
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/948/VqLvEJxk6Q__IbPOVbuCsAPnI0s.roa
File: VqLvEJxk6Q__IbPOVbuCsAPnI0s.roa (raw, json)
Hash identifier: xB4nGszz6ItRqzM5xB6oOYWZVwsNr6CMC9P3p7iopAQ=
Subject key identifier: 56:A2:EF:10:9C:64:E9:0F:FF:21:B3:CE:55:BB:82:B0:03:E7:23:4B
Certificate issuer: /CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C
Certificate serial: 5B
Authority key identifier: C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/VqLvEJxk6Q__IbPOVbuCsAPnI0s.roa
Signing time: Tue 31 Mar 2026 08:24:10 +0000
ROA not before: Tue 31 Mar 2026 08:24:10 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 38628
IP address blocks: 115.124.48.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 13:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91 (0x5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C
Validity
Not Before: Mar 31 08:24:10 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=56A2EF109C64E90FFF21B3CE55BB82B003E7234B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8f:46:3d:83:dd:6a:1d:14:c5:82:ea:b7:81:
b4:0b:78:f6:62:3e:c4:2d:82:99:14:0e:8f:a5:72:
71:56:a9:aa:d3:a9:96:e5:1a:83:0b:e7:46:ef:cd:
fe:99:b1:18:98:eb:8f:3c:72:41:0f:f5:c6:8d:2f:
93:1a:ef:5e:eb:64:95:f1:95:19:3d:9f:c3:87:14:
66:7f:11:96:94:7c:e8:f0:4a:a4:5f:6a:fa:bc:90:
29:4d:c1:d7:c1:8c:ec:cd:9d:fe:3c:b3:a4:45:83:
ca:db:95:b7:df:bf:af:5f:02:08:ec:8b:47:85:8c:
5a:ed:7d:f9:29:03:e6:d2:fd:b5:08:ec:b5:1f:c1:
75:7f:56:75:b0:15:8a:1f:7c:33:d8:24:0a:1a:41:
28:dc:f2:61:c9:76:a9:f1:ec:a6:f7:72:a3:34:37:
7f:b2:fe:5e:4a:42:88:d2:5c:cb:94:bc:df:2a:5a:
d3:5f:f9:c3:a1:31:13:e7:c6:be:46:0b:fd:8e:a4:
8f:5e:7f:f4:a0:15:28:9d:b1:86:56:9e:d4:24:c0:
f2:58:4c:0c:ea:4b:51:be:81:30:0a:18:84:9a:6a:
66:93:ca:24:1f:4a:10:97:00:0c:53:55:1d:3a:51:
21:46:a6:34:5e:de:9f:a6:a5:d2:78:a9:52:b0:8e:
13:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A2:EF:10:9C:64:E9:0F:FF:21:B3:CE:55:BB:82:B0:03:E7:23:4B
X509v3 Authority Key Identifier:
keyid:C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/VqLvEJxk6Q__IbPOVbuCsAPnI0s.roa
sbgp-ipAddrBlock: critical
IPv4:
115.124.48.0/20
Signature Algorithm: sha256WithRSAEncryption
9c:51:30:27:88:1d:0f:7f:f9:f9:08:34:87:66:3e:20:cd:72:
ab:e9:22:1e:c6:16:5f:e8:d8:fc:59:49:a4:fd:66:aa:72:d8:
90:b6:e5:4e:a8:51:bf:ea:72:48:d2:96:00:5e:28:5d:d4:8b:
c9:6e:1c:57:5e:30:08:43:8d:13:8e:50:21:98:49:c2:1c:c7:
db:87:28:c9:16:d9:8d:67:19:d0:b4:d7:8f:3b:ad:03:ea:79:
90:51:3b:8d:13:db:d1:bb:ab:bd:ed:79:c1:5e:10:ef:7d:c5:
02:e0:c4:1e:03:c0:b8:d7:ff:44:11:b5:24:ca:4d:a2:8b:08:
30:ed:fc:14:16:f6:ed:0c:8c:83:06:12:d9:31:53:36:40:04:
6f:00:3f:37:7b:bf:b2:e3:b5:08:4e:8c:91:c0:a8:ca:3a:35:
43:4d:a1:2c:2c:9e:9f:bf:c4:79:fb:62:db:6e:d3:a5:c8:62:
33:e2:d9:20:b9:f9:d3:9a:f7:11:38:d7:8e:0b:d0:c8:b1:ad:
03:f9:c5:53:47:7e:23:33:b7:8f:01:7e:ef:96:63:ed:36:9b:
bb:44:99:e6:b6:f0:d9:34:4a:a3:e5:c6:12:cf:ea:5b:8e:9f:
e6:b3:99:fa:e9:77:e3:26:57:b7:ac:14:17:ba:49:94:5c:39:
24:c8:55:53
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBWzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNEI5
NTM2QzRFQzc4NUI4ODEyRTUzQTIxOUQyQjA5QTdEQ0JDRTBDMB4XDTI2MDMzMTA4
MjQxMFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNTZBMkVGMTA5QzY0RTkw
RkZGMjFCM0NFNTVCQjgyQjAwM0U3MjM0QjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALePRj2D3WodFMWC6reBtAt49mI+xC2CmRQOj6VycVapqtOpluUa
gwvnRu/N/pmxGJjrjzxyQQ/1xo0vkxrvXutklfGVGT2fw4cUZn8RlpR86PBKpF9q
+ryQKU3B18GM7M2d/jyzpEWDytuVt9+/r18CCOyLR4WMWu19+SkD5tL9tQjstR/B
dX9WdbAVih98M9gkChpBKNzyYcl2qfHspvdyozQ3f7L+XkpCiNJcy5S83ypa01/5
w6ExE+fGvkYL/Y6kj15/9KAVKJ2xhlae1CTA8lhMDOpLUb6BMAoYhJpqZpPKJB9K
EJcADFNVHTpRIUamNF7en6al0nipUrCOE6kCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBRWou8QnGTpD/8hs85Vu4KwA+cjSzAfBgNVHSMEGDAWgBTEuVNsTseFuIEuU6IZ
0rCafcvODDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTQ4L3hMbFRiRTdIaGJpQkxsT2lHZEt3bW4zTHpndy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3hMbFRiRTdIaGJpQkxsT2lHZEt3bW4z
THpndy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85NDgvVnFMdkVKeGs2UV9fSWJQT1ZidUNzQVBuSTBzLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBHN8MDANBgkqhkiG9w0BAQsFAAOCAQEA
nFEwJ4gdD3/5+Qg0h2Y+IM1yq+kiHsYWX+jY/FlJpP1mqnLYkLblTqhRv+pySNKW
AF4oXdSLyW4cV14wCEONE45QIZhJwhzH24coyRbZjWcZ0LTXjzutA+p5kFE7jRPb
0burve15wV4Q733FAuDEHgPAuNf/RBG1JMpNoosIMO38FBb27QyMgwYS2TFTNkAE
bwA/N3u/suO1CE6MkcCoyjo1Q02hLCyen7/Eefti227TpchiM+LZILn505r3ETjX
jgvQyLGtA/nFU0d+IzO3jwF+75Zj7Tabu0SZ5rbw2TRKo+XGEs/qW46f5rOZ+ul3
4yZXt6wUF7pJlFw5JMhVUw==
-----END CERTIFICATE-----
Generated at Tue Apr 7 16:35:01 2026 by rpki-client