
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/WtR2ExBCbxKdIB-qhp4ZCbLkqYQ.roa
File: WtR2ExBCbxKdIB-qhp4ZCbLkqYQ.roa (raw, json)
Hash identifier: xeBA79FRVe0a4XL1N7upO6iQw8fhoXit53jei0LZTMU=
Subject key identifier: 5A:D4:76:13:10:42:6F:12:9D:20:1F:AA:86:9E:19:09:B2:E4:A9:84
Certificate issuer: /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial: 85
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/WtR2ExBCbxKdIB-qhp4ZCbLkqYQ.roa
Signing time: Tue 31 Mar 2026 08:24:32 +0000
ROA not before: Tue 31 Mar 2026 08:24:32 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 10000
IP address blocks: 114.134.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 13:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Validity
Not Before: Mar 31 08:24:32 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=5AD4761310426F129D201FAA869E1909B2E4A984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3f:f1:c4:50:02:75:d1:ee:30:c4:73:f8:4e:
75:e2:f8:ca:22:61:d5:62:9f:75:b0:7a:f2:cb:bd:
9a:d4:24:aa:4a:18:e7:77:53:82:9c:5d:07:9a:b8:
02:b6:95:e3:83:a5:1c:43:0a:26:12:dc:51:3a:89:
3f:6d:07:9c:3e:15:7d:5a:37:d8:fb:9f:4e:32:b3:
67:cc:cd:21:58:48:2f:09:91:2e:dd:19:63:7b:71:
e1:85:0c:7d:01:c9:9e:d8:74:9c:a7:2d:5c:77:c3:
e6:e2:26:b8:b7:44:b9:18:8b:92:7c:e0:fa:72:91:
a0:88:d1:4c:d7:96:b5:d3:78:d9:0c:25:c6:6b:56:
d4:2f:62:dc:da:0f:9f:17:da:d8:4f:16:3a:98:33:
ee:b3:40:68:2a:59:ed:00:bb:96:8d:ca:78:52:23:
45:c3:2c:73:39:80:f9:95:c9:7e:21:60:a1:4a:46:
f1:51:11:db:d7:11:14:02:d8:91:f4:f7:4e:ba:b8:
09:11:34:ec:bf:bd:54:f4:b0:6d:70:2d:e8:11:ff:
58:3f:b2:e2:f7:7c:54:4d:8d:b3:84:08:a5:6a:25:
c6:68:5a:3d:13:69:39:af:7f:f5:24:75:0a:2f:64:
49:56:d2:36:71:a4:2d:e8:aa:88:af:84:14:28:fd:
cc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D4:76:13:10:42:6F:12:9D:20:1F:AA:86:9E:19:09:B2:E4:A9:84
X509v3 Authority Key Identifier:
keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/WtR2ExBCbxKdIB-qhp4ZCbLkqYQ.roa
sbgp-ipAddrBlock: critical
IPv4:
114.134.128.0/19
Signature Algorithm: sha256WithRSAEncryption
83:09:a8:78:0a:c4:80:f1:73:c7:f3:be:ce:bb:f8:48:c4:3b:
1d:43:d6:18:3a:5b:36:f6:47:a3:8b:6e:f9:c4:59:84:dc:28:
9c:25:ee:35:95:20:af:97:2d:fa:0f:68:d2:f1:4f:7c:56:57:
eb:a5:e6:43:09:22:dd:46:60:8a:11:6a:c9:ad:5c:ef:f4:96:
49:40:6d:5f:c0:3b:0b:28:d8:6b:9a:31:d6:a2:46:d4:8d:b0:
be:e9:bd:46:22:bf:78:9d:55:c8:45:0d:81:35:85:20:75:4f:
72:36:28:e3:24:06:64:70:b8:a1:c0:00:31:d8:76:96:fe:96:
3f:92:da:cf:ea:62:2b:a3:8c:98:cb:37:aa:f7:14:df:4e:2e:
38:f7:48:22:2c:25:18:6b:49:13:96:9b:cc:89:13:b9:9d:e4:
43:e4:e7:60:1f:56:ed:e4:52:3a:6d:7a:df:79:2e:46:b6:78:
1a:e1:3c:30:22:c6:b9:33:66:26:30:d3:4d:57:e3:33:34:b7:
30:b6:3e:04:1e:ae:1c:87:6e:0f:27:d1:c4:96:83:f1:d8:ca:
53:46:35:9a:ea:93:3a:9c:97:ee:d5:28:2c:0c:78:7f:da:88:
7e:a2:61:35:8d:d2:22:21:b6:c6:53:c3:ac:8e:ae:13:a7:8c:
80:87:06:81
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUQ0
NzQxRjAzNDlGQkMxNUE3MDhFMjhBMkNFMzA3OTA2Q0FDNURFMDAeFw0yNjAzMzEw
ODI0MzJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDVBRDQ3NjEzMTA0MjZG
MTI5RDIwMUZBQTg2OUUxOTA5QjJFNEE5ODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVP/HEUAJ10e4wxHP4TnXi+MoiYdVin3WwevLLvZrUJKpKGOd3
U4KcXQeauAK2leODpRxDCiYS3FE6iT9tB5w+FX1aN9j7n04ys2fMzSFYSC8JkS7d
GWN7ceGFDH0ByZ7YdJynLVx3w+biJri3RLkYi5J84PpykaCI0UzXlrXTeNkMJcZr
VtQvYtzaD58X2thPFjqYM+6zQGgqWe0Au5aNynhSI0XDLHM5gPmVyX4hYKFKRvFR
EdvXERQC2JH09066uAkRNOy/vVT0sG1wLegR/1g/suL3fFRNjbOECKVqJcZoWj0T
aTmvf/UkdQovZElW0jZxpC3oqoivhBQo/cwNAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUWtR2ExBCbxKdIB+qhp4ZCbLkqYQwHwYDVR0jBBgwFoAUrUdB8DSfvBWnCOKK
LOMHkGysXeAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQ1NC9yVWRCOERTZnZCV25DT0tLTE9NSGtHeXNYZUEuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9yVWRCOERTZnZCV25DT0tLTE9NSGtH
eXNYZUEuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNDU0L1d0UjJFeEJDYnhLZElCLXFocDRaQ2JMa3FZUS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAVyhoAwDQYJKoZIhvcNAQELBQADggEB
AIMJqHgKxIDxc8fzvs67+EjEOx1D1hg6Wzb2R6OLbvnEWYTcKJwl7jWVIK+XLfoP
aNLxT3xWV+ul5kMJIt1GYIoRasmtXO/0lklAbV/AOwso2GuaMdaiRtSNsL7pvUYi
v3idVchFDYE1hSB1T3I2KOMkBmRwuKHAADHYdpb+lj+S2s/qYiujjJjLN6r3FN9O
Ljj3SCIsJRhrSROWm8yJE7md5EPk52AfVu3kUjptet95Lka2eBrhPDAixrkzZiYw
001X4zM0tzC2PgQerhyHbg8n0cSWg/HYylNGNZrqkzqcl+7VKCwMeH/aiH6iYTWN
0iIhtsZTw6yOrhOnjICHBoE=
-----END CERTIFICATE-----
Generated at Tue Apr 7 16:35:01 2026 by rpki-client