
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/653/VwoXl9Qgo7kr2BobCDFZJ6tbUZE.roa
File: VwoXl9Qgo7kr2BobCDFZJ6tbUZE.roa (raw, json)
Hash identifier: Jo4aK/70fo5bxwOG8hzSGswTHZbes9B6DyHm7/UjG0c=
Subject key identifier: 57:0A:17:97:D4:20:A3:B9:2B:D8:1A:1B:08:31:59:27:AB:5B:51:91
Certificate issuer: /CN=EE5C4F77377D7F5075C64BA4B57998BC79326C5E
Certificate serial: 37
Authority key identifier: EE:5C:4F:77:37:7D:7F:50:75:C6:4B:A4:B5:79:98:BC:79:32:6C:5E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7lxPdzd9f1B1xkuktXmYvHkybF4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/VwoXl9Qgo7kr2BobCDFZJ6tbUZE.roa
Signing time: Tue 31 Mar 2026 08:39:47 +0000
ROA not before: Tue 31 Mar 2026 08:39:47 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 17931
IP address blocks: 202.165.160.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/7lxPdzd9f1B1xkuktXmYvHkybF4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/7lxPdzd9f1B1xkuktXmYvHkybF4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7lxPdzd9f1B1xkuktXmYvHkybF4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE5C4F77377D7F5075C64BA4B57998BC79326C5E
Validity
Not Before: Mar 31 08:39:47 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=570A1797D420A3B92BD81A1B08315927AB5B5191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:32:6b:c2:0c:26:34:55:66:02:19:3c:2b:b3:
ac:f7:39:d2:1c:9c:a4:f9:72:44:13:24:e8:ac:5c:
d9:53:4d:26:72:b3:7a:94:89:1e:19:77:8d:cf:5a:
2b:4f:36:6e:86:69:d6:8f:56:64:59:88:08:4e:aa:
b6:54:b0:22:ed:39:0c:50:d9:53:7c:c7:a4:33:97:
fe:15:ab:7d:f3:88:ec:ea:d5:1a:3e:a8:e3:fd:94:
d4:28:5b:c4:78:20:2f:b1:47:9b:cf:e3:15:1c:df:
d8:b6:d8:4b:7a:a8:d2:9b:58:be:42:0d:d9:00:8f:
eb:9c:2f:da:d5:18:97:04:d0:fb:92:4c:8d:ec:43:
68:35:6a:ae:7a:34:29:62:8e:26:e5:34:b7:eb:70:
6d:97:03:9b:ce:d7:db:ed:05:b2:13:0c:72:e5:e3:
2f:fb:6b:89:a0:be:8b:fa:4f:d4:21:8a:45:89:86:
35:a7:62:b5:19:d5:ba:69:04:e1:15:0f:23:ef:32:
76:ba:7f:15:87:7f:c1:33:db:bc:6a:ac:4f:5e:f9:
ab:a8:9d:d7:e2:36:70:4c:55:43:7a:6b:0c:b7:01:
7d:1a:65:f1:62:55:bc:db:03:0d:f6:87:46:98:25:
c9:4c:d5:17:fc:2b:35:b0:29:f0:c0:f6:de:a6:60:
5c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0A:17:97:D4:20:A3:B9:2B:D8:1A:1B:08:31:59:27:AB:5B:51:91
X509v3 Authority Key Identifier:
keyid:EE:5C:4F:77:37:7D:7F:50:75:C6:4B:A4:B5:79:98:BC:79:32:6C:5E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/7lxPdzd9f1B1xkuktXmYvHkybF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7lxPdzd9f1B1xkuktXmYvHkybF4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/VwoXl9Qgo7kr2BobCDFZJ6tbUZE.roa
sbgp-ipAddrBlock: critical
IPv4:
202.165.160.0/20
Signature Algorithm: sha256WithRSAEncryption
cc:05:3e:8f:fa:b2:f8:a3:e6:3f:78:df:38:09:e8:28:b7:fd:
66:c0:fd:29:1f:cb:ac:0f:00:3b:43:41:1f:9c:4e:ce:79:e7:
f9:4e:f1:5b:e1:38:e5:a0:0d:8f:2f:1f:6b:ce:e7:e1:bf:0e:
83:38:22:2b:23:c4:87:6b:ed:a3:f6:11:59:24:42:a8:3e:42:
05:3f:96:3a:c2:0d:0e:25:aa:28:f9:ac:5f:4a:5a:9e:93:4a:
ec:09:74:ae:50:2e:8d:4f:8c:a7:2d:1a:ab:8b:f2:ef:d0:87:
18:dd:5e:2b:af:8e:59:1e:08:ba:25:ac:9d:69:cb:eb:99:c9:
7f:b6:a9:0c:e4:41:11:08:cd:76:88:29:fd:c8:25:c8:6c:46:
13:c8:6b:c9:70:8c:56:36:d3:b8:fd:60:de:7f:e1:b1:72:6b:
da:4f:5a:73:ea:5b:41:ab:a7:8a:69:91:7c:f6:64:fc:36:8b:
a6:d5:c0:ea:1c:ec:31:64:8b:03:3c:5c:e1:9f:0b:dc:97:2b:
d8:f9:ca:37:9e:7f:83:22:94:6e:20:c9:04:9a:37:f4:f0:5a:
cd:fb:59:a2:c4:70:6a:26:47:c0:8b:92:9e:1d:a9:cd:86:26:
ce:c1:51:1b:89:e4:30:9f:b5:71:f3:c3:7c:66:67:d6:95:e9:
f8:eb:6d:1a
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBNzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFRTVD
NEY3NzM3N0Q3RjUwNzVDNjRCQTRCNTc5OThCQzc5MzI2QzVFMB4XDTI2MDMzMTA4
Mzk0N1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNTcwQTE3OTdENDIwQTNC
OTJCRDgxQTFCMDgzMTU5MjdBQjVCNTE5MTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMcya8IMJjRVZgIZPCuzrPc50hycpPlyRBMk6Kxc2VNNJnKzepSJ
Hhl3jc9aK082boZp1o9WZFmICE6qtlSwIu05DFDZU3zHpDOX/hWrffOI7OrVGj6o
4/2U1ChbxHggL7FHm8/jFRzf2LbYS3qo0ptYvkIN2QCP65wv2tUYlwTQ+5JMjexD
aDVqrno0KWKOJuU0t+twbZcDm87X2+0FshMMcuXjL/triaC+i/pP1CGKRYmGNadi
tRnVumkE4RUPI+8ydrp/FYd/wTPbvGqsT175q6id1+I2cExVQ3prDLcBfRpl8WJV
vNsDDfaHRpglyUzVF/wrNbAp8MD23qZgXDcCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBRXCheX1CCjuSvYGhsIMVknq1tRkTAfBgNVHSMEGDAWgBTuXE93N31/UHXGS6S1
eZi8eTJsXjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjUzLzdseFBkemQ5ZjFCMXhrdWt0WG1ZdkhreWJGNC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzdseFBkemQ5ZjFCMXhrdWt0WG1Zdkhr
eWJGNC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC82NTMvVndvWGw5UWdvN2tyMkJvYkNERlpKNnRiVVpFLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMqloDANBgkqhkiG9w0BAQsFAAOCAQEA
zAU+j/qy+KPmP3jfOAnoKLf9ZsD9KR/LrA8AO0NBH5xOznnn+U7xW+E45aANjy8f
a87n4b8OgzgiKyPEh2vto/YRWSRCqD5CBT+WOsINDiWqKPmsX0panpNK7Al0rlAu
jU+Mpy0aq4vy79CHGN1eK6+OWR4IuiWsnWnL65nJf7apDORBEQjNdogp/cglyGxG
E8hryXCMVjbTuP1g3n/hsXJr2k9ac+pbQaunimmRfPZk/DaLptXA6hzsMWSLAzxc
4Z8L3Jcr2PnKN55/gyKUbiDJBJo39PBazftZosRwaiZHwIuSnh2pzYYmzsFRG4nk
MJ+1cfPDfGZn1pXp+OttGg==
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:40:11 2026 by rpki-client