
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/604/drYJRKKWZJ77NIeXbg6MnoixcY0.roa
File: drYJRKKWZJ77NIeXbg6MnoixcY0.roa (raw, json)
Hash identifier: 9hfRHFpOJfcLXohg67OI/65CUWH5iiIJFusRSlc1HZ4=
Subject key identifier: 76:B6:09:44:A2:96:64:9E:FB:34:87:97:6E:0E:8C:9E:88:B1:71:8D
Certificate issuer: /CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
Certificate serial: 47
Authority key identifier: 84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/drYJRKKWZJ77NIeXbg6MnoixcY0.roa
Signing time: Tue 31 Mar 2026 08:34:20 +0000
ROA not before: Tue 31 Mar 2026 08:34:20 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 17682
IP address blocks: 218.40.80.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71 (0x47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
Validity
Not Before: Mar 31 08:34:20 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=76B60944A296649EFB3487976E0E8C9E88B1718D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3a:5d:ee:95:33:90:62:ae:37:cd:6b:4f:15:
90:5a:93:13:48:4f:20:39:3a:de:a7:a6:4e:a6:04:
f0:69:b7:a9:2b:bd:b6:7f:91:ed:9b:a6:d2:bb:3b:
42:c0:9e:ce:60:cb:fb:95:1d:7b:7f:9e:cc:71:6f:
13:a2:f7:19:ea:cf:f6:a3:c3:f8:47:c6:12:71:ab:
9c:6c:97:65:79:63:9d:40:24:1f:12:fa:8b:7a:d3:
72:f4:20:1b:99:4e:2c:66:1b:a5:b9:c2:af:0e:92:
f2:59:56:f4:3e:9e:09:f8:6b:18:95:09:31:c8:45:
1a:bc:84:fb:a7:f3:48:a7:87:c2:07:cf:c4:7d:78:
0c:80:de:1f:d7:bd:1e:b8:83:40:ab:5f:da:db:04:
f5:d3:f7:d2:2e:e5:a1:68:ec:19:fd:ec:b9:78:2d:
77:9b:1a:e3:c3:0f:db:05:03:c8:77:e3:c0:b5:12:
a7:eb:ec:1d:97:91:ad:9a:c6:18:75:48:61:f7:5c:
a8:66:0a:d0:45:b8:20:eb:20:46:4a:db:86:76:a8:
b5:64:95:f1:a4:fd:0c:15:40:47:b6:3e:7e:af:42:
e3:1b:8a:06:ee:e1:2d:85:1c:83:0e:4e:30:1c:28:
a3:67:ab:0c:7e:67:61:48:b8:a0:ee:96:77:13:d3:
53:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B6:09:44:A2:96:64:9E:FB:34:87:97:6E:0E:8C:9E:88:B1:71:8D
X509v3 Authority Key Identifier:
keyid:84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/drYJRKKWZJ77NIeXbg6MnoixcY0.roa
sbgp-ipAddrBlock: critical
IPv4:
218.40.80.0/21
Signature Algorithm: sha256WithRSAEncryption
68:35:7d:aa:7b:8a:2a:18:73:3f:79:2a:39:95:ff:15:4a:cb:
0d:11:f6:e8:d6:9b:b8:40:a4:e8:53:ba:32:00:03:69:28:ec:
fc:6b:6a:7e:ab:91:af:9d:21:87:1d:b5:34:02:f4:24:98:77:
85:1f:43:f4:2e:a8:b2:2e:ca:26:d8:dd:4d:b6:b4:62:b9:c0:
04:25:54:ee:1b:0d:5d:15:40:d8:63:b0:1a:e7:78:1c:7a:39:
bf:50:8b:bd:f6:b5:18:1b:49:e7:b4:7f:9b:61:cd:cb:68:2c:
c9:c6:ee:b7:0d:61:b0:9c:c6:68:45:ad:36:d3:cc:57:ba:74:
48:68:8d:4e:59:5a:46:ce:70:cb:1b:c0:9e:8b:0e:4f:38:a8:
f6:82:04:28:75:8c:81:a1:7d:3e:60:b7:86:b0:34:fd:da:29:
67:95:da:0d:d1:27:0d:b5:3c:82:75:55:1a:1e:d8:9d:e3:8b:
96:12:f7:35:23:c3:9c:a2:77:1e:1f:66:5e:a1:b7:9f:b7:86:
65:b9:5f:3f:8e:1c:59:0f:c9:70:f6:cb:8a:8b:51:c5:36:2e:
17:df:57:dd:f7:09:4f:88:40:35:28:4c:ce:45:6e:73:3e:0e:
11:16:8c:94:4d:c7:be:8a:ee:e7:dd:3a:8e:cc:db:45:fb:23:
fc:51:2c:94
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBRzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4NEY5
NEYyNkFEMjNDQkE5MzY1NUFFMzREODA2QThDRTBBNEM1OTA3MB4XDTI2MDMzMTA4
MzQyMFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNzZCNjA5NDRBMjk2NjQ5
RUZCMzQ4Nzk3NkUwRThDOUU4OEIxNzE4RDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL06Xe6VM5BirjfNa08VkFqTE0hPIDk63qemTqYE8Gm3qSu9tn+R
7Zum0rs7QsCezmDL+5Ude3+ezHFvE6L3GerP9qPD+EfGEnGrnGyXZXljnUAkHxL6
i3rTcvQgG5lOLGYbpbnCrw6S8llW9D6eCfhrGJUJMchFGryE+6fzSKeHwgfPxH14
DIDeH9e9HriDQKtf2tsE9dP30i7loWjsGf3suXgtd5sa48MP2wUDyHfjwLUSp+vs
HZeRrZrGGHVIYfdcqGYK0EW4IOsgRkrbhnaotWSV8aT9DBVAR7Y+fq9C4xuKBu7h
LYUcgw5OMBwoo2erDH5nYUi4oO6WdxPTU/kCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBR2tglEopZknvs0h5duDoyeiLFxjTAfBgNVHSMEGDAWgBSE+U8mrSPLqTZVrjTY
BqjOCkxZBzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjA0L2hQbFBKcTBqeTZrMlZhNDAyQWFvemdwTVdRYy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2hQbFBKcTBqeTZrMlZhNDAyQWFvemdw
TVdRYy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC82MDQvZHJZSlJLS1daSjc3TkllWGJnNk1ub2l4Y1kwLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA9ooUDANBgkqhkiG9w0BAQsFAAOCAQEA
aDV9qnuKKhhzP3kqOZX/FUrLDRH26NabuECk6FO6MgADaSjs/GtqfquRr50hhx21
NAL0JJh3hR9D9C6osi7KJtjdTba0YrnABCVU7hsNXRVA2GOwGud4HHo5v1CLvfa1
GBtJ57R/m2HNy2gsycbutw1hsJzGaEWtNtPMV7p0SGiNTllaRs5wyxvAnosOTzio
9oIEKHWMgaF9PmC3hrA0/dopZ5XaDdEnDbU8gnVVGh7YneOLlhL3NSPDnKJ3Hh9m
XqG3n7eGZblfP44cWQ/JcPbLiotRxTYuF99X3fcJT4hANShMzkVucz4OERaMlE3H
voru5906jszbRfsj/FEslA==
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:08 2026 by rpki-client