywEw3OC9gofQP
513rnjBXuOXLFOs95LjyBbQj7B/QYjMV4jNn+Ju62SiAuBUx1+sXULZq9yH5O5+v
fysQ4G4sct1a+53AiQ6sFEHK
-----END CERTIFICATE-----
Generated at Tue Apr 7 10:31:09 2026 by rpki-client