
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/hluPnhQvrqRjppVOMMKBNUwhU8E.roa
File: hluPnhQvrqRjppVOMMKBNUwhU8E.roa (raw, json)
Hash identifier: wsG0x2a3B5SofjgGkAuX6BxBD4Bsu0kJKofjkyUQRUY=
Subject key identifier: 86:5B:8F:9E:14:2F:AE:A4:63:A6:95:4E:30:C2:81:35:4C:21:53:C1
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: 01AD
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/hluPnhQvrqRjppVOMMKBNUwhU8E.roa
Signing time: Tue 31 Mar 2026 07:53:53 +0000
ROA not before: Tue 31 Mar 2026 07:53:53 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4694
IP address blocks: 210.252.100.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 429 (0x1ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Mar 31 07:53:53 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=865B8F9E142FAEA463A6954E30C281354C2153C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1f:ae:48:29:dc:89:69:1c:e5:b1:45:ae:b6:
ee:cc:d8:f9:bc:55:79:a7:0a:fb:1a:51:63:c0:5e:
8e:1e:ba:e9:91:e9:dd:b4:e1:d7:05:e5:a6:2a:36:
0f:65:0c:44:36:db:33:ad:cb:c9:7d:a3:9a:00:98:
73:c5:fc:30:97:0f:32:73:ce:e1:f1:cb:7d:07:72:
ca:34:bd:8e:9f:e4:a4:5d:f3:d6:8b:aa:8e:83:15:
ab:19:4a:38:1c:f4:91:63:25:f4:d4:bb:e0:a0:2f:
b3:1a:a4:4b:db:44:17:d3:52:ca:ff:00:98:64:dc:
4b:03:c4:6f:51:b8:e5:f9:cc:00:a7:1e:08:44:a4:
64:82:0f:f6:52:fc:99:00:70:e3:0a:3f:7e:7c:c7:
88:9f:d0:7d:fd:c0:58:e4:19:75:c4:a7:8c:4a:6f:
f1:27:18:0d:81:3f:ea:33:46:a2:23:e2:8e:04:e9:
c4:25:3d:2d:70:c9:f8:de:83:9e:36:7b:1d:3d:d9:
c3:dc:a3:1d:1b:9c:72:36:85:54:d2:6b:7d:9e:22:
56:c3:cc:b2:95:39:3d:9c:2f:1a:3a:df:05:2e:4c:
82:58:fe:62:90:2b:32:56:9e:77:8d:93:6f:98:6d:
a8:c8:83:25:c4:06:18:41:1f:9f:2d:aa:c4:d3:34:
09:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5B:8F:9E:14:2F:AE:A4:63:A6:95:4E:30:C2:81:35:4C:21:53:C1
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/hluPnhQvrqRjppVOMMKBNUwhU8E.roa
sbgp-ipAddrBlock: critical
IPv4:
210.252.100.0/23
Signature Algorithm: sha256WithRSAEncryption
38:23:45:8c:85:ce:eb:0e:71:b0:79:8f:2d:d2:ec:15:a6:2a:
7d:2c:82:a4:0f:84:79:aa:41:bf:30:a1:ef:96:42:05:57:b9:
df:7c:8a:91:f3:31:cf:39:fe:a7:76:5d:cf:6b:9b:5f:39:54:
21:a4:e5:26:55:34:d5:01:2e:7c:3f:7e:ef:82:69:19:89:b3:
03:88:d5:ea:f0:de:cc:14:a0:05:75:8d:58:e0:46:79:35:fb:
b3:a8:2f:90:ce:f7:b8:04:23:0f:80:9f:a3:89:bf:53:9c:8e:
3b:44:ad:be:df:5f:d3:ad:2e:94:84:f0:33:6f:fe:79:45:d6:
b2:73:eb:56:f4:f7:34:3b:4f:85:ca:4e:60:cd:7e:bf:46:b0:
21:dc:42:c7:01:47:71:eb:46:f5:1c:99:a1:d6:88:02:96:50:
f6:ba:4d:ce:2a:75:dd:bf:29:5e:8c:61:0c:2b:fb:d1:ad:8d:
cb:60:9e:56:38:d3:a1:cc:4b:4c:1e:bc:d2:1b:22:2c:13:02:
a4:50:7f:92:03:7f:17:a7:8d:ff:71:fb:1e:45:e9:22:b1:5c:
fe:aa:df:96:d8:19:5a:bc:8b:64:89:b5:12:02:41:b3:52:bb:
1f:0e:43:9d:d4:65:ad:46:0c:8b:81:9d:e9:a8:86:80:3b:a9:
ec:01:47:2c
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw
QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw
NzUzNTNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg2NUI4RjlFMTQyRkFF
QTQ2M0E2OTU0RTMwQzI4MTM1NEMyMTUzQzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGH65IKdyJaRzlsUWutu7M2Pm8VXmnCvsaUWPAXo4euumR6d20
4dcF5aYqNg9lDEQ22zOty8l9o5oAmHPF/DCXDzJzzuHxy30Hcso0vY6f5KRd89aL
qo6DFasZSjgc9JFjJfTUu+CgL7MapEvbRBfTUsr/AJhk3EsDxG9RuOX5zACnHghE
pGSCD/ZS/JkAcOMKP358x4if0H39wFjkGXXEp4xKb/EnGA2BP+ozRqIj4o4E6cQl
PS1wyfjeg542ex092cPcox0bnHI2hVTSa32eIlbDzLKVOT2cLxo63wUuTIJY/mKQ
KzJWnneNk2+YbajIgyXEBhhBH58tqsTTNAnNAgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQUhluPnhQvrqRjppVOMMKBNUwhU8EwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP
Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1
bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMDA4My9obHVQbmhRdnJxUmpwcFZPTU1LQk5Vd2hVOEUucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0vxkMA0GCSqGSIb3DQEBCwUA
A4IBAQA4I0WMhc7rDnGweY8t0uwVpip9LIKkD4R5qkG/MKHvlkIFV7nffIqR8zHP
Of6ndl3Pa5tfOVQhpOUmVTTVAS58P37vgmkZibMDiNXq8N7MFKAFdY1Y4EZ5Nfuz
qC+Qzve4BCMPgJ+jib9TnI47RK2+31/TrS6UhPAzb/55Rdayc+tW9Pc0O0+Fyk5g
zX6/RrAh3ELHAUdx60b1HJmh1ogCllD2uk3OKnXdvylejGEMK/vRrY3LYJ5WONOh
zEtMHrzSGyIsEwKkUH+SA38Xp43/cfseRekisVz+qt+W2BlavItkibUSAkGzUrsf
DkOd1GWtRgyLgZ3pqIaAO6nsAUcs
-----END CERTIFICATE-----
Generated at Wed Apr 1 15:59:29 2026 by rpki-client