
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/506/YwZsn7l0NSstMfvr8ntD_lc2trY.roa
File: YwZsn7l0NSstMfvr8ntD_lc2trY.roa (raw, json)
Hash identifier: kn9+O0+gGpT+6HUpSLxjiSyUy0S3fz+avNssTbHTGQA=
Subject key identifier: 63:06:6C:9F:B9:74:35:2B:2D:31:FB:EB:F2:7B:43:FE:57:36:B6:B6
Certificate issuer: /CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
Certificate serial: 79
Authority key identifier: 4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/YwZsn7l0NSstMfvr8ntD_lc2trY.roa
Signing time: Tue 31 Mar 2026 07:30:55 +0000
ROA not before: Tue 31 Mar 2026 07:30:55 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 14618
IP address blocks: 103.23.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 07:24:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121 (0x79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
Validity
Not Before: Mar 31 07:30:55 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=63066C9FB974352B2D31FBEBF27B43FE5736B6B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ab:a4:2f:2a:a5:5a:45:d9:30:5c:65:8e:fe:
a0:10:c1:20:fa:f5:9a:6c:8a:b0:56:55:79:46:4a:
4c:c5:6f:71:e7:37:1f:b4:16:20:e7:17:03:66:98:
50:db:6a:3d:6b:9b:e0:a8:5e:a2:d2:ab:a0:c1:56:
3e:ec:47:2d:d3:00:1d:ba:4b:50:9b:e7:61:44:74:
0c:1b:09:52:a3:a3:89:4e:aa:1d:fc:0c:64:0f:8c:
fc:86:7a:cd:88:bc:96:e2:b1:79:59:41:e1:b1:53:
31:af:e5:52:53:de:15:5f:4a:ee:a3:68:72:07:c4:
47:3d:f9:50:06:08:69:b6:a7:ba:6e:b2:52:53:a9:
f6:e0:00:83:e8:e7:40:3d:48:12:0b:7a:84:2f:9a:
f0:16:45:f8:aa:88:11:ae:57:85:c3:ed:38:55:5f:
44:d2:c1:83:58:71:f7:cc:89:e0:2f:67:db:8c:80:
d4:29:eb:bf:47:e0:ff:d6:0d:51:f9:75:2f:55:7e:
73:9f:4f:6a:53:e3:d9:cc:d2:bc:91:30:52:8f:93:
74:76:bd:c4:8c:a0:b0:9c:8f:3d:a3:ac:b5:89:67:
a9:de:e8:1b:6f:c7:2f:42:95:c3:7b:67:4d:8f:02:
f4:7b:d0:41:66:c7:67:9f:5c:bf:80:55:6a:1f:ca:
e3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:06:6C:9F:B9:74:35:2B:2D:31:FB:EB:F2:7B:43:FE:57:36:B6:B6
X509v3 Authority Key Identifier:
keyid:4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/YwZsn7l0NSstMfvr8ntD_lc2trY.roa
sbgp-ipAddrBlock: critical
IPv4:
103.23.6.0/24
Signature Algorithm: sha256WithRSAEncryption
58:ff:7d:a3:81:19:29:1c:e2:a5:44:60:65:9d:eb:70:a2:91:
ad:b4:d9:74:63:d2:f9:36:7d:49:5b:e4:fc:d2:fe:62:13:bf:
dd:62:b7:b8:ee:59:c3:47:9a:df:9f:43:15:53:2e:92:42:c9:
91:b4:54:5d:a1:0f:cd:b4:2d:d7:94:d3:90:70:3b:3f:bd:3d:
a9:71:0a:ec:95:d3:03:6b:46:01:9a:80:2b:d4:84:f0:a3:d9:
ad:6c:5b:04:a4:06:d7:f5:25:8b:31:86:4f:50:bd:60:1c:68:
6c:ad:02:e6:82:e9:3e:56:5f:f5:39:d2:92:cb:c9:f2:94:ad:
dc:8a:b6:3b:84:2c:41:22:20:64:6c:6a:54:e4:c2:ea:04:11:
b9:c5:88:12:34:87:7f:82:e9:b2:d7:82:47:7f:f2:96:59:30:
cc:f3:4e:c4:b3:d7:e6:b7:f7:b4:a4:4d:ac:95:0a:c6:03:6a:
c4:eb:7c:5c:01:9c:7e:05:23:ac:93:b2:51:1a:9e:14:c0:bd:
77:c0:f7:6b:58:b1:23:9c:28:93:0d:9e:96:05:c5:76:39:11:
d7:ba:00:da:20:ae:88:f0:6b:62:d3:1b:43:e2:0c:3b:4a:96:
c1:9d:91:1d:aa:fc:9a:9d:bb:99:7d:3a:52:c0:10:4d:f6:2e:
2d:4e:7c:07
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBeTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0QkVB
NkJEOEE5Qzc4NDg4MjkxNDE5OTlBMDE2QTBDOUQxOTkxMkFGMB4XDTI2MDMzMTA3
MzA1NVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNjMwNjZDOUZCOTc0MzUy
QjJEMzFGQkVCRjI3QjQzRkU1NzM2QjZCNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALirpC8qpVpF2TBcZY7+oBDBIPr1mmyKsFZVeUZKTMVvcec3H7QW
IOcXA2aYUNtqPWub4KheotKroMFWPuxHLdMAHbpLUJvnYUR0DBsJUqOjiU6qHfwM
ZA+M/IZ6zYi8luKxeVlB4bFTMa/lUlPeFV9K7qNocgfERz35UAYIabanum6yUlOp
9uAAg+jnQD1IEgt6hC+a8BZF+KqIEa5XhcPtOFVfRNLBg1hx98yJ4C9n24yA1Cnr
v0fg/9YNUfl1L1V+c59PalPj2czSvJEwUo+TdHa9xIygsJyPPaOstYlnqd7oG2/H
L0KVw3tnTY8C9HvQQWbHZ59cv4BVah/K4wMCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBRjBmyfuXQ1Ky0x++vye0P+Vza2tjAfBgNVHSMEGDAWgBRL6mvYqceEiCkUGZmg
FqDJ0ZkSrzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTA2L1MtcHIyS25IaElncEZCbVpvQmFneWRHWkVxOC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1MtcHIyS25IaElncEZCbVpvQmFneWRH
WkVxOC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC81MDYvWXdac243bDBOU3N0TWZ2cjhudERfbGMydHJZLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcXBjANBgkqhkiG9w0BAQsFAAOCAQEA
WP99o4EZKRzipURgZZ3rcKKRrbTZdGPS+TZ9SVvk/NL+YhO/3WK3uO5Zw0ea359D
FVMukkLJkbRUXaEPzbQt15TTkHA7P709qXEK7JXTA2tGAZqAK9SE8KPZrWxbBKQG
1/UlizGGT1C9YBxobK0C5oLpPlZf9TnSksvJ8pSt3Iq2O4QsQSIgZGxqVOTC6gQR
ucWIEjSHf4LpsteCR3/yllkwzPNOxLPX5rf3tKRNrJUKxgNqxOt8XAGcfgUjrJOy
URqeFMC9d8D3a1ixI5wokw2elgXFdjkR17oA2iCuiPBrYtMbQ+IMO0qWwZ2RHar8
mp27mX06UsAQTfYuLU58Bw==
-----END CERTIFICATE-----
Generated at Tue Apr 7 10:31:06 2026 by rpki-client