
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/94k6tFyG1MVPn35qyHXLQDpGZXs.roa
File: 94k6tFyG1MVPn35qyHXLQDpGZXs.roa (raw, json)
Hash identifier: u7YgjUzH8zVzbGTsQEGytetkrBUKp0PqguiltTMeLCg=
Subject key identifier: F7:89:3A:B4:5C:86:D4:C5:4F:9F:7E:6A:C8:75:CB:40:3A:46:65:7B
Certificate issuer: /CN=D0F562FF36F711A3EDF99FC81DB54ED36634D8B1
Certificate serial: 64
Authority key identifier: D0:F5:62:FF:36:F7:11:A3:ED:F9:9F:C8:1D:B5:4E:D3:66:34:D8:B1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0PVi_zb3EaPt-Z_IHbVO02Y02LE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/94k6tFyG1MVPn35qyHXLQDpGZXs.roa
Signing time: Tue 31 Mar 2026 07:37:15 +0000
ROA not before: Tue 31 Mar 2026 07:37:15 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 55900
IP address blocks: 198.144.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/0PVi_zb3EaPt-Z_IHbVO02Y02LE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/0PVi_zb3EaPt-Z_IHbVO02Y02LE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0PVi_zb3EaPt-Z_IHbVO02Y02LE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100 (0x64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0F562FF36F711A3EDF99FC81DB54ED36634D8B1
Validity
Not Before: Mar 31 07:37:15 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=F7893AB45C86D4C54F9F7E6AC875CB403A46657B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:da:99:8f:bc:8f:25:48:1f:4e:bb:f8:d2:ea:
eb:91:b9:59:bd:65:01:93:e7:06:18:5e:d8:b8:27:
ae:40:86:5d:21:d7:08:75:23:77:8e:23:b1:a0:9e:
8f:73:5e:b4:8a:2f:5b:09:82:8f:26:9c:1d:54:ca:
b5:1e:f8:ba:fd:cb:5c:bb:35:6e:59:04:50:57:65:
8c:2a:bf:be:32:37:f8:77:97:46:ea:0b:dc:f9:d1:
18:04:77:33:e4:b3:56:0a:f7:ed:6b:75:aa:b7:af:
c2:3a:11:c0:d6:4c:52:65:46:b3:ee:0c:73:83:1f:
95:28:bc:0b:a3:ae:a5:7e:98:9a:25:43:a3:8e:60:
fa:c8:45:c3:29:65:3c:83:ef:ac:9f:e1:b3:83:2b:
19:22:1e:03:59:b6:cb:36:ed:ca:dd:2c:47:49:76:
4a:b4:6b:08:68:11:8e:64:c9:6f:04:fc:56:31:4b:
bb:8d:bd:45:7f:da:be:2e:f1:e6:db:59:0b:71:2a:
78:ce:f3:b3:ca:61:33:14:d3:99:0c:7b:b4:b4:c1:
e3:ee:0a:10:f7:e9:f4:21:2b:b5:31:84:1b:aa:e0:
8c:e6:ed:fd:85:ca:50:7b:77:8c:92:c7:72:c8:e5:
b8:7f:39:a0:77:96:79:bd:16:4f:80:48:a5:95:de:
fe:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:89:3A:B4:5C:86:D4:C5:4F:9F:7E:6A:C8:75:CB:40:3A:46:65:7B
X509v3 Authority Key Identifier:
keyid:D0:F5:62:FF:36:F7:11:A3:ED:F9:9F:C8:1D:B5:4E:D3:66:34:D8:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/0PVi_zb3EaPt-Z_IHbVO02Y02LE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0PVi_zb3EaPt-Z_IHbVO02Y02LE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/94k6tFyG1MVPn35qyHXLQDpGZXs.roa
sbgp-ipAddrBlock: critical
IPv4:
198.144.128.0/20
Signature Algorithm: sha256WithRSAEncryption
9f:f7:32:73:77:84:8d:ad:da:72:86:0c:99:1c:07:0a:29:6d:
ce:9e:0a:87:51:14:19:8c:f0:bc:a2:2c:6b:59:f5:47:01:21:
62:55:97:13:82:29:03:3a:ca:08:e9:e4:21:52:ae:4a:9c:7c:
f8:f7:b6:f8:8d:44:6e:cb:2a:00:54:72:8b:76:c6:e6:81:bc:
0a:cb:f2:3c:08:39:27:68:6d:3a:fe:5a:0c:25:a7:39:63:e4:
04:0b:c5:12:88:f4:10:4f:1c:73:fa:a1:21:44:7c:75:47:2c:
1e:60:1a:39:bd:0f:e0:b5:8b:aa:4d:6f:89:58:4b:19:08:a3:
2f:e8:30:f2:9c:1a:bb:f9:4f:5f:38:1a:60:7c:d9:64:a2:82:
b5:2a:60:ff:b3:50:30:db:6d:9a:51:85:57:2c:ed:d8:61:6e:
10:16:b9:c5:5b:44:2e:1b:02:62:01:92:08:db:93:72:49:9a:
d8:8d:82:0e:73:f5:b3:af:43:97:94:6c:3b:58:3e:7c:8c:f7:
07:96:12:ae:04:b6:73:33:40:da:85:73:c9:f2:ee:a2:a7:65:
59:87:0d:7a:82:03:b5:77:9c:20:f3:98:f0:b5:0b:e5:c8:ef:
8d:95:4e:03:68:0b:cf:6b:f2:c6:b1:b6:a3:32:37:88:6c:0c:
7c:b4:a5:c8
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBZDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMEY1
NjJGRjM2RjcxMUEzRURGOTlGQzgxREI1NEVEMzY2MzREOEIxMB4XDTI2MDMzMTA3
MzcxNVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRjc4OTNBQjQ1Qzg2RDRD
NTRGOUY3RTZBQzg3NUNCNDAzQTQ2NjU3QjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANTamY+8jyVIH067+NLq65G5Wb1lAZPnBhhe2LgnrkCGXSHXCHUj
d44jsaCej3NetIovWwmCjyacHVTKtR74uv3LXLs1blkEUFdljCq/vjI3+HeXRuoL
3PnRGAR3M+SzVgr37Wt1qrevwjoRwNZMUmVGs+4Mc4MflSi8C6OupX6YmiVDo45g
+shFwyllPIPvrJ/hs4MrGSIeA1m2yzbtyt0sR0l2SrRrCGgRjmTJbwT8VjFLu429
RX/avi7x5ttZC3EqeM7zs8phMxTTmQx7tLTB4+4KEPfp9CErtTGEG6rgjObt/YXK
UHt3jJLHcsjluH85oHeWeb0WT4BIpZXe/jkCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBT3iTq0XIbUxU+ffmrIdctAOkZlezAfBgNVHSMEGDAWgBTQ9WL/NvcRo+35n8gd
tU7TZjTYsTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTM5LzBQVmlfemIzRWFQdC1aX0lIYlZPMDJZMDJMRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBQVmlfemIzRWFQdC1aX0lIYlZPMDJZ
MDJMRS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC81MzkvOTRrNnRGeUcxTVZQbjM1cXlIWExRRHBHWlhzLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMaQgDANBgkqhkiG9w0BAQsFAAOCAQEA
n/cyc3eEja3acoYMmRwHCiltzp4Kh1EUGYzwvKIsa1n1RwEhYlWXE4IpAzrKCOnk
IVKuSpx8+Pe2+I1EbssqAFRyi3bG5oG8CsvyPAg5J2htOv5aDCWnOWPkBAvFEoj0
EE8cc/qhIUR8dUcsHmAaOb0P4LWLqk1viVhLGQijL+gw8pwau/lPXzgaYHzZZKKC
tSpg/7NQMNttmlGFVyzt2GFuEBa5xVtELhsCYgGSCNuTckma2I2CDnP1s69Dl5Rs
O1g+fIz3B5YSrgS2czNA2oVzyfLuoqdlWYcNeoIDtXecIPOY8LUL5cjvjZVOA2gL
z2vyxrG2ozI3iGwMfLSlyA==
-----END CERTIFICATE-----
Generated at Tue Apr 7 22:27:32 2026 by rpki-client