
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/942/zW8MCH6Z8A8ICcOT3VdBrWqyfm8.roa
File: zW8MCH6Z8A8ICcOT3VdBrWqyfm8.roa (raw, json)
Hash identifier: DW7y0LxIpiijxaiEQqiHjUkI/6Rw2eNxPDVIuvXypJQ=
Subject key identifier: CD:6F:0C:08:7E:99:F0:0F:08:09:C3:93:DD:57:41:AD:6A:B2:7E:6F
Certificate issuer: /CN=8A1E725176BFD9ABDA5CCB7B21A10B8F8DB7D578
Certificate serial: 5F
Authority key identifier: 8A:1E:72:51:76:BF:D9:AB:DA:5C:CB:7B:21:A1:0B:8F:8D:B7:D5:78
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/zW8MCH6Z8A8ICcOT3VdBrWqyfm8.roa
Signing time: Tue 31 Mar 2026 08:16:12 +0000
ROA not before: Tue 31 Mar 2026 08:16:12 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 37908
IP address blocks: 122.128.0.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95 (0x5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A1E725176BFD9ABDA5CCB7B21A10B8F8DB7D578
Validity
Not Before: Mar 31 08:16:12 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=CD6F0C087E99F00F0809C393DD5741AD6AB27E6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8d:05:a1:96:c3:43:4e:3c:22:2a:54:c6:87:
8f:38:56:2c:6d:78:c4:b6:74:aa:73:53:01:96:87:
4f:39:6f:c6:82:28:17:31:bf:58:78:f9:72:93:c6:
17:d0:51:a8:d7:18:0a:0b:ce:0e:bc:7c:01:30:05:
54:b0:b8:0d:e9:79:b9:1e:e4:60:88:cc:10:65:fb:
a2:dd:7c:4b:db:b7:83:24:3c:9b:40:7c:0b:53:4e:
ab:69:65:22:0d:3c:07:7b:4f:db:de:78:e6:bd:23:
96:de:15:83:68:c9:fa:e6:08:a3:d2:89:99:23:27:
69:2b:6a:5a:42:d4:ae:c2:13:57:f5:27:4a:6d:49:
46:48:8b:82:94:42:22:c5:ac:91:ca:c5:9e:d5:f0:
23:78:d2:28:f0:4b:d0:9f:31:9e:d2:c7:88:a7:29:
bd:e5:46:f9:54:72:cd:30:22:8c:15:cf:65:70:b2:
bf:52:f1:e8:8c:55:ef:13:2c:9f:d2:43:24:6a:65:
f8:48:07:be:65:f1:82:97:45:d5:10:5f:be:47:38:
02:49:4b:ee:ab:89:5f:f2:a3:37:b7:e7:1b:5f:b2:
ce:51:27:89:c4:37:e7:29:8f:3e:6b:2d:07:3b:86:
c3:8f:fb:fb:56:19:bc:7a:b7:5c:29:af:c7:28:8c:
a8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6F:0C:08:7E:99:F0:0F:08:09:C3:93:DD:57:41:AD:6A:B2:7E:6F
X509v3 Authority Key Identifier:
keyid:8A:1E:72:51:76:BF:D9:AB:DA:5C:CB:7B:21:A1:0B:8F:8D:B7:D5:78
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/zW8MCH6Z8A8ICcOT3VdBrWqyfm8.roa
sbgp-ipAddrBlock: critical
IPv4:
122.128.0.0/20
Signature Algorithm: sha256WithRSAEncryption
aa:58:09:77:2a:91:8c:9e:56:53:c5:5d:39:ec:78:34:cd:ef:
ec:3e:2b:19:87:91:0d:86:80:d2:af:23:e6:94:df:7a:2f:ca:
4a:56:43:93:3a:72:07:1a:be:98:39:a3:18:97:c1:7c:9e:e3:
cb:23:e9:dc:25:ae:4b:60:03:31:1c:f8:0d:56:07:1d:ce:5d:
86:4e:a6:fa:f7:c8:78:e2:86:2a:03:0e:19:1c:5a:ef:4d:f5:
56:d3:eb:91:fe:95:c0:a7:ed:cf:9d:61:90:19:ab:8e:30:67:
a9:ca:bd:81:6e:18:a5:5b:48:aa:db:31:fa:1d:15:35:70:af:
4a:40:63:22:4c:51:e7:37:83:58:f6:82:03:6a:af:4c:cc:e0:
24:bb:8b:e6:c8:2b:23:d7:45:4a:90:68:9a:1b:97:a1:12:67:
e8:19:9c:60:14:88:64:b8:77:06:2e:1f:ff:1d:68:5c:a4:e1:
c4:a4:65:23:b7:2f:26:53:a5:ea:45:08:6a:a4:9e:7e:c5:5c:
7a:4f:54:2c:1a:91:e2:7b:a5:36:1b:b0:e1:80:d6:73:ce:03:
a2:5f:b9:72:88:66:d5:0e:60:a0:a1:cd:0d:bd:98:ac:69:c5:
f4:06:94:f3:7e:38:b3:7c:65:c6:1f:c2:ad:3f:cb:9c:be:ad:
35:62:47:29
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBXzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4QTFF
NzI1MTc2QkZEOUFCREE1Q0NCN0IyMUExMEI4RjhEQjdENTc4MB4XDTI2MDMzMTA4
MTYxMloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQ0Q2RjBDMDg3RTk5RjAw
RjA4MDlDMzkzREQ1NzQxQUQ2QUIyN0U2RjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALyNBaGWw0NOPCIqVMaHjzhWLG14xLZ0qnNTAZaHTzlvxoIoFzG/
WHj5cpPGF9BRqNcYCgvODrx8ATAFVLC4Del5uR7kYIjMEGX7ot18S9u3gyQ8m0B8
C1NOq2llIg08B3tP29545r0jlt4Vg2jJ+uYIo9KJmSMnaStqWkLUrsITV/UnSm1J
RkiLgpRCIsWskcrFntXwI3jSKPBL0J8xntLHiKcpveVG+VRyzTAijBXPZXCyv1Lx
6IxV7xMsn9JDJGpl+EgHvmXxgpdF1RBfvkc4AklL7quJX/KjN7fnG1+yzlEnicQ3
5ymPPmstBzuGw4/7+1YZvHq3XCmvxyiMqKUCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBTNbwwIfpnwDwgJw5PdV0GtarJ+bzAfBgNVHSMEGDAWgBSKHnJRdr/Zq9pcy3sh
oQuPjbfVeDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTQyL2loNXlVWGFfMmF2YVhNdDdJYUVMajQyMzFYZy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2loNXlVWGFfMmF2YVhNdDdJYUVMajQy
MzFYZy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85NDIvelc4TUNINlo4QThJQ2NPVDNWZEJyV3F5Zm04LnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBHqAADANBgkqhkiG9w0BAQsFAAOCAQEA
qlgJdyqRjJ5WU8VdOex4NM3v7D4rGYeRDYaA0q8j5pTfei/KSlZDkzpyBxq+mDmj
GJfBfJ7jyyPp3CWuS2ADMRz4DVYHHc5dhk6m+vfIeOKGKgMOGRxa7031VtPrkf6V
wKftz51hkBmrjjBnqcq9gW4YpVtIqtsx+h0VNXCvSkBjIkxR5zeDWPaCA2qvTMzg
JLuL5sgrI9dFSpBomhuXoRJn6BmcYBSIZLh3Bi4f/x1oXKThxKRlI7cvJlOl6kUI
aqSefsVcek9ULBqR4nulNhuw4YDWc84Dol+5cohm1Q5goKHNDb2YrGnF9AaU8344
s3xlxh/CrT/LnL6tNWJHKQ==
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:40:09 2026 by rpki-client