
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/8sH-QKPaI7FKCVDCf4XxanuHBDU.roa
File: 8sH-QKPaI7FKCVDCf4XxanuHBDU.roa (raw, json)
Hash identifier: GFV82wZKHKzE8cDEwGaWJVx9NcmYq/GRTc2CbLHrNlk=
Subject key identifier: F2:C1:FE:40:A3:DA:23:B1:4A:09:50:C2:7F:85:F1:6A:7B:87:04:35
Certificate issuer: /CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Certificate serial: A5
Authority key identifier: 5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/8sH-QKPaI7FKCVDCf4XxanuHBDU.roa
Signing time: Tue 31 Mar 2026 07:37:17 +0000
ROA not before: Tue 31 Mar 2026 07:37:17 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 55900
IP address blocks: 180.131.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165 (0xa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Validity
Not Before: Mar 31 07:37:17 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=F2C1FE40A3DA23B14A0950C27F85F16A7B870435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d1:12:9e:81:17:f0:89:7b:54:b9:a9:a4:5f:
72:b5:d9:5b:b4:e9:94:a4:a2:97:30:ff:05:4c:06:
f0:8c:d0:b8:29:95:1a:60:63:4e:77:4a:5e:93:42:
2f:ab:df:60:65:74:b7:27:d6:f8:3e:b7:e0:3b:80:
04:3a:73:8e:09:2e:fc:f0:2d:8b:19:02:dd:f6:16:
ae:64:b9:1a:05:7c:41:45:f8:e7:75:38:76:77:55:
89:65:20:0a:cb:62:0c:c8:9a:05:1b:ee:a6:6a:cd:
7e:32:4a:64:df:b5:db:38:27:9a:6d:a7:2d:ca:91:
d2:a7:17:42:6d:e1:be:62:92:6d:57:3a:ba:30:32:
db:9e:91:9e:ef:b6:55:42:3d:a3:59:2c:86:6c:4b:
ca:43:0b:e0:97:17:e2:ef:0e:80:0e:3f:5c:2a:91:
50:96:4f:69:00:6f:15:fa:f3:0c:19:6d:90:dd:09:
e0:de:2f:33:c1:87:ea:30:96:d5:de:3f:8a:bc:25:
e5:52:a5:95:10:72:0e:2c:6f:98:43:db:2e:71:ad:
af:31:21:92:fb:84:c6:ef:36:6a:d3:ce:0c:d9:6a:
fd:c9:5f:45:bb:52:56:4d:d0:20:bf:00:08:be:44:
f9:2a:0b:36:4f:52:85:c2:42:75:cd:92:58:83:90:
2d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C1:FE:40:A3:DA:23:B1:4A:09:50:C2:7F:85:F1:6A:7B:87:04:35
X509v3 Authority Key Identifier:
keyid:5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/8sH-QKPaI7FKCVDCf4XxanuHBDU.roa
sbgp-ipAddrBlock: critical
IPv4:
180.131.224.0/19
Signature Algorithm: sha256WithRSAEncryption
62:44:cd:7d:06:35:f1:26:ee:c2:0d:8d:73:c5:47:62:a9:c4:
95:cb:21:65:ad:b8:02:33:87:b4:ba:94:a8:66:3b:fe:e0:6c:
25:1b:cc:c0:21:cf:59:ec:2c:f6:eb:c4:97:8b:c5:99:d9:9b:
75:01:6e:47:37:8b:61:9f:fc:60:ac:29:14:bd:8b:2b:e0:52:
0d:36:d3:e9:cb:56:ba:ad:63:f2:97:b4:04:45:e9:fc:a6:97:
6b:4f:30:09:84:02:2c:14:3b:d5:ab:19:8b:5c:8d:d1:a8:19:
34:d5:d1:80:96:95:ba:9c:64:56:f2:3d:b6:b4:69:6d:e1:71:
8b:a2:4a:0a:02:6d:bd:5d:05:1a:6b:ae:cd:33:21:19:2d:a0:
a1:e1:9d:d7:d9:e5:7f:ee:f8:6a:03:37:fe:fa:86:a1:c8:6b:
e0:8f:a4:ff:bb:22:e2:bd:e6:b2:ee:f4:69:30:00:ec:56:f0:
fa:30:02:e1:89:01:ac:18:7d:12:04:4e:c4:6d:23:7f:18:e6:
84:27:28:3d:47:9e:02:bd:a9:20:d6:2c:ea:92:20:3f:c3:31:
26:f5:39:e4:8c:3d:40:87:4c:b7:ff:b8:d7:6a:02:49:6f:70:
6a:15:e2:0e:4b:5c:24:3a:33:ac:7a:5e:06:67:96:c5:bb:ea:
d4:6e:45:04
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUIw
RDcyRjlGNDMwQjdENDAwMzM3NUYxMEQ1MDI1QjlFNUMwMDQzNzAeFw0yNjAzMzEw
NzM3MTdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEYyQzFGRTQwQTNEQTIz
QjE0QTA5NTBDMjdGODVGMTZBN0I4NzA0MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC80RKegRfwiXtUuamkX3K12Vu06ZSkopcw/wVMBvCM0LgplRpg
Y053Sl6TQi+r32BldLcn1vg+t+A7gAQ6c44JLvzwLYsZAt32Fq5kuRoFfEFF+Od1
OHZ3VYllIArLYgzImgUb7qZqzX4ySmTftds4J5ptpy3KkdKnF0Jt4b5ikm1XOrow
MtuekZ7vtlVCPaNZLIZsS8pDC+CXF+LvDoAOP1wqkVCWT2kAbxX68wwZbZDdCeDe
LzPBh+owltXeP4q8JeVSpZUQcg4sb5hD2y5xra8xIZL7hMbvNmrTzgzZav3JX0W7
UlZN0CC/AAi+RPkqCzZPUoXCQnXNkliDkC3JAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU8sH+QKPaI7FKCVDCf4XxanuHBDUwHwYDVR0jBBgwFoAUWw1y+fQwt9QAM3Xx
DVAlueXABDcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzUzOS9XdzF5LWZRd3Q5UUFNM1h4RFZBbHVlWEFCRGMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9XdzF5LWZRd3Q5UUFNM1h4RFZBbHVl
WEFCRGMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNTM5LzhzSC1RS1BhSTdGS0NWRENmNFh4YW51SEJEVS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAW0g+AwDQYJKoZIhvcNAQELBQADggEB
AGJEzX0GNfEm7sINjXPFR2KpxJXLIWWtuAIzh7S6lKhmO/7gbCUbzMAhz1nsLPbr
xJeLxZnZm3UBbkc3i2Gf/GCsKRS9iyvgUg020+nLVrqtY/KXtARF6fyml2tPMAmE
AiwUO9WrGYtcjdGoGTTV0YCWlbqcZFbyPba0aW3hcYuiSgoCbb1dBRprrs0zIRkt
oKHhndfZ5X/u+GoDN/76hqHIa+CPpP+7IuK95rLu9GkwAOxW8PowAuGJAawYfRIE
TsRtI38Y5oQnKD1HngK9qSDWLOqSID/DMSb1OeSMPUCHTLf/uNdqAklvcGoV4g5L
XCQ6M6x6XgZnlsW76tRuRQQ=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:47 2026 by rpki-client