
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/5nvx2toJtEZIVTSkmANbiQeqpoU.roa
File: 5nvx2toJtEZIVTSkmANbiQeqpoU.roa (raw, json)
Hash identifier: LEDIBaLqqc8BRAHkIXaA+bmTcs1ENAWZ3P66swlHA24=
Subject key identifier: E6:7B:F1:DA:DA:09:B4:46:48:55:34:A4:98:03:5B:89:07:AA:A6:85
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: 0159
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/5nvx2toJtEZIVTSkmANbiQeqpoU.roa
Signing time: Tue 31 Mar 2026 07:53:14 +0000
ROA not before: Tue 31 Mar 2026 07:53:14 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4694
IP address blocks: 202.230.32.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 345 (0x159)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Mar 31 07:53:14 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=E67BF1DADA09B446485534A498035B8907AAA685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:05:08:eb:b4:12:d7:dc:7a:77:a7:73:90:0b:
a2:42:9f:fe:c3:af:65:c2:af:46:ea:bc:31:d7:45:
50:69:19:83:c7:85:8e:db:73:ba:ef:03:ac:bb:d8:
41:17:fd:a4:36:f2:3d:ae:cb:e8:50:21:79:c8:a1:
18:53:cc:f6:08:50:82:e1:13:98:49:50:06:04:58:
45:f6:9d:95:f2:3b:0d:15:f4:ed:38:0a:bd:9a:65:
0c:6e:89:bc:22:46:09:f5:2b:7e:54:a3:f9:12:88:
6e:13:7b:b7:d1:40:12:ef:63:39:12:9a:9f:49:10:
52:0c:1a:a0:94:82:40:9e:87:d0:68:60:13:2d:d5:
0b:c4:7f:21:62:d8:ca:88:c1:19:f2:d9:42:52:34:
98:2d:ce:d7:22:a2:3d:a9:d5:f6:a5:78:d7:74:07:
73:fa:a9:71:7f:fb:8e:e1:1c:3a:7f:03:97:51:33:
3f:53:88:64:84:36:79:cd:44:f1:5c:9f:0a:25:1a:
73:b4:cf:81:40:98:7f:f1:65:5a:6d:e6:51:8f:c3:
ca:d3:34:58:c8:dc:1b:20:dd:3f:3b:29:2a:e0:29:
e1:4b:30:59:f7:ad:a4:a5:5c:3d:d1:79:30:1c:61:
7c:0a:63:44:fe:41:4d:10:4d:b5:35:0b:b3:28:5b:
e8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:7B:F1:DA:DA:09:B4:46:48:55:34:A4:98:03:5B:89:07:AA:A6:85
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/5nvx2toJtEZIVTSkmANbiQeqpoU.roa
sbgp-ipAddrBlock: critical
IPv4:
202.230.32.0/20
Signature Algorithm: sha256WithRSAEncryption
28:ac:41:3e:59:14:08:2b:f5:76:88:89:1a:36:09:5d:f5:17:
db:55:3e:70:b1:40:cb:bc:c9:71:a1:8d:86:4e:8b:a5:eb:f4:
29:ca:76:73:8d:11:d5:b3:18:36:1c:88:cb:66:58:a5:f0:69:
a4:4b:36:67:06:32:0e:be:93:46:29:45:a6:3d:8b:0c:7e:fd:
02:55:ed:5d:57:d3:f4:87:a9:d0:c7:97:91:d8:b9:56:8b:c1:
da:67:29:a4:f4:cc:1b:cf:c8:76:de:4c:ec:4d:9d:00:70:bd:
fe:f3:8c:90:86:9b:fc:cb:52:a3:0f:a8:69:5f:f0:b6:a1:f2:
6d:77:1b:a7:e9:b6:43:52:1e:41:42:87:56:34:7c:52:5c:1f:
e2:93:97:e9:dd:38:2f:53:96:cb:13:23:d8:1c:df:a0:b8:06:
ab:22:e8:76:50:b9:03:ab:7a:f7:ee:a2:c1:8c:32:3e:fc:28:
5e:6f:82:36:47:3c:e8:d1:29:8d:57:32:30:90:5a:5c:4e:bb:
52:06:ae:fc:7c:38:1d:c3:bb:ee:db:bb:43:98:66:a9:b1:69:
18:41:19:1c:ff:46:8f:5f:a2:e9:f1:60:01:47:e3:e1:b5:81:
3f:ee:55:81:ee:bf:f4:cf:fb:3c:34:b6:90:7d:d5:c2:55:cb:
53:71:ae:18
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw
QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw
NzUzMTRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEU2N0JGMURBREEwOUI0
NDY0ODU1MzRBNDk4MDM1Qjg5MDdBQUE2ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvBQjrtBLX3Hp3p3OQC6JCn/7Dr2XCr0bqvDHXRVBpGYPHhY7b
c7rvA6y72EEX/aQ28j2uy+hQIXnIoRhTzPYIUILhE5hJUAYEWEX2nZXyOw0V9O04
Cr2aZQxuibwiRgn1K35Uo/kSiG4Te7fRQBLvYzkSmp9JEFIMGqCUgkCeh9BoYBMt
1QvEfyFi2MqIwRny2UJSNJgtztcioj2p1faleNd0B3P6qXF/+47hHDp/A5dRMz9T
iGSENnnNRPFcnwolGnO0z4FAmH/xZVpt5lGPw8rTNFjI3Bsg3T87KSrgKeFLMFn3
raSlXD3ReTAcYXwKY0T+QU0QTbU1C7MoW+gtAgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQU5nvx2toJtEZIVTSkmANbiQeqpoUwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP
Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1
bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMDA4My81bnZ4MnRvSnRFWklWVFNrbUFOYmlRZXFwb1Uucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEyuYgMA0GCSqGSIb3DQEBCwUA
A4IBAQAorEE+WRQIK/V2iIkaNgld9RfbVT5wsUDLvMlxoY2GToul6/QpynZzjRHV
sxg2HIjLZlil8GmkSzZnBjIOvpNGKUWmPYsMfv0CVe1dV9P0h6nQx5eR2LlWi8Ha
Zymk9Mwbz8h23kzsTZ0AcL3+84yQhpv8y1KjD6hpX/C2ofJtdxun6bZDUh5BQodW
NHxSXB/ik5fp3TgvU5bLEyPYHN+guAarIuh2ULkDq3r37qLBjDI+/Cheb4I2Rzzo
0SmNVzIwkFpcTrtSBq78fDgdw7vu27tDmGapsWkYQRkc/0aPX6Lp8WABR+PhtYE/
7lWB7r/0z/s8NLaQfdXCVctTca4Y
-----END CERTIFICATE-----
Generated at Wed Apr 1 15:59:44 2026 by rpki-client