
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/dzk2sucLBqNY4cx0xim7oPOe7_k.roa
File: dzk2sucLBqNY4cx0xim7oPOe7_k.roa (raw, json)
Hash identifier: jeCoDXNVsXoXeyVYcKC4/3fFbUyV8EwxU9WAcNVkLdM=
Subject key identifier: 77:39:36:B2:E7:0B:06:A3:58:E1:CC:74:C6:29:BB:A0:F3:9E:EF:F9
Certificate issuer: /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial: 42
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/dzk2sucLBqNY4cx0xim7oPOe7_k.roa
Signing time: Wed 13 May 2026 01:52:25 +0000
ROA not before: Wed 13 May 2026 01:52:25 +0000
ROA not after: Thu 15 Apr 2027 01:30:02 +0000
asID: 2497
IP address blocks: 61.124.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 May 2026 14:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66 (0x42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Validity
Not Before: May 13 01:52:25 2026 GMT
Not After : Apr 15 01:30:02 2027 GMT
Subject: CN=773936B2E70B06A358E1CC74C629BBA0F39EEFF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ed:5d:fd:a4:60:1f:2f:b7:7a:fc:db:bb:bd:
53:20:b5:28:6d:65:3e:da:31:3c:5c:3f:5e:14:a4:
23:c7:28:fb:34:f5:7b:07:d1:88:d6:fe:a3:71:b1:
da:dc:c7:4d:01:76:34:f7:91:ba:04:eb:c7:cb:79:
f9:2c:4d:8d:b8:95:10:b7:ea:47:9b:e5:12:54:bc:
99:78:d7:73:48:49:14:b0:5d:6f:cf:5a:4f:4c:9d:
39:a2:52:43:36:a7:d5:47:44:aa:9b:a6:cb:51:ad:
a5:9d:eb:4a:07:e9:ef:84:17:1e:ef:18:15:17:bf:
e8:ca:a0:11:84:34:f7:98:e6:d5:64:6f:11:e0:28:
09:41:59:96:d5:2a:2f:05:5b:6d:c2:32:1d:09:9c:
36:fc:d4:83:db:35:df:e3:6e:3a:5d:ed:8a:0c:d8:
45:aa:e3:86:ed:d4:4b:14:b0:c1:de:c1:90:20:43:
23:a8:6b:df:ef:e6:5b:7c:71:ed:f1:85:4d:ff:7e:
06:91:f7:1d:66:37:fa:d8:3e:e1:0d:81:41:60:ce:
15:26:4c:64:02:c2:0a:92:ae:25:02:e9:a1:49:e6:
50:e7:85:f2:69:d2:36:97:f6:89:db:b2:6e:47:18:
8b:54:9f:f8:5a:fa:ce:71:dc:1d:fd:e0:04:9c:a3:
9d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:39:36:B2:E7:0B:06:A3:58:E1:CC:74:C6:29:BB:A0:F3:9E:EF:F9
X509v3 Authority Key Identifier:
keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/dzk2sucLBqNY4cx0xim7oPOe7_k.roa
sbgp-ipAddrBlock: critical
IPv4:
61.124.11.0/24
Signature Algorithm: sha256WithRSAEncryption
02:87:69:6b:1d:c3:c9:16:65:36:97:5f:da:54:0d:6f:23:37:
75:91:99:37:58:9d:7d:db:1d:b8:60:5b:12:ef:dc:b2:19:5c:
ad:cf:73:74:b4:72:73:ae:d6:aa:4d:52:8f:2e:9d:ff:b9:c4:
0e:a1:1e:06:60:e6:56:73:20:db:c5:ed:dc:fa:a6:85:51:a8:
30:ca:37:c7:dc:61:dc:c1:f5:f9:4e:99:c2:fc:f6:0d:f7:34:
7f:4d:41:06:e4:5b:13:09:ed:53:d6:37:c5:d8:f0:04:22:b8:
a4:97:22:59:b4:2c:10:8d:87:29:3f:0f:ad:f4:cd:45:da:e9:
c4:3e:c3:53:53:73:82:b8:23:a3:67:9b:fe:bb:51:7a:79:80:
c7:43:28:d5:1d:2e:be:f7:9a:9e:db:e9:44:09:b1:fc:e3:41:
44:d9:de:19:41:a5:81:f4:87:c0:67:b3:45:29:07:5a:1f:c6:
28:87:49:e2:26:6b:44:97:5c:a3:42:be:a7:cf:79:b3:cf:8f:
51:a6:46:1d:29:c8:c1:14:57:24:76:84:82:9a:b0:15:78:cb:
43:b2:55:ec:09:6a:f1:07:56:bc:e8:99:0e:7e:96:15:e3:9f:
25:56:11:9c:0b:07:bc:95:e6:db:5f:14:ec:61:b7:39:9f:2e:
cb:be:36:99
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBQjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3QzEx
NzkyM0EzQUU2RDE0MTYwRjUwMzExMTVBRUQ0NENCNEQ4MjdEMB4XDTI2MDUxMzAx
NTIyNVoXDTI3MDQxNTAxMzAwMlowMzExMC8GA1UEAxMoNzczOTM2QjJFNzBCMDZB
MzU4RTFDQzc0QzYyOUJCQTBGMzlFRUZGOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM3tXf2kYB8vt3r827u9UyC1KG1lPtoxPFw/XhSkI8co+zT1ewfR
iNb+o3Gx2tzHTQF2NPeRugTrx8t5+SxNjbiVELfqR5vlElS8mXjXc0hJFLBdb89a
T0ydOaJSQzan1UdEqpumy1GtpZ3rSgfp74QXHu8YFRe/6MqgEYQ095jm1WRvEeAo
CUFZltUqLwVbbcIyHQmcNvzUg9s13+NuOl3tigzYRarjhu3USxSwwd7BkCBDI6hr
3+/mW3xx7fGFTf9+BpH3HWY3+tg+4Q2BQWDOFSZMZALCCpKuJQLpoUnmUOeF8mnS
Npf2iduybkcYi1Sf+Fr6znHcHf3gBJyjna8CAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBR3OTay5wsGo1jhzHTGKbug857v+TAfBgNVHSMEGDAWgBR8EXkjo65tFBYPUDER
Wu1Ey02CfTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTkxL2ZCRjVJNk91YlJRV0QxQXhFVnJ0Uk10TmduMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2ZCRjVJNk91YlJRV0QxQXhFVnJ0Uk10
TmduMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8xOTEvZHprMnN1Y0xCcU5ZNGN4MHhpbTdvUE9lN19rLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD18CzANBgkqhkiG9w0BAQsFAAOCAQEA
Aodpax3DyRZlNpdf2lQNbyM3dZGZN1idfdsduGBbEu/cshlcrc9zdLRyc67Wqk1S
jy6d/7nEDqEeBmDmVnMg28Xt3PqmhVGoMMo3x9xh3MH1+U6Zwvz2Dfc0f01BBuRb
EwntU9Y3xdjwBCK4pJciWbQsEI2HKT8PrfTNRdrpxD7DU1Nzgrgjo2eb/rtRenmA
x0Mo1R0uvveantvpRAmx/ONBRNneGUGlgfSHwGezRSkHWh/GKIdJ4iZrRJdco0K+
p895s8+PUaZGHSnIwRRXJHaEgpqwFXjLQ7JV7Alq8QdWvOiZDn6WFeOfJVYRnAsH
vJXm218U7GG3OZ8uy742mQ==
-----END CERTIFICATE-----
Generated at Fri May 22 17:36:28 2026 by rpki-client