
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/948/f2QdO0jObHx_SXGMKB0UKyiwfmw.roa
File: f2QdO0jObHx_SXGMKB0UKyiwfmw.roa (raw, json)
Hash identifier: 2tAvtAaDT6l3Ejj7L0vRzkJCTURpvn2q6C9uQVhQhT0=
Subject key identifier: 7F:64:1D:3B:48:CE:6C:7C:7F:49:71:8C:28:1D:14:2B:28:B0:7E:6C
Certificate issuer: /CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C
Certificate serial: 5A
Authority key identifier: C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/f2QdO0jObHx_SXGMKB0UKyiwfmw.roa
Signing time: Tue 31 Mar 2026 08:24:09 +0000
ROA not before: Tue 31 Mar 2026 08:24:09 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 38628
IP address blocks: 115.126.136.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 14:08:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90 (0x5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C
Validity
Not Before: Mar 31 08:24:09 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=7F641D3B48CE6C7C7F49718C281D142B28B07E6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bc:03:4a:65:ba:b0:b3:a6:d5:33:ab:4d:61:
20:cc:e3:22:87:08:f9:15:c1:d9:07:75:9f:c2:1a:
da:c3:c7:db:7c:97:23:f5:7d:f6:59:f7:3c:ed:9d:
bc:ff:ea:e4:9a:89:04:28:7e:32:38:bb:ab:ba:08:
05:d9:3b:19:01:eb:20:a5:03:11:1b:3c:3c:71:22:
41:87:ff:61:3f:91:d1:30:28:da:72:bd:cc:e6:e2:
93:79:e4:f2:c6:eb:96:10:83:c2:2e:b3:e5:76:f1:
56:f5:b6:bc:d6:3f:73:a2:fc:4b:26:82:92:7d:0c:
1f:db:4d:85:a2:51:55:12:c2:a2:e4:4e:83:0e:97:
ea:5e:bd:64:39:04:bf:2f:6b:e8:c1:9d:c5:65:f6:
e7:28:27:7f:ef:46:4e:e0:b5:e4:a2:b3:d2:99:e3:
4b:50:e9:98:6b:30:92:91:80:01:44:00:ef:3b:e6:
f0:1b:0e:07:df:04:43:72:fd:0a:a4:c5:9d:c5:8c:
7a:ab:d9:1c:89:eb:91:fb:85:27:4d:ae:50:fc:d7:
82:8b:73:07:08:96:94:2d:5d:bf:f1:14:d6:0c:a6:
7d:d9:1f:cf:7b:63:64:b3:56:89:ec:c9:89:55:78:
2c:c9:dc:71:f5:f5:48:7b:e3:c2:2c:91:ea:54:48:
51:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:64:1D:3B:48:CE:6C:7C:7F:49:71:8C:28:1D:14:2B:28:B0:7E:6C
X509v3 Authority Key Identifier:
keyid:C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/f2QdO0jObHx_SXGMKB0UKyiwfmw.roa
sbgp-ipAddrBlock: critical
IPv4:
115.126.136.0/21
Signature Algorithm: sha256WithRSAEncryption
a0:79:00:61:b7:17:5b:66:9f:27:57:9c:7a:1a:f7:81:27:36:
94:4a:0a:25:21:d1:bd:f0:88:fd:ea:63:f5:48:a3:ae:c8:62:
85:93:eb:52:3b:cc:9a:ea:b0:bc:6c:a9:ad:02:c3:8a:41:7e:
2b:d1:e9:4e:a9:57:d1:f0:39:8e:33:31:1b:0d:18:c6:57:41:
4e:de:2b:e2:3a:51:50:1e:89:86:6c:bc:d5:5d:6d:35:3c:71:
99:5d:38:17:6a:55:ad:ff:ba:e4:53:e9:4e:69:dd:7f:1b:eb:
f8:78:af:98:93:2d:19:be:a1:13:d3:9a:20:17:2c:be:0f:92:
dd:04:89:ac:13:b6:1c:65:33:d9:37:9d:b4:13:6a:42:2b:a7:
eb:04:05:4d:61:73:ae:83:4a:ff:cd:96:e7:36:fd:44:e9:66:
14:94:cf:78:56:e4:f7:5b:c3:d3:ba:64:99:d7:a6:d2:32:00:
5d:7a:fd:3f:4f:9d:c7:05:ba:e4:47:ba:3d:4f:20:14:49:f3:
e1:e4:21:68:4a:42:00:50:9b:9e:ce:4e:1a:d1:c9:56:ad:42:
cc:fd:fe:d6:2e:b9:e9:af:99:3b:dd:4b:e1:e1:e1:1e:b8:ed:
39:24:45:f0:3a:ff:39:ab:e9:52:3c:63:48:50:dd:81:30:78:
d1:1f:0a:bb
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBWjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNEI5
NTM2QzRFQzc4NUI4ODEyRTUzQTIxOUQyQjA5QTdEQ0JDRTBDMB4XDTI2MDMzMTA4
MjQwOVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoN0Y2NDFEM0I0OENFNkM3
QzdGNDk3MThDMjgxRDE0MkIyOEIwN0U2QzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJm8A0plurCzptUzq01hIMzjIocI+RXB2Qd1n8Ia2sPH23yXI/V9
9ln3PO2dvP/q5JqJBCh+Mji7q7oIBdk7GQHrIKUDERs8PHEiQYf/YT+R0TAo2nK9
zObik3nk8sbrlhCDwi6z5XbxVvW2vNY/c6L8SyaCkn0MH9tNhaJRVRLCouROgw6X
6l69ZDkEvy9r6MGdxWX25ygnf+9GTuC15KKz0pnjS1DpmGswkpGAAUQA7zvm8BsO
B98EQ3L9CqTFncWMeqvZHInrkfuFJ02uUPzXgotzBwiWlC1dv/EU1gymfdkfz3tj
ZLNWiezJiVV4LMnccfX1SHvjwiyR6lRIUc0CAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBR/ZB07SM5sfH9JcYwoHRQrKLB+bDAfBgNVHSMEGDAWgBTEuVNsTseFuIEuU6IZ
0rCafcvODDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTQ4L3hMbFRiRTdIaGJpQkxsT2lHZEt3bW4zTHpndy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3hMbFRiRTdIaGJpQkxsT2lHZEt3bW4z
THpndy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85NDgvZjJRZE8wak9iSHhfU1hHTUtCMFVLeWl3Zm13LnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3N+iDANBgkqhkiG9w0BAQsFAAOCAQEA
oHkAYbcXW2afJ1ecehr3gSc2lEoKJSHRvfCI/epj9UijrshihZPrUjvMmuqwvGyp
rQLDikF+K9HpTqlX0fA5jjMxGw0YxldBTt4r4jpRUB6Jhmy81V1tNTxxmV04F2pV
rf+65FPpTmndfxvr+HivmJMtGb6hE9OaIBcsvg+S3QSJrBO2HGUz2TedtBNqQiun
6wQFTWFzroNK/82W5zb9ROlmFJTPeFbk91vD07pkmdem0jIAXXr9P0+dxwW65Ee6
PU8gFEnz4eQhaEpCAFCbns5OGtHJVq1CzP3+1i656a+ZO91L4eHhHrjtOSRF8Dr/
OavpUjxjSFDdgTB40R8Kuw==
-----END CERTIFICATE-----
Generated at Tue Apr 7 16:28:50 2026 by rpki-client