
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Y56m0oLwkx1RqfbTL3tsjOjNZxs.roa
File: Y56m0oLwkx1RqfbTL3tsjOjNZxs.roa (raw, json)
Hash identifier: q2tSXNcwYM6bQTkCHc0p6laivamqWNFJSZFzoEs4NgM=
Subject key identifier: 63:9E:A6:D2:82:F0:93:1D:51:A9:F6:D3:2F:7B:6C:8C:E8:CD:67:1B
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: 01A5
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Y56m0oLwkx1RqfbTL3tsjOjNZxs.roa
Signing time: Tue 31 Mar 2026 07:53:50 +0000
ROA not before: Tue 31 Mar 2026 07:53:50 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4694
IP address blocks: 210.239.64.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 421 (0x1a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Mar 31 07:53:50 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=639EA6D282F0931D51A9F6D32F7B6C8CE8CD671B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:71:6e:ab:6c:d8:7f:4e:26:39:b0:b3:db:bc:
13:c9:38:c5:ed:24:c9:5d:1a:4c:18:d9:f9:b1:5b:
10:99:4c:63:4a:1a:a3:1a:58:83:01:74:31:15:8b:
68:fe:a5:70:77:b6:b5:b3:30:74:8d:76:cb:68:ee:
79:9f:5d:9f:16:c4:d4:51:c3:9f:34:9e:d8:9d:e6:
2c:a8:15:2b:bd:b7:58:c9:b2:01:c4:72:27:7b:b5:
9e:51:67:e9:1e:3e:16:a9:8f:bb:ce:df:dc:3d:67:
49:db:0f:e0:20:91:2c:ab:6f:7c:b2:a0:80:4c:1b:
3e:53:38:5e:b9:5c:7d:1a:f2:f6:ec:fd:cb:10:2d:
4a:47:73:86:f9:cd:67:55:08:57:bb:63:57:fc:5d:
a9:06:ab:7f:7d:2b:3c:9d:de:69:be:1b:f4:80:53:
01:f8:c0:e9:3f:97:66:20:86:39:c1:ac:cf:44:ef:
d7:6f:f8:64:df:a4:79:88:62:35:61:a7:40:c3:e3:
77:6c:cc:e6:d6:b3:03:cf:77:d8:ad:66:c1:59:cd:
77:07:0a:af:6b:75:c6:c0:7e:47:da:14:2d:d1:53:
a7:92:01:93:76:69:f1:77:ff:3b:0f:a0:b3:2b:60:
df:b0:73:f1:b2:9d:00:16:8f:9c:d1:33:7e:69:c0:
6a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9E:A6:D2:82:F0:93:1D:51:A9:F6:D3:2F:7B:6C:8C:E8:CD:67:1B
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Y56m0oLwkx1RqfbTL3tsjOjNZxs.roa
sbgp-ipAddrBlock: critical
IPv4:
210.239.64.0/21
Signature Algorithm: sha256WithRSAEncryption
c6:d9:4e:1e:48:05:20:18:ec:9e:69:99:13:6a:d4:4e:2a:41:
f9:3b:3b:34:6e:ee:7a:28:82:a5:ed:bc:99:00:eb:92:29:80:
10:be:3e:24:01:ef:ac:d1:0d:d7:38:29:70:67:c1:5b:30:d7:
bc:86:a0:04:df:ff:71:d0:37:91:a7:58:fe:c8:b9:89:19:87:
e2:c8:cc:7e:bb:dc:09:60:f7:1d:56:00:cd:c8:92:dc:57:eb:
c5:87:8a:01:9f:f7:a3:d5:90:7a:db:08:bb:d6:1b:75:93:a9:
6c:8f:54:21:ca:4b:5a:47:32:d2:0c:db:c3:5d:97:c0:47:76:
53:04:d2:e3:1a:e7:32:1b:6a:b1:2a:43:b8:bc:35:ca:02:9a:
a9:d0:59:7b:43:7d:85:76:a5:08:d8:7e:37:36:9f:f6:1a:1f:
40:3a:bc:43:ab:07:2c:0e:d2:9f:5b:86:b6:4a:b4:1f:14:0c:
46:b0:4c:94:fa:12:b6:41:89:99:1b:22:04:a7:4e:d8:f0:99:
5d:da:a2:99:55:e8:c5:d0:2f:93:ad:1a:cf:78:fd:4a:27:4b:
0f:f5:c0:00:0f:de:45:45:77:a6:65:f7:18:f2:32:b5:b9:9b:
6e:15:36:b3:1e:a5:52:fc:43:3c:d9:51:3d:72:23:b3:31:d8:
ed:b0:e1:8a
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw
QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw
NzUzNTBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDYzOUVBNkQyODJGMDkz
MUQ1MUE5RjZEMzJGN0I2QzhDRThDRDY3MUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvcW6rbNh/TiY5sLPbvBPJOMXtJMldGkwY2fmxWxCZTGNKGqMa
WIMBdDEVi2j+pXB3trWzMHSNdsto7nmfXZ8WxNRRw580ntid5iyoFSu9t1jJsgHE
cid7tZ5RZ+kePhapj7vO39w9Z0nbD+AgkSyrb3yyoIBMGz5TOF65XH0a8vbs/csQ
LUpHc4b5zWdVCFe7Y1f8XakGq399Kzyd3mm+G/SAUwH4wOk/l2YghjnBrM9E79dv
+GTfpHmIYjVhp0DD43dszObWswPPd9itZsFZzXcHCq9rdcbAfkfaFC3RU6eSAZN2
afF3/zsPoLMrYN+wc/GynQAWj5zRM35pwGqxAgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQUY56m0oLwkx1RqfbTL3tsjOjNZxswHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP
Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1
bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMDA4My9ZNTZtMG9Md2t4MVJxZmJUTDN0c2pPak5aeHMucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0u9AMA0GCSqGSIb3DQEBCwUA
A4IBAQDG2U4eSAUgGOyeaZkTatROKkH5Ozs0bu56KIKl7byZAOuSKYAQvj4kAe+s
0Q3XOClwZ8FbMNe8hqAE3/9x0DeRp1j+yLmJGYfiyMx+u9wJYPcdVgDNyJLcV+vF
h4oBn/ej1ZB62wi71ht1k6lsj1QhyktaRzLSDNvDXZfAR3ZTBNLjGucyG2qxKkO4
vDXKApqp0Fl7Q32FdqUI2H43Np/2Gh9AOrxDqwcsDtKfW4a2SrQfFAxGsEyU+hK2
QYmZGyIEp07Y8Jld2qKZVejF0C+TrRrPeP1KJ0sP9cAAD95FRXemZfcY8jK1uZtu
FTazHqVS/EM82VE9ciOzMdjtsOGK
-----END CERTIFICATE-----
Generated at Wed Apr 1 15:59:45 2026 by rpki-client