
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/AqPaJW2XtU8g1jDudKX5FvmkHtI.roa
File: AqPaJW2XtU8g1jDudKX5FvmkHtI.roa (raw, json)
Hash identifier: CSNtEmwDr4fAOhd4mSSalQtJiscj3sCOU9t9fvwh66U=
Subject key identifier: 02:A3:DA:25:6D:97:B5:4F:20:D6:30:EE:74:A5:F9:16:F9:A4:1E:D2
Certificate issuer: /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial: CC
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/AqPaJW2XtU8g1jDudKX5FvmkHtI.roa
Signing time: Fri 25 Sep 2026 05:52:12 +0000
ROA not before: Fri 25 Sep 2026 05:52:12 +0000
ROA not after: Wed 15 Sep 2027 01:30:02 +0000
asID: 2914
IP address blocks: 133.157.64.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 12:38:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204 (0xcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Validity
Not Before: Sep 25 05:52:12 2026 GMT
Not After : Sep 15 01:30:02 2027 GMT
Subject: CN=02A3DA256D97B54F20D630EE74A5F916F9A41ED2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:98:15:2e:22:21:bd:15:b5:2f:db:7e:6b:2c:
92:9e:69:85:c1:20:36:f9:5f:b2:3a:a1:3f:7a:1b:
00:25:85:ae:fa:99:77:57:5f:b3:04:f9:b1:23:ee:
e4:40:b9:fa:f2:1b:eb:a6:12:b3:68:a7:5b:1f:f9:
d5:5e:05:65:1e:cb:c8:22:b0:6c:32:7b:10:14:ad:
82:0e:0c:c2:a7:ca:27:8f:78:37:66:56:e2:45:ea:
5c:53:a7:02:48:22:73:78:f3:89:20:92:96:b8:18:
2e:a8:12:00:0e:fe:74:9e:82:58:b8:b0:ff:39:36:
b8:1f:7c:64:1f:42:30:dd:9c:04:97:d5:21:c6:8f:
c5:b2:9b:0c:c6:94:f2:22:69:90:02:46:be:09:f8:
23:03:67:55:b4:83:c9:24:d4:6c:1b:33:79:40:59:
67:72:32:c9:6b:e8:c9:0e:5a:a6:75:26:36:c8:ce:
30:37:65:27:28:fa:35:0d:a7:1f:a7:ff:3e:01:b0:
7d:85:d6:a8:10:eb:03:da:7a:25:e6:82:ec:6b:bb:
b0:65:f4:0b:66:c5:fb:ea:b5:ad:9a:17:41:55:68:
5d:99:98:b4:90:42:a1:12:34:7e:e5:0b:a9:64:ed:
79:b3:7e:f2:ba:c4:0c:d6:b0:cc:07:c3:78:6e:0d:
5e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A3:DA:25:6D:97:B5:4F:20:D6:30:EE:74:A5:F9:16:F9:A4:1E:D2
X509v3 Authority Key Identifier:
keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/AqPaJW2XtU8g1jDudKX5FvmkHtI.roa
sbgp-ipAddrBlock: critical
IPv4:
133.157.64.0/21
Signature Algorithm: sha256WithRSAEncryption
70:23:53:21:c7:8f:57:85:2a:62:f5:61:5c:bb:5c:2d:d4:07:
0c:d8:9f:a8:95:5b:bf:da:53:4d:b0:a0:c2:c0:b7:cd:4b:c0:
8e:6f:89:8d:f4:f9:c5:fe:85:23:7c:41:d4:f0:d9:19:ec:c6:
8d:df:5c:d1:9d:95:00:f1:0b:b8:b2:88:68:d2:74:03:a3:9a:
64:26:e4:53:d2:35:5d:a1:f4:be:e0:7a:e8:ab:0f:f2:16:c4:
f3:5c:20:7a:1e:5d:bf:5c:23:8d:f6:32:77:1b:94:8e:48:25:
14:be:ba:5d:69:87:e0:18:35:a2:24:e4:9a:53:89:d3:53:d9:
ad:cd:40:fd:17:e5:21:80:b7:ac:b6:7d:e1:fd:67:1a:91:cb:
6f:e8:9c:37:a8:50:97:88:d2:d5:2b:a6:ea:fb:db:94:15:d5:
52:e1:4d:94:dd:a8:36:ce:0b:47:54:5b:d0:e1:cc:d4:95:49:
9b:95:43:2a:fb:c5:38:d7:81:00:b5:fc:34:ab:95:a0:19:f5:
ea:b5:1e:75:36:53:26:3e:03:2b:8b:25:1f:20:b7:b1:fc:da:
c1:75:07:02:07:94:7a:87:bd:e9:f6:66:ef:bc:d8:85:55:5f:
bd:c2:87:0d:b0:ff:1e:4c:a0:c5:ef:d2:62:5a:d5:02:e3:35:
0d:49:e0:a7
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Mx
MTc5MjNBM0FFNkQxNDE2MEY1MDMxMTE1QUVENDRDQjREODI3RDAeFw0yNjA5MjUw
NTUyMTJaFw0yNzA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDAyQTNEQTI1NkQ5N0I1
NEYyMEQ2MzBFRTc0QTVGOTE2RjlBNDFFRDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDxmBUuIiG9FbUv235rLJKeaYXBIDb5X7I6oT96GwAlha76mXdX
X7ME+bEj7uRAufryG+umErNop1sf+dVeBWUey8gisGwyexAUrYIODMKnyiePeDdm
VuJF6lxTpwJIInN484kgkpa4GC6oEgAO/nSegli4sP85NrgffGQfQjDdnASX1SHG
j8WymwzGlPIiaZACRr4J+CMDZ1W0g8kk1GwbM3lAWWdyMslr6MkOWqZ1JjbIzjA3
ZSco+jUNpx+n/z4BsH2F1qgQ6wPaeiXmguxru7Bl9Atmxfvqta2aF0FVaF2ZmLSQ
QqESNH7lC6lk7XmzfvK6xAzWsMwHw3huDV4vAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUAqPaJW2XtU8g1jDudKX5FvmkHtIwHwYDVR0jBBgwFoAUfBF5I6OubRQWD1Ax
EVrtRMtNgn0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE5MS9mQkY1STZPdWJSUVdEMUF4RVZydFJNdE5nbjAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9mQkY1STZPdWJSUVdEMUF4RVZydFJN
dE5nbjAuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTkxL0FxUGFKVzJYdFU4ZzFqRHVkS1g1RnZta0h0SS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAOFnUAwDQYJKoZIhvcNAQELBQADggEB
AHAjUyHHj1eFKmL1YVy7XC3UBwzYn6iVW7/aU02woMLAt81LwI5viY30+cX+hSN8
QdTw2Rnsxo3fXNGdlQDxC7iyiGjSdAOjmmQm5FPSNV2h9L7geuirD/IWxPNcIHoe
Xb9cI432MncblI5IJRS+ul1ph+AYNaIk5JpTidNT2a3NQP0X5SGAt6y2feH9ZxqR
y2/onDeoUJeI0tUrpur725QV1VLhTZTdqDbOC0dUW9DhzNSVSZuVQyr7xTjXgQC1
/DSrlaAZ9eq1HnU2UyY+AyuLJR8gt7H82sF1BwIHlHqHven2Zu+82IVVX73Chw2w
/x5MoMXv0mJa1QLjNQ1J4Kc=
-----END CERTIFICATE-----
Generated at Tue Oct 6 15:43:48 2026 by rpki-client