
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/mGBkCZKseyj6EgZvuHGSohjREGM.roa
File: mGBkCZKseyj6EgZvuHGSohjREGM.roa (raw, json)
Hash identifier: lab/1MSTXAbPwsrdMp8bmmaD6sPQOGBWWEuaA//M4fc=
Subject key identifier: 98:60:64:09:92:AC:7B:28:FA:12:06:6F:B8:71:92:A2:18:D1:10:63
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: 01E4
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/mGBkCZKseyj6EgZvuHGSohjREGM.roa
Signing time: Tue 31 Mar 2026 07:54:20 +0000
ROA not before: Tue 31 Mar 2026 07:54:20 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4694
IP address blocks: 202.33.104.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 484 (0x1e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Mar 31 07:54:20 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=9860640992AC7B28FA12066FB87192A218D11063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:37:58:d3:bd:b7:ae:84:17:96:ad:1f:26:99:
8b:4d:c7:a8:2c:8e:f9:c4:7a:d3:6d:66:c5:be:9c:
e0:2f:8e:e0:9a:c0:4b:fd:0e:ea:ef:82:7e:74:0e:
07:53:f1:1b:94:df:b1:85:4e:17:56:c5:c8:7c:dc:
b0:06:97:df:86:c1:fd:9e:e8:b3:fd:91:17:b2:2e:
0b:82:1f:76:34:a1:98:1c:6e:25:0a:a2:c2:de:6f:
13:c0:11:72:ac:60:48:59:09:a0:41:22:0e:19:a0:
7e:18:e0:1f:12:5a:7f:a9:3a:d9:c6:b9:88:7a:f1:
46:0c:17:7a:69:22:2e:11:97:fd:8b:98:16:c1:00:
15:95:9f:42:73:76:d1:e4:3b:0a:eb:14:fb:d0:53:
5a:05:50:59:e9:a3:7b:15:14:d1:04:5c:1f:b6:53:
7e:44:41:75:8c:24:7a:64:ad:64:17:85:bc:e5:6a:
66:71:be:e9:10:69:b8:e5:cf:14:3b:12:7b:b5:e0:
63:18:e1:9a:c5:b3:59:88:f8:11:37:45:32:8a:e7:
42:e8:f4:38:d9:99:ab:b6:02:a7:6a:4e:7b:ee:47:
d3:cb:04:07:ef:06:33:18:7b:5b:37:b4:90:77:5b:
fc:24:00:0d:56:f4:e0:39:f8:18:a5:9e:67:cb:58:
fe:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:60:64:09:92:AC:7B:28:FA:12:06:6F:B8:71:92:A2:18:D1:10:63
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/mGBkCZKseyj6EgZvuHGSohjREGM.roa
sbgp-ipAddrBlock: critical
IPv4:
202.33.104.0/21
Signature Algorithm: sha256WithRSAEncryption
54:69:c8:f5:20:72:00:28:ad:01:94:2a:3a:11:19:01:36:ec:
4d:e0:55:aa:19:eb:05:30:09:b2:f6:fe:22:03:61:44:62:32:
b1:fe:cc:04:56:41:88:b5:30:4b:69:a3:4b:75:fa:9b:6f:7b:
d4:56:6f:26:86:bb:68:71:23:54:e0:51:01:17:c5:21:e3:03:
83:82:b8:fe:b6:ac:e0:cc:df:f8:5f:7e:da:08:f9:00:f5:69:
e1:2f:ed:f6:35:d5:d5:5d:e1:5f:ec:05:46:4c:99:d3:7e:d2:
e9:b0:ee:a0:b8:f0:e0:cc:3d:5c:21:96:d1:45:de:06:d5:ef:
23:21:46:f8:08:4e:39:4c:57:e7:2d:c2:d6:98:02:ac:ad:c3:
9a:b2:f7:e6:e6:4f:38:62:10:50:a1:b3:4b:6c:8b:36:64:a7:
00:0f:12:bc:1f:c1:56:98:f1:c2:0f:1e:ac:b0:b9:62:14:55:
8c:2e:a8:a7:f8:14:17:6b:5c:e4:ad:b0:7a:55:ca:5f:db:c3:
9e:9f:dc:d4:a1:4f:7d:3d:aa:13:f2:17:45:ff:cc:bd:22:12:
e1:92:a8:ed:ef:c4:64:40:2b:aa:df:5c:1c:48:72:8c:64:5a:
21:7e:6c:df:2f:ef:2f:82:82:06:11:b4:0e:9d:18:99:b6:6e:
d0:17:0f:83
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICAeQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw
QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw
NzU0MjBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk4NjA2NDA5OTJBQzdC
MjhGQTEyMDY2RkI4NzE5MkEyMThEMTEwNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDjN1jTvbeuhBeWrR8mmYtNx6gsjvnEetNtZsW+nOAvjuCawEv9
Durvgn50DgdT8RuU37GFThdWxch83LAGl9+Gwf2e6LP9kReyLguCH3Y0oZgcbiUK
osLebxPAEXKsYEhZCaBBIg4ZoH4Y4B8SWn+pOtnGuYh68UYMF3ppIi4Rl/2LmBbB
ABWVn0JzdtHkOwrrFPvQU1oFUFnpo3sVFNEEXB+2U35EQXWMJHpkrWQXhbzlamZx
vukQabjlzxQ7Enu14GMY4ZrFs1mI+BE3RTKK50Lo9DjZmau2AqdqTnvuR9PLBAfv
BjMYe1s3tJB3W/wkAA1W9OA5+BilnmfLWP5vAgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQUmGBkCZKseyj6EgZvuHGSohjREGMwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP
Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1
bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMDA4My9tR0JrQ1pLc2V5ajZFZ1p2dUhHU29oalJFR00ucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDyiFoMA0GCSqGSIb3DQEBCwUA
A4IBAQBUacj1IHIAKK0BlCo6ERkBNuxN4FWqGesFMAmy9v4iA2FEYjKx/swEVkGI
tTBLaaNLdfqbb3vUVm8mhrtocSNU4FEBF8Uh4wODgrj+tqzgzN/4X37aCPkA9Wnh
L+32NdXVXeFf7AVGTJnTftLpsO6guPDgzD1cIZbRRd4G1e8jIUb4CE45TFfnLcLW
mAKsrcOasvfm5k84YhBQobNLbIs2ZKcADxK8H8FWmPHCDx6ssLliFFWMLqin+BQX
a1zkrbB6Vcpf28Oen9zUoU99PaoT8hdF/8y9IhLhkqjt78RkQCuq31wcSHKMZFoh
fmzfL+8vgoIGEbQOnRiZtm7QFw+D
-----END CERTIFICATE-----
Generated at Wed Apr 1 15:59:45 2026 by rpki-client