
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/675/r5WlNYm78VuvDNjetyRT4YiyXr0.roa
File: r5WlNYm78VuvDNjetyRT4YiyXr0.roa (raw, json)
Hash identifier: BZbSayg4zdsIf/5RzuCftrcmI/hXZmxKAc9T5csZ7Ac=
Subject key identifier: AF:95:A5:35:89:BB:F1:5B:AF:0C:D8:DE:B7:24:53:E1:88:B2:5E:BD
Certificate issuer: /CN=041FC867F39C53644D0C5C50994B55111BD76CA3
Certificate serial: 24
Authority key identifier: 04:1F:C8:67:F3:9C:53:64:4D:0C:5C:50:99:4B:55:11:1B:D7:6C:A3
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BB_IZ_OcU2RNDFxQmUtVERvXbKM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/675/r5WlNYm78VuvDNjetyRT4YiyXr0.roa
Signing time: Tue 31 Mar 2026 08:44:34 +0000
ROA not before: Tue 31 Mar 2026 08:44:34 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 16509
IP address blocks: 218.223.15.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/675/BB_IZ_OcU2RNDFxQmUtVERvXbKM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/675/BB_IZ_OcU2RNDFxQmUtVERvXbKM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BB_IZ_OcU2RNDFxQmUtVERvXbKM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 11:22:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=041FC867F39C53644D0C5C50994B55111BD76CA3
Validity
Not Before: Mar 31 08:44:34 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=AF95A53589BBF15BAF0CD8DEB72453E188B25EBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3c:53:83:96:d6:0b:7b:2f:50:bf:97:19:a7:
17:af:f9:71:94:1a:1c:0e:16:db:2a:93:67:41:04:
0a:d0:e8:15:d7:cb:1d:2e:c9:91:61:5b:68:fa:87:
10:94:01:d5:92:5c:23:db:4a:15:ba:4e:eb:99:11:
cd:63:62:c6:4d:5c:dc:78:17:0f:b2:8c:80:f7:07:
0f:f2:79:50:f5:26:7e:72:93:1e:68:31:28:4a:bf:
92:7c:39:d0:8d:94:76:2d:3c:da:ce:05:5d:7b:bf:
ce:44:31:9c:bf:6f:53:d1:eb:8b:a7:fa:8e:75:2c:
8c:d2:d1:f2:63:ec:76:f7:75:00:82:25:4c:5b:ab:
c1:c7:1a:72:6d:d6:c7:ac:93:6b:ca:97:25:bf:30:
58:4c:82:72:06:b3:2b:61:a5:6b:89:35:b9:7c:2b:
7b:bc:56:ed:dd:6c:a7:4a:45:95:5b:44:0f:16:8d:
9d:f4:7f:be:ae:1f:67:24:b3:b3:07:e1:af:71:34:
f5:29:69:6c:59:af:61:3e:2d:70:29:25:e1:f4:2d:
38:da:82:9d:ba:95:62:91:f0:bb:12:af:35:69:fa:
a6:70:47:86:c2:b4:00:47:bc:19:0e:21:6c:51:d5:
cf:5f:09:99:ea:b7:bf:72:ab:ab:1c:f5:0f:29:eb:
3a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:95:A5:35:89:BB:F1:5B:AF:0C:D8:DE:B7:24:53:E1:88:B2:5E:BD
X509v3 Authority Key Identifier:
keyid:04:1F:C8:67:F3:9C:53:64:4D:0C:5C:50:99:4B:55:11:1B:D7:6C:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/675/BB_IZ_OcU2RNDFxQmUtVERvXbKM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BB_IZ_OcU2RNDFxQmUtVERvXbKM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/675/r5WlNYm78VuvDNjetyRT4YiyXr0.roa
sbgp-ipAddrBlock: critical
IPv4:
218.223.15.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:48:35:b4:45:8c:66:0b:79:ad:1d:15:51:71:4f:bf:18:37:
43:b9:5b:2a:29:3d:be:8e:95:22:89:fe:7b:84:7a:2f:c5:8b:
0f:60:23:43:7d:1a:b4:42:a6:94:99:dd:1b:d8:f1:99:92:31:
b6:77:bf:d2:00:9b:a4:db:17:fe:92:82:92:6f:11:f6:6b:06:
89:97:6a:37:e5:36:c5:05:bc:9c:4e:0b:27:4f:59:1a:88:aa:
e2:83:7d:4f:a3:18:ef:69:e2:03:94:32:45:e8:40:5c:37:fb:
3f:37:3e:17:92:c9:2b:6f:e1:46:75:ea:b0:b4:2b:e7:37:89:
21:cf:f4:fc:84:25:1f:89:10:69:cd:3e:5e:e7:11:f4:dc:f2:
56:b6:15:6f:31:78:30:91:79:54:51:e5:24:4c:5e:02:33:d0:
3a:ce:18:d2:91:b7:10:95:5e:fd:f0:5b:af:7b:30:7c:06:44:
80:27:f3:62:71:60:32:73:87:f2:fc:20:30:9a:75:9a:47:4a:
b3:84:b2:9d:d8:4c:d1:cf:c5:83:77:0a:fa:fb:81:d8:ef:2d:
04:13:4b:d2:bc:21:6f:7f:52:29:b8:46:b8:e6:26:cc:05:ee:
a9:9f:f7:7c:16:df:66:fd:fe:23:75:6e:55:bb:99:a9:1d:b2:
7b:66:11:f6
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBJDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwNDFG
Qzg2N0YzOUM1MzY0NEQwQzVDNTA5OTRCNTUxMTFCRDc2Q0EzMB4XDTI2MDMzMTA4
NDQzNFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQUY5NUE1MzU4OUJCRjE1
QkFGMENEOERFQjcyNDUzRTE4OEIyNUVCRDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMQ8U4OW1gt7L1C/lxmnF6/5cZQaHA4W2yqTZ0EECtDoFdfLHS7J
kWFbaPqHEJQB1ZJcI9tKFbpO65kRzWNixk1c3HgXD7KMgPcHD/J5UPUmfnKTHmgx
KEq/knw50I2Udi082s4FXXu/zkQxnL9vU9Hri6f6jnUsjNLR8mPsdvd1AIIlTFur
wccacm3Wx6yTa8qXJb8wWEyCcgazK2Gla4k1uXwre7xW7d1sp0pFlVtEDxaNnfR/
vq4fZySzswfhr3E09SlpbFmvYT4tcCkl4fQtONqCnbqVYpHwuxKvNWn6pnBHhsK0
AEe8GQ4hbFHVz18Jmeq3v3Krqxz1DynrOlcCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBSvlaU1ibvxW68M2N63JFPhiLJevTAfBgNVHSMEGDAWgBQEH8hn85xTZE0MXFCZ
S1URG9dsozAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjc1L0JCX0laX09jVTJSTkRGeFFtVXRWRVJ2WGJLTS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0JCX0laX09jVTJSTkRGeFFtVXRWRVJ2
WGJLTS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC82NzUvcjVXbE5ZbTc4VnV2RE5qZXR5UlQ0WWl5WHIwLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANrfDzANBgkqhkiG9w0BAQsFAAOCAQEA
P0g1tEWMZgt5rR0VUXFPvxg3Q7lbKik9vo6VIon+e4R6L8WLD2AjQ30atEKmlJnd
G9jxmZIxtne/0gCbpNsX/pKCkm8R9msGiZdqN+U2xQW8nE4LJ09ZGoiq4oN9T6MY
72niA5QyRehAXDf7Pzc+F5LJK2/hRnXqsLQr5zeJIc/0/IQlH4kQac0+XucR9Nzy
VrYVbzF4MJF5VFHlJExeAjPQOs4Y0pG3EJVe/fBbr3swfAZEgCfzYnFgMnOH8vwg
MJp1mkdKs4SyndhM0c/Fg3cK+vuB2O8tBBNL0rwhb39SKbhGuOYmzAXuqZ/3fBbf
Zv3+I3VuVbuZqR2ye2YR9g==
-----END CERTIFICATE-----
Generated at Tue Apr 7 13:25:11 2026 by rpki-client