
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/OVauGeMAuAZJSLjNE3w4lU_hipc.roa
File: OVauGeMAuAZJSLjNE3w4lU_hipc.roa (raw, json)
Hash identifier: B+cTGDZMy3wBhsbAe2dnbn6KLF+2bDizO/vWAlQv7Po=
Subject key identifier: 39:56:AE:19:E3:00:B8:06:49:48:B8:CD:13:7C:38:95:4F:E1:8A:97
Certificate issuer: /CN=677198612266777D83A2DB4A1E9E147C72A5D76D
Certificate serial: 45
Authority key identifier: 67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/OVauGeMAuAZJSLjNE3w4lU_hipc.roa
Signing time: Tue 31 Mar 2026 08:49:28 +0000
ROA not before: Tue 31 Mar 2026 08:49:28 +0000
ROA not after: Wed 24 Mar 2027 01:46:06 +0000
asID: 17511
IP address blocks: 210.199.80.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69 (0x45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677198612266777D83A2DB4A1E9E147C72A5D76D
Validity
Not Before: Mar 31 08:49:28 2026 GMT
Not After : Mar 24 01:46:06 2027 GMT
Subject: CN=3956AE19E300B8064948B8CD137C38954FE18A97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a6:96:d1:5e:70:1b:be:21:7f:cd:2e:a1:c1:
78:da:6d:2c:95:56:77:15:1f:98:fb:1b:26:ef:68:
39:76:58:66:02:e2:ac:61:40:44:0e:8b:c6:b0:30:
af:7a:e6:ee:9e:70:ed:3b:0a:7e:cb:c5:e5:4d:b2:
0b:0c:98:c8:18:05:e5:12:a9:42:cb:fc:36:33:3d:
7f:87:1c:59:34:ef:e2:9e:ea:30:ce:4c:e2:a3:ba:
50:fb:e7:67:cd:68:90:52:74:07:65:97:a5:11:c0:
12:f0:11:c0:7c:47:95:29:2f:f3:aa:5a:18:93:e2:
84:20:6a:93:8b:2b:8c:78:05:d5:0b:fc:8a:c3:0c:
13:87:fc:e5:72:6e:a3:65:71:57:75:44:06:0c:1c:
2c:44:79:ae:7b:ee:5b:18:a7:25:33:f2:a5:7e:c3:
c8:80:a9:8a:bd:57:79:23:2d:da:b8:e9:ba:c0:b9:
2c:5a:0f:7b:b0:fe:f4:b5:99:47:77:ee:36:79:a8:
c0:b6:58:ab:25:76:68:a9:94:7b:1b:17:f4:09:53:
88:b6:1d:26:b5:06:a3:c8:9c:e2:72:8a:0d:55:a1:
f4:74:db:6a:84:86:5f:28:4c:b4:cc:be:96:2f:e3:
e6:b4:48:2b:76:cc:23:f7:7c:57:78:66:95:82:7f:
b4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:56:AE:19:E3:00:B8:06:49:48:B8:CD:13:7C:38:95:4F:E1:8A:97
X509v3 Authority Key Identifier:
keyid:67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/OVauGeMAuAZJSLjNE3w4lU_hipc.roa
sbgp-ipAddrBlock: critical
IPv4:
210.199.80.0/20
Signature Algorithm: sha256WithRSAEncryption
ac:22:a9:c3:bb:49:11:c6:71:24:93:a2:98:12:a2:e0:37:5f:
af:88:ea:21:62:d2:6a:97:4b:1c:0a:01:bd:5f:75:92:c7:57:
34:ba:b1:bf:2b:72:8b:58:d4:2b:bd:8b:c9:a8:ef:4b:ba:dc:
06:2f:13:ab:5d:8d:a0:79:98:a6:50:c6:c7:b2:7a:29:97:c9:
9c:cb:0c:4a:9b:ec:a9:23:f4:ca:d1:14:39:64:29:e6:51:06:
9b:af:6e:17:a8:50:44:65:90:2e:a2:b1:00:22:67:3d:78:82:
9e:b0:4e:d7:10:39:5c:7c:21:c6:5d:bc:2e:8b:6b:c3:8a:f5:
72:56:d1:bf:11:c9:b4:33:b3:b7:e7:db:d1:f6:30:6c:fb:06:
6a:02:f5:57:1b:57:36:0c:9b:ef:d5:f8:0f:f7:d4:44:96:94:
2c:81:8a:b7:72:ea:74:d9:1a:de:74:0b:9c:da:08:b1:2a:78:
85:7d:83:72:5c:a5:4b:35:a9:0d:31:88:be:81:87:5d:1a:9b:
95:40:ad:fb:b6:b6:cd:60:ee:56:05:9e:54:95:19:42:95:bf:
bc:00:96:14:59:05:ba:6d:5a:28:8b:e7:26:da:c7:94:9c:47:
17:9c:36:10:ed:45:9c:a5:3f:4c:d3:7b:58:63:cc:cc:dd:a5:
a6:2d:f2:6a
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBRTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2Nzcx
OTg2MTIyNjY3NzdEODNBMkRCNEExRTlFMTQ3QzcyQTVENzZEMB4XDTI2MDMzMTA4
NDkyOFoXDTI3MDMyNDAxNDYwNlowMzExMC8GA1UEAxMoMzk1NkFFMTlFMzAwQjgw
NjQ5NDhCOENEMTM3QzM4OTU0RkUxOEE5NzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM2mltFecBu+IX/NLqHBeNptLJVWdxUfmPsbJu9oOXZYZgLirGFA
RA6LxrAwr3rm7p5w7TsKfsvF5U2yCwyYyBgF5RKpQsv8NjM9f4ccWTTv4p7qMM5M
4qO6UPvnZ81okFJ0B2WXpRHAEvARwHxHlSkv86paGJPihCBqk4srjHgF1Qv8isMM
E4f85XJuo2VxV3VEBgwcLER5rnvuWxinJTPypX7DyICpir1XeSMt2rjpusC5LFoP
e7D+9LWZR3fuNnmowLZYqyV2aKmUexsX9AlTiLYdJrUGo8ic4nKKDVWh9HTbaoSG
XyhMtMy+li/j5rRIK3bMI/d8V3hmlYJ/tCECAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBQ5Vq4Z4wC4BklIuM0TfDiVT+GKlzAfBgNVHSMEGDAWgBRncZhhImZ3fYOi20oe
nhR8cqXXbTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDkzL1ozR1lZU0ptZDMyRG90dEtIcDRVZkhLbDEyMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1ozR1lZU0ptZDMyRG90dEtIcDRVZkhL
bDEyMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80OTMvT1ZhdUdlTUF1QVpKU0xqTkUzdzRsVV9oaXBjLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBNLHUDANBgkqhkiG9w0BAQsFAAOCAQEA
rCKpw7tJEcZxJJOimBKi4Ddfr4jqIWLSapdLHAoBvV91ksdXNLqxvytyi1jUK72L
yajvS7rcBi8Tq12NoHmYplDGx7J6KZfJnMsMSpvsqSP0ytEUOWQp5lEGm69uF6hQ
RGWQLqKxACJnPXiCnrBO1xA5XHwhxl28Lotrw4r1clbRvxHJtDOzt+fb0fYwbPsG
agL1VxtXNgyb79X4D/fURJaULIGKt3LqdNka3nQLnNoIsSp4hX2DclylSzWpDTGI
voGHXRqblUCt+7a2zWDuVgWeVJUZQpW/vACWFFkFum1aKIvnJtrHlJxHF5w2EO1F
nKU/TNN7WGPMzN2lpi3yag==
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:33:53 2026 by rpki-client