
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/873/l8DOmYVkmyKo8wSpiarP-Xm4xjI.roa
File: l8DOmYVkmyKo8wSpiarP-Xm4xjI.roa (raw, json)
Hash identifier: 6mlq6ok7ZXML6uvFk0p/Sa0QoN60ra/LQBYKNHVsUdI=
Subject key identifier: 97:C0:CE:99:85:64:9B:22:A8:F3:04:A9:89:AA:CF:F9:79:B8:C6:32
Certificate issuer: /CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36
Certificate serial: 3C
Authority key identifier: 80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/l8DOmYVkmyKo8wSpiarP-Xm4xjI.roa
Signing time: Tue 31 Mar 2026 08:38:21 +0000
ROA not before: Tue 31 Mar 2026 08:38:21 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 23831
IP address blocks: 202.179.32.0/19 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36
Validity
Not Before: Mar 31 08:38:21 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=97C0CE9985649B22A8F304A989AACFF979B8C632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6a:a1:d9:c7:fd:ba:96:1d:15:48:10:76:5a:
8b:74:e6:20:fa:e6:a2:20:20:dc:9c:d1:fb:d4:79:
1c:c5:7a:30:2c:c3:27:bd:5b:79:69:b2:ad:54:99:
8a:24:59:cb:6f:6e:61:5d:60:ff:7f:e9:b6:24:32:
bd:b7:c3:bb:3c:fe:dc:f9:8f:c8:3e:7f:2b:92:92:
85:40:3e:23:ae:c6:12:f4:aa:44:ac:1d:8a:2d:26:
be:c4:a2:24:8c:1e:dd:86:47:a5:cd:c6:d4:87:cd:
2a:15:2a:dc:4d:dc:38:65:52:cd:aa:83:cc:70:96:
ff:1f:25:2e:34:d4:3b:b9:ee:36:33:bf:96:21:39:
12:76:fb:7c:4f:43:b9:47:8b:b2:90:3f:86:13:08:
38:cb:f2:be:52:ae:d2:1b:ef:74:84:45:8b:be:d4:
36:f6:ae:64:34:69:a6:c5:93:e7:92:3f:1d:47:7b:
38:57:67:8f:dc:2e:97:0b:11:07:19:e6:31:d5:59:
f5:ee:ae:02:f2:b9:0a:16:1f:0b:3e:64:98:09:1e:
53:6c:78:c9:9b:25:68:7c:43:cc:b3:9b:46:fc:99:
78:9e:81:c9:b2:d6:6c:7b:be:fc:ed:32:43:72:2a:
a1:96:f3:5f:27:92:9f:5c:29:a9:fd:47:23:b3:98:
a3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C0:CE:99:85:64:9B:22:A8:F3:04:A9:89:AA:CF:F9:79:B8:C6:32
X509v3 Authority Key Identifier:
keyid:80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/l8DOmYVkmyKo8wSpiarP-Xm4xjI.roa
sbgp-ipAddrBlock: critical
IPv4:
202.179.32.0/19
Signature Algorithm: sha256WithRSAEncryption
0f:b0:38:2f:5e:a6:fc:97:66:5b:bb:3a:be:e9:7c:01:12:d9:
e8:f3:5f:64:5c:6d:da:33:16:d7:af:ff:5c:d3:7a:3e:07:7e:
20:d2:2f:d0:27:01:13:01:78:bf:cd:88:d6:63:17:76:39:87:
02:ab:17:11:39:b1:33:8e:a7:76:19:60:4a:da:88:a8:19:bf:
bc:8f:14:ed:e0:43:5a:d7:07:b6:2c:89:96:cb:14:54:b7:9a:
25:34:68:1b:81:77:ef:2c:d7:06:7e:27:55:8a:e3:58:83:6e:
5b:01:25:84:56:5e:19:80:64:93:1f:ce:d7:2e:46:28:5c:ed:
37:1e:27:b5:fe:02:58:66:44:27:ff:5e:d6:78:ce:5c:f3:fe:
ae:52:a6:7f:37:be:e6:6b:88:06:26:e0:6e:08:a3:7c:31:e0:
2c:44:25:c6:07:a7:39:14:f0:d9:ba:25:63:be:4e:b1:c8:b3:
71:89:51:fd:38:91:e1:3e:01:61:9c:ca:34:7d:38:ea:7b:3b:
ad:3d:17:4e:5c:aa:5f:02:c1:e8:7b:03:ff:b9:74:ea:cc:8f:
6c:eb:63:53:5c:48:22:c8:1e:ef:f5:5b:ef:88:0a:98:33:24:
66:85:85:9d:e2:16:88:fd:3e:ca:36:85:d9:e8:f3:0e:f0:cc:
8c:78:d9:ae
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBPDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4MENB
Q0Y3MEE0QjZDMUI2RjYyNEVGNDM0ODQwNzI0MDZCOEQzRjM2MB4XDTI2MDMzMTA4
MzgyMVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoOTdDMENFOTk4NTY0OUIy
MkE4RjMwNEE5ODlBQUNGRjk3OUI4QzYzMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK9qodnH/bqWHRVIEHZai3TmIPrmoiAg3JzR+9R5HMV6MCzDJ71b
eWmyrVSZiiRZy29uYV1g/3/ptiQyvbfDuzz+3PmPyD5/K5KShUA+I67GEvSqRKwd
ii0mvsSiJIwe3YZHpc3G1IfNKhUq3E3cOGVSzaqDzHCW/x8lLjTUO7nuNjO/liE5
Enb7fE9DuUeLspA/hhMIOMvyvlKu0hvvdIRFi77UNvauZDRppsWT55I/HUd7OFdn
j9wulwsRBxnmMdVZ9e6uAvK5ChYfCz5kmAkeU2x4yZslaHxDzLObRvyZeJ6BybLW
bHu+/O0yQ3IqoZbzXyeSn1wpqf1HI7OYo1sCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBSXwM6ZhWSbIqjzBKmJqs/5ebjGMjAfBgNVHSMEGDAWgBSAys9wpLbBtvYk70NI
QHJAa40/NjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODczL2dNclBjS1Myd2JiMkpPOURTRUJ5UUd1TlB6WS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2dNclBjS1Myd2JiMkpPOURTRUJ5UUd1
TlB6WS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC84NzMvbDhET21ZVmtteUtvOHdTcGlhclAtWG00eGpJLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcqzIDANBgkqhkiG9w0BAQsFAAOCAQEA
D7A4L16m/JdmW7s6vul8ARLZ6PNfZFxt2jMW16//XNN6Pgd+INIv0CcBEwF4v82I
1mMXdjmHAqsXETmxM46ndhlgStqIqBm/vI8U7eBDWtcHtiyJlssUVLeaJTRoG4F3
7yzXBn4nVYrjWINuWwElhFZeGYBkkx/O1y5GKFztNx4ntf4CWGZEJ/9e1njOXPP+
rlKmfze+5muIBibgbgijfDHgLEQlxgenORTw2bolY75OscizcYlR/TiR4T4BYZzK
NH046ns7rT0XTlyqXwLB6HsD/7l06syPbOtjU1xIIsge7/Vb74gKmDMkZoWFneIW
iP0+yjaF2ejzDvDMjHjZrg==
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:20 2026 by rpki-client