
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/604/2soR4C9kO6pcWJGHLiexcGMMKWg.roa
File: 2soR4C9kO6pcWJGHLiexcGMMKWg.roa (raw, json)
Hash identifier: MCI4yOR23eZg9fUaLK/8aUbPah+DTexEg402WToQSeY=
Subject key identifier: DA:CA:11:E0:2F:64:3B:AA:5C:58:91:87:2E:27:B1:70:63:0C:29:68
Certificate issuer: /CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
Certificate serial: 4C
Authority key identifier: 84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/2soR4C9kO6pcWJGHLiexcGMMKWg.roa
Signing time: Tue 31 Mar 2026 08:34:22 +0000
ROA not before: Tue 31 Mar 2026 08:34:22 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 17682
IP address blocks: 119.47.16.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76 (0x4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
Validity
Not Before: Mar 31 08:34:22 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=DACA11E02F643BAA5C5891872E27B170630C2968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:87:f9:24:54:f4:45:b5:2a:95:4d:33:96:c5:
4a:ee:c2:a8:3e:9b:71:c0:8c:0b:2b:d2:45:62:8d:
5d:1d:37:53:7f:35:c4:87:ad:71:d5:f2:44:ad:9a:
93:13:dc:3f:2d:c7:32:f8:0b:d4:c6:dc:cb:b2:26:
0b:db:90:ac:3a:68:03:71:4b:34:05:ae:a7:50:9c:
be:c7:d4:94:13:87:2b:13:1d:7c:db:79:31:fa:07:
94:d2:05:32:01:8c:0f:0c:91:97:35:67:ba:74:3f:
95:25:9b:5e:c3:f7:a0:54:25:00:ee:3d:1f:7c:ee:
2e:57:a4:ee:6b:1c:9e:2b:c1:d7:da:d3:ce:25:25:
70:93:d3:2a:12:72:5b:b0:8c:92:fb:8a:8a:70:af:
73:ce:a5:18:2b:49:04:a9:ec:83:cf:25:70:3b:28:
d4:66:39:71:fd:b6:1e:0c:e5:04:6d:98:5b:5e:56:
7f:8a:15:b5:44:1a:fc:9d:f9:cb:9c:aa:c0:4c:31:
86:36:b9:a7:4b:bb:81:0b:70:cf:68:3b:0f:8d:55:
99:13:f2:e3:d7:55:a3:4f:60:2e:33:5e:e8:07:dc:
9d:ac:91:0a:eb:29:51:fa:cd:5d:b1:64:8a:b5:6e:
0d:fd:1b:ff:57:93:c1:9f:8b:27:58:bb:1d:d3:31:
55:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CA:11:E0:2F:64:3B:AA:5C:58:91:87:2E:27:B1:70:63:0C:29:68
X509v3 Authority Key Identifier:
keyid:84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/2soR4C9kO6pcWJGHLiexcGMMKWg.roa
sbgp-ipAddrBlock: critical
IPv4:
119.47.16.0/20
Signature Algorithm: sha256WithRSAEncryption
68:03:97:1f:fa:ee:d2:be:55:f7:90:54:e7:15:28:53:72:03:
b0:40:75:b8:3c:f4:cb:af:13:f2:64:76:80:03:69:6b:ed:4a:
87:32:62:b0:b0:da:81:5c:6b:f4:4e:33:8d:81:d7:c4:51:d3:
be:58:f5:12:c1:64:dc:60:8c:61:9f:b8:6d:6d:fa:31:4d:68:
ec:e5:41:84:19:fa:00:73:dc:11:bd:5b:1f:99:d0:8f:7c:ab:
87:d7:ec:ac:68:ba:73:50:58:15:23:21:07:d5:74:9e:da:01:
67:94:1e:d8:67:77:a2:ad:ec:7f:77:0c:a0:2a:90:8f:3e:19:
57:eb:af:be:8b:b2:a1:c3:db:2d:f0:81:32:2d:2e:63:8f:b4:
0f:a1:af:5d:01:9c:14:7f:70:5e:62:14:4b:00:61:bd:24:a0:
00:2f:88:c6:5c:e9:2b:67:dc:57:fd:51:4c:35:da:0d:ad:1c:
e6:55:f9:a8:8b:f2:82:cc:5a:3b:2d:4a:46:9b:66:41:fa:2c:
6d:77:9a:4a:1b:f2:65:36:6a:99:95:6a:9f:de:86:eb:69:4a:
65:c5:6c:dd:b0:0d:84:79:e6:33:44:ff:b5:d7:15:36:e4:d8:
ba:54:66:30:a9:74:f2:18:4d:c1:38:e4:e9:84:0e:66:90:c2:
0a:6f:22:94
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBTDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4NEY5
NEYyNkFEMjNDQkE5MzY1NUFFMzREODA2QThDRTBBNEM1OTA3MB4XDTI2MDMzMTA4
MzQyMloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoREFDQTExRTAyRjY0M0JB
QTVDNTg5MTg3MkUyN0IxNzA2MzBDMjk2ODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKeH+SRU9EW1KpVNM5bFSu7CqD6bccCMCyvSRWKNXR03U381xIet
cdXyRK2akxPcPy3HMvgL1Mbcy7ImC9uQrDpoA3FLNAWup1CcvsfUlBOHKxMdfNt5
MfoHlNIFMgGMDwyRlzVnunQ/lSWbXsP3oFQlAO49H3zuLlek7mscnivB19rTziUl
cJPTKhJyW7CMkvuKinCvc86lGCtJBKnsg88lcDso1GY5cf22HgzlBG2YW15Wf4oV
tUQa/J35y5yqwEwxhja5p0u7gQtwz2g7D41VmRPy49dVo09gLjNe6AfcnayRCusp
UfrNXbFkirVuDf0b/1eTwZ+LJ1i7HdMxVRUCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBTayhHgL2Q7qlxYkYcuJ7FwYwwpaDAfBgNVHSMEGDAWgBSE+U8mrSPLqTZVrjTY
BqjOCkxZBzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjA0L2hQbFBKcTBqeTZrMlZhNDAyQWFvemdwTVdRYy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2hQbFBKcTBqeTZrMlZhNDAyQWFvemdw
TVdRYy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC82MDQvMnNvUjRDOWtPNnBjV0pHSExpZXhjR01NS1dnLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBHcvEDANBgkqhkiG9w0BAQsFAAOCAQEA
aAOXH/ru0r5V95BU5xUoU3IDsEB1uDz0y68T8mR2gANpa+1KhzJisLDagVxr9E4z
jYHXxFHTvlj1EsFk3GCMYZ+4bW36MU1o7OVBhBn6AHPcEb1bH5nQj3yrh9fsrGi6
c1BYFSMhB9V0ntoBZ5Qe2Gd3oq3sf3cMoCqQjz4ZV+uvvouyocPbLfCBMi0uY4+0
D6GvXQGcFH9wXmIUSwBhvSSgAC+IxlzpK2fcV/1RTDXaDa0c5lX5qIvygsxaOy1K
RptmQfosbXeaShvyZTZqmZVqn96G62lKZcVs3bANhHnmM0T/tdcVNuTYulRmMKl0
8hhNwTjk6YQOZpDCCm8ilA==
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:17 2026 by rpki-client