
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/834/zv5whV57BZxNWrwfbS9-bRPT1F8.roa
File: zv5whV57BZxNWrwfbS9-bRPT1F8.roa (raw, json)
Hash identifier: sUKQcSVhRJCQQm6BEdZ4YNk3dW4j33bZHLfulpZpkDg=
Subject key identifier: CE:FE:70:85:5E:7B:05:9C:4D:5A:BC:1F:6D:2F:7E:6D:13:D3:D4:5F
Certificate issuer: /CN=DFBEE141DC34E893640343A7F312A702EF91A698
Certificate serial: 2F
Authority key identifier: DF:BE:E1:41:DC:34:E8:93:64:03:43:A7:F3:12:A7:02:EF:91:A6:98
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/377hQdw06JNkA0On8xKnAu-Rppg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/zv5whV57BZxNWrwfbS9-bRPT1F8.roa
Signing time: Tue 31 Mar 2026 08:37:30 +0000
ROA not before: Tue 31 Mar 2026 08:37:30 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 23630
IP address blocks: 133.32.112.0/20 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/377hQdw06JNkA0On8xKnAu-Rppg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/377hQdw06JNkA0On8xKnAu-Rppg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/377hQdw06JNkA0On8xKnAu-Rppg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFBEE141DC34E893640343A7F312A702EF91A698
Validity
Not Before: Mar 31 08:37:30 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=CEFE70855E7B059C4D5ABC1F6D2F7E6D13D3D45F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:45:2c:83:97:50:e0:44:72:a4:89:47:8f:2d:
3e:fa:4d:93:e5:4c:75:bb:8c:a6:49:7e:e9:04:04:
e4:21:10:56:30:6d:4f:d2:71:f8:72:15:d3:9a:54:
f2:0b:7c:a3:d3:6b:9f:18:3d:a0:04:a9:9b:63:bc:
39:76:c7:9c:38:f3:02:4c:ff:a3:d2:ee:85:9d:e8:
91:39:92:8c:b6:f1:b1:46:c6:da:45:ba:a4:78:df:
83:dc:38:3d:7a:47:01:54:fa:06:be:27:96:bb:88:
c9:1d:20:6a:9b:0b:4b:c4:db:9c:63:2e:50:ca:07:
a6:45:eb:9b:11:45:dd:ab:19:0e:26:ce:f2:2c:88:
72:62:88:95:05:d8:ef:46:e7:9f:b5:b0:45:e9:cd:
41:aa:9a:b5:92:7c:11:5c:95:fe:72:5e:15:57:31:
40:ed:d3:b5:48:4d:f9:8e:21:e9:f8:c5:2b:b2:a3:
9f:bb:9b:72:bc:01:57:e4:be:08:f4:56:33:a2:f1:
a2:85:e6:a0:c8:70:5c:b7:f2:a5:01:b2:5f:fe:9c:
84:8e:44:87:aa:84:58:3d:b7:83:38:40:63:2d:0d:
39:b8:67:90:19:db:16:47:12:9e:36:ad:0a:88:cb:
68:79:ba:65:4b:1d:6c:dd:88:df:e2:f8:73:1f:98:
f4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:FE:70:85:5E:7B:05:9C:4D:5A:BC:1F:6D:2F:7E:6D:13:D3:D4:5F
X509v3 Authority Key Identifier:
keyid:DF:BE:E1:41:DC:34:E8:93:64:03:43:A7:F3:12:A7:02:EF:91:A6:98
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/377hQdw06JNkA0On8xKnAu-Rppg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/377hQdw06JNkA0On8xKnAu-Rppg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/zv5whV57BZxNWrwfbS9-bRPT1F8.roa
sbgp-ipAddrBlock: critical
IPv4:
133.32.112.0/20
Signature Algorithm: sha256WithRSAEncryption
66:fb:a3:f7:58:f7:c1:d4:18:e7:91:81:2e:a6:75:48:65:3b:
0b:36:71:1a:dc:2b:0e:4d:e6:ae:b4:d7:19:63:09:fe:bc:85:
b8:f0:8a:8f:ea:38:7a:4b:ce:e1:72:37:a9:6b:73:10:10:9f:
39:0a:1c:50:5e:b6:1a:03:59:1d:a6:44:8e:d8:9e:8b:b3:1b:
cf:51:c3:6d:66:f7:a1:20:ad:bc:57:75:5d:37:92:7e:35:70:
19:dc:5d:59:e1:c4:3b:02:53:66:8c:35:d6:cc:3b:d0:1e:34:
ce:bb:fe:93:f4:2a:04:b0:1d:af:b7:52:d6:a3:0b:4a:1e:1e:
39:8c:93:81:d4:4b:bd:00:08:33:40:45:1b:a6:e7:99:0e:b9:
1b:fb:83:5f:2d:0f:86:b7:67:28:dc:23:11:62:c8:8a:6c:09:
7c:68:4a:2b:99:fb:14:4b:ad:11:48:f8:77:f5:20:de:0d:72:
7b:fc:b5:e6:b0:2a:70:86:ea:86:7e:12:36:9c:16:cd:8b:c2:
2e:5e:e9:81:62:fd:13:b0:cd:7b:97:51:b4:e1:34:8d:0b:6e:
b0:49:17:27:01:19:c4:3a:34:e3:05:8f:23:a9:4e:a3:8b:24:
e2:93:f7:c9:1e:9e:09:df:92:d3:a1:f0:1a:2d:9d:e5:e1:b4:
ce:88:fc:f2
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBLzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhERkJF
RTE0MURDMzRFODkzNjQwMzQzQTdGMzEyQTcwMkVGOTFBNjk4MB4XDTI2MDMzMTA4
MzczMFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQ0VGRTcwODU1RTdCMDU5
QzRENUFCQzFGNkQyRjdFNkQxM0QzRDQ1RjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMpFLIOXUOBEcqSJR48tPvpNk+VMdbuMpkl+6QQE5CEQVjBtT9Jx
+HIV05pU8gt8o9Nrnxg9oASpm2O8OXbHnDjzAkz/o9LuhZ3okTmSjLbxsUbG2kW6
pHjfg9w4PXpHAVT6Br4nlruIyR0gapsLS8TbnGMuUMoHpkXrmxFF3asZDibO8iyI
cmKIlQXY70bnn7WwRenNQaqatZJ8EVyV/nJeFVcxQO3TtUhN+Y4h6fjFK7Kjn7ub
crwBV+S+CPRWM6LxooXmoMhwXLfypQGyX/6chI5Eh6qEWD23gzhAYy0NObhnkBnb
FkcSnjatCojLaHm6ZUsdbN2I3+L4cx+Y9CMCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBTO/nCFXnsFnE1avB9tL35tE9PUXzAfBgNVHSMEGDAWgBTfvuFB3DTok2QDQ6fz
EqcC75GmmDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODM0LzM3N2hRZHcwNkpOa0EwT244eEtuQXUtUnBwZy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzM3N2hRZHcwNkpOa0EwT244eEtuQXUt
UnBwZy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC84MzQvenY1d2hWNTdCWnhOV3J3ZmJTOS1iUlBUMUY4LnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBIUgcDANBgkqhkiG9w0BAQsFAAOCAQEA
Zvuj91j3wdQY55GBLqZ1SGU7CzZxGtwrDk3mrrTXGWMJ/ryFuPCKj+o4ekvO4XI3
qWtzEBCfOQocUF62GgNZHaZEjtiei7Mbz1HDbWb3oSCtvFd1XTeSfjVwGdxdWeHE
OwJTZow11sw70B40zrv+k/QqBLAdr7dS1qMLSh4eOYyTgdRLvQAIM0BFG6bnmQ65
G/uDXy0PhrdnKNwjEWLIimwJfGhKK5n7FEutEUj4d/Ug3g1ye/y15rAqcIbqhn4S
NpwWzYvCLl7pgWL9E7DNe5dRtOE0jQtusEkXJwEZxDo04wWPI6lOo4sk4pP3yR6e
Cd+S06HwGi2d5eG0zoj88g==
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:46 2026 by rpki-client