
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/GUKVIME_FsFdI0qeAgZWzaUCqCc.roa
File: GUKVIME_FsFdI0qeAgZWzaUCqCc.roa (raw, json)
Hash identifier: LkTGZAfYcnZTeGAfJmTCXUximwuG+r7OOuQGDb5qkkE=
Subject key identifier: 19:42:95:20:C1:3F:16:C1:5D:23:4A:9E:02:06:56:CD:A5:02:A8:27
Certificate issuer: /CN=CB8300B20659BB951060F60B1F4BC6091AF27639
Certificate serial: A1
Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/GUKVIME_FsFdI0qeAgZWzaUCqCc.roa
Signing time: Tue 31 Mar 2026 07:50:47 +0000
ROA not before: Tue 31 Mar 2026 07:50:47 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 18144
IP address blocks: 219.105.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161 (0xa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639
Validity
Not Before: Mar 31 07:50:47 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=19429520C13F16C15D234A9E020656CDA502A827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1d:09:cf:08:ac:8d:89:93:54:d6:70:45:f2:
45:86:70:ca:6d:32:9f:25:8f:1d:ba:0a:72:6d:c2:
a9:09:bd:fd:2f:1c:c4:ea:49:b3:35:da:b9:58:17:
70:14:87:b1:ff:c5:38:17:04:39:09:cc:8b:c1:cd:
96:7b:92:72:7a:2f:51:a7:cc:bd:40:2a:3b:9f:48:
29:05:a7:e2:07:e2:9e:de:44:8f:6d:ac:1b:0e:77:
1a:b6:5d:b2:5a:b8:18:c5:4a:65:e5:9d:2d:91:d6:
b6:c2:41:e4:7a:98:f3:53:88:91:4c:cf:72:50:d6:
02:2b:69:1d:2d:94:89:4e:91:e0:59:d3:7c:03:60:
bd:01:ba:81:c6:4a:c1:03:57:6a:2a:ee:82:98:40:
ef:86:28:f8:f6:88:ff:d5:15:61:8b:9a:bc:1c:b3:
c8:6c:03:59:89:47:85:64:ee:3b:38:2d:44:4a:2a:
eb:d1:54:1e:4b:94:80:ed:0a:09:98:6a:7d:2d:63:
be:20:a1:4f:c6:11:70:c1:f1:18:5a:de:f5:b1:e9:
25:6b:00:61:2d:83:42:e8:75:46:fa:72:26:2c:3c:
6b:1f:a7:db:78:53:96:b3:3f:d9:bd:fc:a2:30:cd:
49:7a:bc:cb:35:a2:dd:62:f7:a8:fe:4a:4e:c5:1e:
e0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:42:95:20:C1:3F:16:C1:5D:23:4A:9E:02:06:56:CD:A5:02:A8:27
X509v3 Authority Key Identifier:
keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/GUKVIME_FsFdI0qeAgZWzaUCqCc.roa
sbgp-ipAddrBlock: critical
IPv4:
219.105.48.0/20
Signature Algorithm: sha256WithRSAEncryption
10:d0:5f:50:63:4e:06:81:5d:33:38:66:2b:d7:c1:34:ea:9e:
e9:c4:69:e2:ab:9c:48:c3:60:82:4c:c2:4a:ef:b7:1e:a7:34:
0e:a9:b7:0f:fb:32:f2:e2:91:7f:a6:a5:72:0e:30:7c:c4:0b:
6b:89:ac:0b:58:5d:bc:f2:39:10:db:a3:2e:0e:37:25:ad:c6:
d0:5d:91:47:43:e1:91:96:e1:43:97:7c:be:75:b1:29:d5:fd:
c5:0d:b6:85:51:bc:05:c8:43:1e:0c:49:06:ac:a5:d2:56:9a:
17:c9:bd:7e:12:8e:5f:ff:63:4e:9a:25:ba:86:ff:2b:11:62:
0e:5d:3e:da:9b:46:2c:55:b0:72:9c:6f:9c:b7:87:0a:c8:e8:
29:2f:7d:79:49:78:91:bf:0c:c9:a3:35:18:59:5a:b9:ce:b8:
f1:73:89:ff:69:48:e1:35:70:78:f6:26:8d:d5:3b:59:5c:0c:
4e:63:69:ce:2e:e1:22:b3:1d:c5:dc:44:e4:7a:a7:e2:61:b1:
1e:81:6e:8e:e9:25:0c:af:79:7f:b2:59:97:18:8a:e4:b6:0f:
d5:0c:c4:ab:fa:3f:e2:57:49:5f:23:e4:6d:c1:5a:3f:15:64:
0a:38:2a:58:ba:d5:d2:72:d6:5c:c1:bf:80:1b:f7:f6:14:a5:
d1:d9:33:60
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0I4
MzAwQjIwNjU5QkI5NTEwNjBGNjBCMUY0QkM2MDkxQUYyNzYzOTAeFw0yNjAzMzEw
NzUwNDdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDE5NDI5NTIwQzEzRjE2
QzE1RDIzNEE5RTAyMDY1NkNEQTUwMkE4MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNHQnPCKyNiZNU1nBF8kWGcMptMp8ljx26CnJtwqkJvf0vHMTq
SbM12rlYF3AUh7H/xTgXBDkJzIvBzZZ7knJ6L1GnzL1AKjufSCkFp+IH4p7eRI9t
rBsOdxq2XbJauBjFSmXlnS2R1rbCQeR6mPNTiJFMz3JQ1gIraR0tlIlOkeBZ03wD
YL0BuoHGSsEDV2oq7oKYQO+GKPj2iP/VFWGLmrwcs8hsA1mJR4Vk7js4LURKKuvR
VB5LlIDtCgmYan0tY74goU/GEXDB8Rha3vWx6SVrAGEtg0LodUb6ciYsPGsfp9t4
U5azP9m9/KIwzUl6vMs1ot1i96j+Sk7FHuDZAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUGUKVIME/FsFdI0qeAgZWzaUCqCcwHwYDVR0jBBgwFoAUy4MAsgZZu5UQYPYL
H0vGCRrydjkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzc4My95NE1Bc2daWnU1VVFZUFlMSDB2R0NScnlkamsuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC95NE1Bc2daWnU1VVFZUFlMSDB2R0NS
cnlkamsuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNzgzL0dVS1ZJTUVfRnNGZEkwcWVBZ1pXemFVQ3FDYy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATbaTAwDQYJKoZIhvcNAQELBQADggEB
ABDQX1BjTgaBXTM4ZivXwTTqnunEaeKrnEjDYIJMwkrvtx6nNA6ptw/7MvLikX+m
pXIOMHzEC2uJrAtYXbzyORDboy4ONyWtxtBdkUdD4ZGW4UOXfL51sSnV/cUNtoVR
vAXIQx4MSQaspdJWmhfJvX4Sjl//Y06aJbqG/ysRYg5dPtqbRixVsHKcb5y3hwrI
6CkvfXlJeJG/DMmjNRhZWrnOuPFzif9pSOE1cHj2Jo3VO1lcDE5jac4u4SKzHcXc
ROR6p+JhsR6Bbo7pJQyveX+yWZcYiuS2D9UMxKv6P+JXSV8j5G3BWj8VZAo4Kli6
1dJy1lzBv4Ab9/YUpdHZM2A=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:06 2026 by rpki-client