
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/0ZSuRQ2ELGymPwJsPnCXubhPxnc.roa
File: 0ZSuRQ2ELGymPwJsPnCXubhPxnc.roa (raw, json)
Hash identifier: 1ckUY1zoubPZEBXFuLJKSdoUGooi8PSfchxlLfS13P8=
Subject key identifier: D1:94:AE:45:0D:84:2C:6C:A6:3F:02:6C:3E:70:97:B9:B8:4F:C6:77
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: 0188
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/0ZSuRQ2ELGymPwJsPnCXubhPxnc.roa
Signing time: Tue 31 Mar 2026 07:53:38 +0000
ROA not before: Tue 31 Mar 2026 07:53:38 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4694
IP address blocks: 210.158.192.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 392 (0x188)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Mar 31 07:53:38 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=D194AE450D842C6CA63F026C3E7097B9B84FC677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:42:e4:ba:e4:60:be:89:3d:96:f8:1a:3e:3b:
9c:aa:6b:be:1d:0a:7d:36:98:1f:47:8f:72:d4:00:
b9:d5:f7:95:ec:43:a8:99:65:66:17:a6:c6:a3:46:
de:0f:03:2c:e8:07:f8:77:19:d6:e4:6e:d1:1a:18:
29:a3:de:17:4d:f1:d9:33:7d:d7:41:fc:7e:b3:3a:
0d:1c:ed:72:9a:5e:97:96:2c:87:48:82:94:5e:61:
37:d4:95:a7:12:4d:3f:18:bb:e8:a6:6d:81:7d:e8:
4d:82:65:fb:eb:53:8f:3d:f5:e1:33:19:d4:77:ca:
22:8d:1c:1f:fb:0a:c6:35:12:10:aa:f4:26:a9:bb:
39:b7:5a:f2:56:4b:b6:ff:6e:54:d8:7f:34:51:e9:
19:26:45:70:41:d9:b7:52:54:a5:76:60:d0:15:da:
12:8e:b9:da:31:1c:a5:27:ee:c7:ef:f0:2a:96:f8:
3e:a8:91:eb:bd:42:d0:5f:60:e8:d7:b7:9b:78:10:
84:11:09:ca:74:c7:f5:88:33:99:6b:3b:b7:d5:65:
b3:1e:2c:73:e4:dd:f2:27:a5:82:f6:f5:ae:0f:02:
06:83:af:0d:16:23:a9:4f:9b:7b:5e:6e:2a:7c:14:
03:55:a1:93:d3:d6:10:7e:ca:a5:be:cc:a5:c6:d9:
70:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:94:AE:45:0D:84:2C:6C:A6:3F:02:6C:3E:70:97:B9:B8:4F:C6:77
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/0ZSuRQ2ELGymPwJsPnCXubhPxnc.roa
sbgp-ipAddrBlock: critical
IPv4:
210.158.192.0/21
Signature Algorithm: sha256WithRSAEncryption
bf:a1:d6:be:60:83:0b:98:ae:4f:da:28:91:15:53:30:e5:2b:
76:03:ab:6e:fa:09:55:1a:e5:9a:18:9d:49:d2:84:85:30:bd:
d5:f1:61:24:49:bf:bd:b3:c6:09:35:aa:88:f6:63:b1:20:33:
3b:3f:8c:83:8f:d1:4e:cc:93:0d:a6:96:50:10:95:90:7b:10:
81:45:89:a9:ea:13:b3:7a:f2:0c:d1:d1:3c:e4:a0:05:f5:65:
ad:51:e1:e0:ad:0f:ba:be:6c:62:98:33:2d:6e:9f:d1:28:42:
d5:95:94:5e:b4:3b:8b:08:17:3b:7b:70:5c:69:96:3a:52:e6:
c2:45:4b:5f:a8:3c:bd:93:f9:f1:6d:5b:64:ec:fd:9b:3e:93:
2e:c6:e3:ae:39:cc:45:99:de:d3:3e:54:f2:42:c9:d9:02:b3:
ed:32:d4:ff:de:c5:f2:2b:0b:7d:bc:01:b5:bf:9d:55:0d:c0:
15:d2:74:73:42:68:32:2b:68:45:9f:a1:cc:c1:f0:15:bf:c0:
54:fc:8c:e4:f4:ee:75:02:c8:51:2c:36:b3:96:fe:58:98:42:
b8:41:ac:eb:91:28:b9:72:80:36:5b:33:80:92:9f:67:75:28:
86:ea:4c:22:bc:cd:ee:bd:47:f9:a8:31:07:43:ab:80:be:72:
d9:f2:bb:93
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw
QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw
NzUzMzhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQxOTRBRTQ1MEQ4NDJD
NkNBNjNGMDI2QzNFNzA5N0I5Qjg0RkM2NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDtQuS65GC+iT2W+Bo+O5yqa74dCn02mB9Hj3LUALnV95XsQ6iZ
ZWYXpsajRt4PAyzoB/h3GdbkbtEaGCmj3hdN8dkzfddB/H6zOg0c7XKaXpeWLIdI
gpReYTfUlacSTT8Yu+imbYF96E2CZfvrU4899eEzGdR3yiKNHB/7CsY1EhCq9Cap
uzm3WvJWS7b/blTYfzRR6RkmRXBB2bdSVKV2YNAV2hKOudoxHKUn7sfv8CqW+D6o
keu9QtBfYOjXt5t4EIQRCcp0x/WIM5lrO7fVZbMeLHPk3fInpYL29a4PAgaDrw0W
I6lPm3tebip8FANVoZPT1hB+yqW+zKXG2XB7AgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQU0ZSuRQ2ELGymPwJsPnCXubhPxncwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP
Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1
bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMDA4My8wWlN1UlEyRUxHeW1Qd0pzUG5DWHViaFB4bmMucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0p7AMA0GCSqGSIb3DQEBCwUA
A4IBAQC/oda+YIMLmK5P2iiRFVMw5St2A6tu+glVGuWaGJ1J0oSFML3V8WEkSb+9
s8YJNaqI9mOxIDM7P4yDj9FOzJMNppZQEJWQexCBRYmp6hOzevIM0dE85KAF9WWt
UeHgrQ+6vmximDMtbp/RKELVlZRetDuLCBc7e3BcaZY6UubCRUtfqDy9k/nxbVtk
7P2bPpMuxuOuOcxFmd7TPlTyQsnZArPtMtT/3sXyKwt9vAG1v51VDcAV0nRzQmgy
K2hFn6HMwfAVv8BU/Izk9O51AshRLDazlv5YmEK4QazrkSi5coA2WzOAkp9ndSiG
6kwivM3uvUf5qDEHQ6uAvnLZ8ruT
-----END CERTIFICATE-----
Generated at Wed Apr 1 15:55:50 2026 by rpki-client