
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/aoULE7EYu0EOCKtPsPXEeJTKeII.roa
File: aoULE7EYu0EOCKtPsPXEeJTKeII.roa (raw, json)
Hash identifier: tMOvXiDu6WgYwH9INVhns5G+As4JaJjk63kfA4bZS+E=
Subject key identifier: 6A:85:0B:13:B1:18:BB:41:0E:08:AB:4F:B0:F5:C4:78:94:CA:78:82
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 0258
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/aoULE7EYu0EOCKtPsPXEeJTKeII.roa
Signing time: Tue 31 Mar 2026 07:36:14 +0000
ROA not before: Tue 31 Mar 2026 07:36:14 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2497
IP address blocks: 133.110.248.0/25 maxlen: 25
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 10:39:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 600 (0x258)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Mar 31 07:36:14 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=6A850B13B118BB410E08AB4FB0F5C47894CA7882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9b:37:92:9d:c2:c7:c9:21:6a:1d:b6:65:4a:
db:c8:98:96:15:0a:75:2a:6a:e5:4d:60:a1:d4:3f:
c9:2f:34:a1:5c:bf:1e:f0:4a:fa:25:59:75:37:ac:
07:55:13:ed:ba:af:d1:6a:5f:77:54:07:b6:83:62:
5d:c7:a7:9a:c0:fd:41:88:1a:33:dd:61:c0:db:f3:
d3:54:25:da:a5:de:40:af:9b:11:6f:a2:d3:21:74:
48:ed:0c:ce:5c:f6:88:bd:a7:ce:e0:58:a7:13:08:
46:6e:84:e5:8d:42:ca:fc:86:48:b4:78:d7:ae:be:
08:eb:32:ac:a6:ef:63:83:32:f4:31:57:cf:7f:ce:
3a:5a:90:95:36:87:09:88:20:8a:1c:9c:93:14:50:
77:ac:b4:2e:f7:8d:2b:89:b6:7c:ab:59:88:82:85:
15:f3:e4:b5:36:41:ea:d7:19:a1:b1:8c:d7:ee:69:
14:d0:01:07:28:02:1c:72:e9:7c:b4:a9:1f:6f:b1:
63:12:85:cc:57:fc:93:0d:94:7f:e8:db:53:dc:0c:
f1:b8:dc:a9:1b:27:97:04:15:0a:6f:bc:0a:33:ba:
d3:f0:c5:0f:9f:26:0d:71:b7:ff:22:d0:d2:50:6b:
69:da:d1:05:5d:61:54:c0:7b:be:75:b5:0e:47:d5:
e9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:85:0B:13:B1:18:BB:41:0E:08:AB:4F:B0:F5:C4:78:94:CA:78:82
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/aoULE7EYu0EOCKtPsPXEeJTKeII.roa
sbgp-ipAddrBlock: critical
IPv4:
133.110.248.0/25
Signature Algorithm: sha256WithRSAEncryption
32:a7:0f:e3:c0:94:14:5a:0e:20:6e:f6:d3:1d:3b:d1:cf:de:
23:78:ef:03:37:ac:64:0b:ba:fa:3e:a3:c6:a0:15:2a:8e:88:
bb:76:d1:68:50:19:10:0c:b6:3e:1e:45:6c:b0:f6:3d:e7:5a:
a1:29:91:b7:33:64:5c:17:cc:50:c9:d5:c4:cf:fd:5d:63:e9:
6a:25:c0:66:1d:be:1e:42:81:ed:95:43:8c:99:84:b0:7d:4f:
78:1b:de:5c:bd:45:99:63:e3:fa:a1:4a:11:24:bc:13:dc:78:
ee:96:9a:2f:62:ee:99:71:1d:ec:44:63:6f:87:6b:a1:04:69:
45:46:ef:61:af:64:49:33:04:ae:39:e1:5c:3d:52:a1:dd:6b:
d3:d4:05:37:07:e4:24:db:01:b3:08:95:f9:0c:dd:88:99:91:
41:a8:74:52:48:e9:be:f0:2b:8e:aa:1e:a8:e8:43:18:ec:15:
1a:bb:42:7e:5d:0b:14:de:38:18:e8:d8:e7:20:df:86:02:e8:
b0:aa:47:66:1e:98:8e:28:4c:e5:7e:6c:ed:d3:1b:7e:14:9b:
ff:5b:aa:05:75:0c:be:ba:bf:92:37:3b:05:c0:41:b2:63:5c:
ca:24:6a:88:d8:a6:63:60:49:7a:4f:76:1e:1a:31:ba:71:52:
9d:9f:b5:e7
-----BEGIN CERTIFICATE-----
MIIEujCCA6KgAwIBAgICAlgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4
M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yNjAzMzEw
NzM2MTRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDZBODUwQjEzQjExOEJC
NDEwRTA4QUI0RkIwRjVDNDc4OTRDQTc4ODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLmzeSncLHySFqHbZlStvImJYVCnUqauVNYKHUP8kvNKFcvx7w
SvolWXU3rAdVE+26r9FqX3dUB7aDYl3Hp5rA/UGIGjPdYcDb89NUJdql3kCvmxFv
otMhdEjtDM5c9oi9p87gWKcTCEZuhOWNQsr8hki0eNeuvgjrMqym72ODMvQxV89/
zjpakJU2hwmIIIocnJMUUHestC73jSuJtnyrWYiChRXz5LU2QerXGaGxjNfuaRTQ
AQcoAhxy6Xy0qR9vsWMShcxX/JMNlH/o21PcDPG43KkbJ5cEFQpvvAozutPwxQ+f
Jg1xt/8i0NJQa2na0QVdYVTAe751tQ5H1ekBAgMBAAGjggHWMIIB0jAdBgNVHQ4E
FgQUaoULE7EYu0EOCKtPsPXEeJTKeIIwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui
XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM
RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUF
BzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvYW9VTEU3RVl1MEVPQ0t0UHNQWEVlSlRLZUlJLnJvYTAgBggrBgEF
BQcBBwEB/wQRMA8wDQQCAAEwBwMFB4Vu+AAwDQYJKoZIhvcNAQELBQADggEBADKn
D+PAlBRaDiBu9tMdO9HP3iN47wM3rGQLuvo+o8agFSqOiLt20WhQGRAMtj4eRWyw
9j3nWqEpkbczZFwXzFDJ1cTP/V1j6WolwGYdvh5Cge2VQ4yZhLB9T3gb3ly9RZlj
4/qhShEkvBPceO6Wmi9i7plxHexEY2+Ha6EEaUVG72GvZEkzBK454Vw9UqHda9PU
BTcH5CTbAbMIlfkM3YiZkUGodFJI6b7wK46qHqjoQxjsFRq7Qn5dCxTeOBjo2Ocg
34YC6LCqR2YemI4oTOV+bO3TG34Um/9bqgV1DL66v5I3OwXAQbJjXMokaojYpmNg
SXpPdh4aMbpxUp2ftec=
-----END CERTIFICATE-----
Generated at Tue Apr 7 13:25:05 2026 by rpki-client