
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/1nur_zRhz16BHsMF400Xb4yI7TQ.roa
File: 1nur_zRhz16BHsMF400Xb4yI7TQ.roa (raw, json)
Hash identifier: y95h2pxfQCl6Y2p52g3fSDpPRKV6+qHjXL6QhnpnBV8=
Subject key identifier: D6:7B:AB:FF:34:61:CF:5E:81:1E:C3:05:E3:4D:17:6F:8C:88:ED:34
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: 0152
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/1nur_zRhz16BHsMF400Xb4yI7TQ.roa
Signing time: Tue 31 Mar 2026 07:53:10 +0000
ROA not before: Tue 31 Mar 2026 07:53:10 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4694
IP address blocks: 202.218.64.0/18 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 338 (0x152)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Mar 31 07:53:10 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=D67BABFF3461CF5E811EC305E34D176F8C88ED34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bb:2c:30:75:4d:80:95:79:8e:47:2c:ec:38:
6a:f0:8a:4f:63:8a:46:7e:14:17:7c:a1:a1:2d:a2:
7a:50:ce:b4:6f:fb:b0:c2:ed:6a:b8:61:f5:80:05:
0c:16:a0:1d:d6:b3:4e:5c:a3:c5:72:cc:27:52:b4:
ad:83:92:f2:86:08:b8:03:ef:4a:ea:7d:2c:86:71:
ee:39:4e:39:6f:fd:1e:da:98:69:81:34:0a:38:d9:
c6:d7:ee:7d:79:4c:17:8e:41:0b:5f:ae:d8:a6:f2:
27:35:2b:83:88:fc:b1:8b:68:08:c0:ff:30:48:3e:
d8:21:10:b1:6d:fa:37:9c:e6:47:6c:db:e1:34:4d:
46:2a:e4:3b:ad:39:a1:57:b7:44:15:fa:68:17:1d:
ee:82:da:65:ca:f9:93:37:c1:33:c9:ab:3c:6a:13:
64:30:8d:1b:03:ea:7c:b6:12:4a:4a:e9:2c:f9:67:
26:e5:71:81:ac:09:af:7d:83:1f:91:28:03:59:75:
d3:46:a9:0d:3d:40:7e:be:41:fc:36:b3:21:44:19:
cf:19:b6:19:48:9f:92:ec:e7:02:eb:70:65:8a:c6:
d3:ae:e2:52:2e:d1:09:08:d7:2b:f6:2b:6a:03:ee:
c5:ff:3c:e4:24:55:e7:14:ce:66:b9:71:05:af:67:
86:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7B:AB:FF:34:61:CF:5E:81:1E:C3:05:E3:4D:17:6F:8C:88:ED:34
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/1nur_zRhz16BHsMF400Xb4yI7TQ.roa
sbgp-ipAddrBlock: critical
IPv4:
202.218.64.0/18
Signature Algorithm: sha256WithRSAEncryption
82:3c:cf:cb:d6:c4:a2:a1:74:0b:4e:9b:f9:1a:e7:b5:b0:57:
fa:b3:3e:9c:c7:52:33:31:c0:67:b6:54:23:89:7b:75:42:48:
7a:da:fc:52:35:45:6d:6f:71:59:10:79:33:f2:54:c9:9f:7a:
45:d2:d8:d5:af:a1:2d:4a:e3:91:dd:88:9d:f0:56:4a:19:ba:
11:33:86:99:c0:e5:e7:d9:8f:c4:f0:a7:00:bc:27:98:f2:28:
ae:f0:8e:c9:06:9a:6a:eb:e9:3d:89:e7:82:9e:29:7e:f4:53:
42:fa:2e:eb:24:fb:cc:3b:34:07:1e:95:48:65:38:bd:86:7a:
80:b8:14:a7:ea:a9:a5:b3:f8:e6:9e:97:63:d6:ba:74:6e:ec:
d2:56:7c:15:15:37:3e:1e:99:1b:29:de:8b:a4:60:16:9b:24:
9c:af:99:23:dd:98:e8:49:7d:75:58:91:9f:fa:3b:a1:20:a9:
ac:8f:25:62:14:b4:7a:6e:bc:d2:e0:c4:74:34:52:e9:c2:96:
7b:d7:df:7f:01:48:8a:4c:ac:53:af:2e:24:70:38:1c:7c:44:
eb:c0:49:86:db:88:b2:f3:12:e5:6c:b4:8c:ae:29:34:29:ed:
1f:27:0b:01:5e:97:cd:2c:3d:b8:b5:6c:58:27:f6:cf:ad:52:
56:91:c3:7b
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw
QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw
NzUzMTBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ2N0JBQkZGMzQ2MUNG
NUU4MTFFQzMwNUUzNEQxNzZGOEM4OEVEMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9uywwdU2AlXmORyzsOGrwik9jikZ+FBd8oaEtonpQzrRv+7DC
7Wq4YfWABQwWoB3Ws05co8VyzCdStK2DkvKGCLgD70rqfSyGce45Tjlv/R7amGmB
NAo42cbX7n15TBeOQQtfrtim8ic1K4OI/LGLaAjA/zBIPtghELFt+jec5kds2+E0
TUYq5DutOaFXt0QV+mgXHe6C2mXK+ZM3wTPJqzxqE2QwjRsD6ny2EkpK6Sz5Zybl
cYGsCa99gx+RKANZddNGqQ09QH6+Qfw2syFEGc8ZthlIn5Ls5wLrcGWKxtOu4lIu
0QkI1yv2K2oD7sX/POQkVecUzma5cQWvZ4ZdAgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQU1nur/zRhz16BHsMF400Xb4yI7TQwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP
Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1
bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMDA4My8xbnVyX3pSaHoxNkJIc01GNDAwWGI0eUk3VFEucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGytpAMA0GCSqGSIb3DQEBCwUA
A4IBAQCCPM/L1sSioXQLTpv5Gue1sFf6sz6cx1IzMcBntlQjiXt1Qkh62vxSNUVt
b3FZEHkz8lTJn3pF0tjVr6EtSuOR3Yid8FZKGboRM4aZwOXn2Y/E8KcAvCeY8iiu
8I7JBppq6+k9ieeCnil+9FNC+i7rJPvMOzQHHpVIZTi9hnqAuBSn6qmls/jmnpdj
1rp0buzSVnwVFTc+HpkbKd6LpGAWmyScr5kj3ZjoSX11WJGf+juhIKmsjyViFLR6
brzS4MR0NFLpwpZ7199/AUiKTKxTry4kcDgcfETrwEmG24iy8xLlbLSMrik0Ke0f
JwsBXpfNLD24tWxYJ/bPrVJWkcN7
-----END CERTIFICATE-----
Generated at Wed Apr 1 15:59:29 2026 by rpki-client