
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/Gz7aAIqSiXQTxvDh2D1EabtpFGg.roa
File: Gz7aAIqSiXQTxvDh2D1EabtpFGg.roa (raw, json)
Hash identifier: AyYVV0sDX6y1bG6KLjTx7stNd/l4iyBfwZOKbNjn0aI=
Subject key identifier: 1B:3E:DA:00:8A:92:89:74:13:C6:F0:E1:D8:3D:44:69:BB:69:14:68
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 021E
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Gz7aAIqSiXQTxvDh2D1EabtpFGg.roa
Signing time: Tue 31 Mar 2026 07:35:44 +0000
ROA not before: Tue 31 Mar 2026 07:35:44 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2497
IP address blocks: 58.138.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 11:22:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 542 (0x21e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Mar 31 07:35:44 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=1B3EDA008A92897413C6F0E1D83D4469BB691468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b0:27:88:5b:6d:6a:19:6b:c9:ce:a4:eb:59:
09:b5:60:51:ea:e1:a6:50:20:d4:c3:b5:0d:26:c5:
e2:fd:7a:43:75:35:41:14:9f:b4:4a:e4:67:e3:58:
dc:eb:4a:d6:4c:79:0e:d4:88:04:a3:7a:ed:6a:8b:
14:e5:ea:0c:05:a5:65:ee:44:12:c1:7b:f3:0e:86:
fd:68:d9:fb:7e:78:25:dd:e3:8e:a5:f8:7f:2b:29:
ba:b6:b4:74:4d:46:fb:77:0c:88:40:85:6f:df:48:
ad:63:cf:55:e4:9b:a7:61:62:b0:2b:d1:8c:14:41:
bc:ab:0a:9c:58:d5:b4:2d:1c:c1:16:94:92:f2:fa:
72:88:98:f0:fb:e2:eb:bf:3d:e1:f5:5b:2f:e6:25:
6d:89:59:e6:3d:84:32:c0:06:bb:12:42:a2:d4:26:
bd:60:91:24:96:1a:b6:50:be:2f:1b:aa:57:e5:af:
fd:ae:fb:d5:67:15:d3:5c:08:e5:98:c6:3c:4a:8d:
7d:b0:d1:21:d2:e5:a9:95:22:3e:3e:e5:1c:60:08:
4e:df:8b:3f:49:29:3d:a3:0c:c3:f8:df:67:c9:c2:
21:9d:7f:3d:82:5c:85:1c:a8:ca:94:67:13:6d:10:
ac:41:42:f0:37:66:73:24:9e:01:76:12:fa:50:f1:
b6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3E:DA:00:8A:92:89:74:13:C6:F0:E1:D8:3D:44:69:BB:69:14:68
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Gz7aAIqSiXQTxvDh2D1EabtpFGg.roa
sbgp-ipAddrBlock: critical
IPv4:
58.138.128.0/18
Signature Algorithm: sha256WithRSAEncryption
4a:ac:62:3b:82:37:e6:77:ab:d9:4a:d9:b3:87:f0:ef:b6:ef:
20:38:fb:a2:17:48:b3:42:4f:c9:2a:86:2e:1e:eb:f8:95:91:
94:10:6b:0a:27:00:e6:57:01:7b:87:4f:3f:cc:55:e2:4c:fb:
94:d5:51:cd:a9:64:e1:99:15:db:54:21:34:f8:c0:d8:83:97:
f3:89:3d:3a:52:f2:76:82:c1:1f:7e:5e:a6:7e:32:d1:ae:d9:
40:57:12:5e:0c:42:b4:b1:08:18:64:a1:d5:73:fd:35:d7:c5:
42:1a:95:5c:e5:e0:48:dc:47:02:ac:aa:fc:9f:4f:27:8c:40:
86:9b:f4:3b:f0:27:4e:f2:83:8e:4e:81:65:a2:73:de:ce:08:
2f:32:da:61:3c:1b:46:12:29:a7:a8:9c:99:18:5c:0b:d8:94:
48:11:91:e4:0b:0d:fb:68:e4:c3:aa:d8:77:c9:f0:b9:af:22:
8b:c8:a1:9d:7d:bb:5e:7e:a4:40:66:8b:84:e1:4c:d7:a2:ef:
85:bb:34:d5:fe:e7:be:2e:17:b3:1a:ec:7c:3b:ef:8b:94:0c:
7f:62:27:83:97:98:d0:01:49:04:b8:0b:51:51:ba:fd:d4:f8:
47:9e:8e:d6:3c:64:88:a0:09:94:70:e7:ed:cf:f9:aa:df:39:
cd:2d:27:68
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4
M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yNjAzMzEw
NzM1NDRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDFCM0VEQTAwOEE5Mjg5
NzQxM0M2RjBFMUQ4M0Q0NDY5QkI2OTE0NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFsCeIW21qGWvJzqTrWQm1YFHq4aZQINTDtQ0mxeL9ekN1NUEU
n7RK5GfjWNzrStZMeQ7UiASjeu1qixTl6gwFpWXuRBLBe/MOhv1o2ft+eCXd446l
+H8rKbq2tHRNRvt3DIhAhW/fSK1jz1Xkm6dhYrAr0YwUQbyrCpxY1bQtHMEWlJLy
+nKImPD74uu/PeH1Wy/mJW2JWeY9hDLABrsSQqLUJr1gkSSWGrZQvi8bqlflr/2u
+9VnFdNcCOWYxjxKjX2w0SHS5amVIj4+5RxgCE7fiz9JKT2jDMP432fJwiGdfz2C
XIUcqMqUZxNtEKxBQvA3ZnMkngF2EvpQ8bZ7AgMBAAGjggHVMIIB0TAdBgNVHQ4E
FgQUGz7aAIqSiXQTxvDh2D1EabtpFGgwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui
XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM
RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUF
BzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvR3o3YUFJcVNpWFFUeHZEaDJEMUVhYnRwRkdnLnJvYTAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEBjqKgDANBgkqhkiG9w0BAQsFAAOCAQEASqxi
O4I35ner2UrZs4fw77bvIDj7ohdIs0JPySqGLh7r+JWRlBBrCicA5lcBe4dPP8xV
4kz7lNVRzalk4ZkV21QhNPjA2IOX84k9OlLydoLBH35epn4y0a7ZQFcSXgxCtLEI
GGSh1XP9NdfFQhqVXOXgSNxHAqyq/J9PJ4xAhpv0O/AnTvKDjk6BZaJz3s4ILzLa
YTwbRhIpp6icmRhcC9iUSBGR5AsN+2jkw6rYd8nwua8ii8ihnX27Xn6kQGaLhOFM
16Lvhbs01f7nvi4XsxrsfDvvi5QMf2Ing5eY0AFJBLgLUVG6/dT4R56O1jxkiKAJ
lHDn7c/5qt85zS0naA==
-----END CERTIFICATE-----
Generated at Tue Apr 7 13:25:03 2026 by rpki-client