
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/vNK813SS1fpdVZY1L1p2vFsDvs0.roa
File: vNK813SS1fpdVZY1L1p2vFsDvs0.roa (raw, json)
Hash identifier: JQnzAJMdnw4x3ZoDAK+SDUOMA8MHbaeN9Bj1Jlmxq7I=
Subject key identifier: BC:D2:BC:D7:74:92:D5:FA:5D:55:96:35:2F:5A:76:BC:5B:03:BE:CD
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: 0183
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/vNK813SS1fpdVZY1L1p2vFsDvs0.roa
Signing time: Tue 31 Mar 2026 07:53:36 +0000
ROA not before: Tue 31 Mar 2026 07:53:36 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4694
IP address blocks: 210.152.32.0/19 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 387 (0x183)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Mar 31 07:53:36 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=BCD2BCD77492D5FA5D5596352F5A76BC5B03BECD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0b:f5:a4:e5:5d:9b:bf:95:0a:10:47:ff:4c:
51:86:e1:6d:a0:6a:ff:f5:f4:a1:00:87:46:b7:cd:
27:2b:1f:54:4a:2b:65:c4:f6:ec:05:ee:e3:dd:d6:
68:72:b6:e7:48:6a:d4:c2:41:d6:d8:db:31:d4:01:
7f:ba:e9:f3:7c:54:07:f9:39:4d:b5:2d:67:21:16:
12:e1:9c:3b:cd:52:e3:9f:5c:dc:64:49:d7:97:29:
42:e1:94:af:17:1c:43:d0:57:cd:3b:ff:5a:8c:7f:
4b:2e:53:38:49:71:d2:12:67:18:af:ec:74:a7:f3:
9f:ac:0f:df:fa:f1:cf:b9:4e:c1:c1:60:7c:99:67:
4c:0d:7f:a2:61:76:65:21:d8:d9:76:86:5b:85:1b:
89:3e:66:c0:fd:55:61:2d:5c:24:c8:3b:fd:f1:55:
ac:be:40:5b:23:ae:93:9e:87:d2:3e:fb:3e:5d:4e:
fb:06:69:c1:1d:1f:90:97:b5:44:be:30:fa:b0:32:
20:4e:75:41:d9:c2:37:e3:57:7f:4f:96:9a:e5:d4:
4c:3f:4a:0d:6e:c2:be:7e:08:f5:6d:0b:06:a7:b8:
62:c4:f6:2e:6f:89:f3:01:32:6b:25:3a:85:a8:d9:
89:19:8e:eb:69:ad:c3:1b:2d:da:60:8f:a0:50:c6:
a5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D2:BC:D7:74:92:D5:FA:5D:55:96:35:2F:5A:76:BC:5B:03:BE:CD
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/vNK813SS1fpdVZY1L1p2vFsDvs0.roa
sbgp-ipAddrBlock: critical
IPv4:
210.152.32.0/19
Signature Algorithm: sha256WithRSAEncryption
05:e8:a2:ce:9a:ea:5b:a4:75:2a:00:6a:9a:54:42:a2:c9:49:
e9:6e:67:42:0b:e7:13:b6:b7:c8:f9:2e:4a:b8:04:36:ca:d5:
7e:98:db:cf:c9:c1:c9:a7:4e:a3:eb:ae:7e:8b:f3:08:41:c6:
88:1b:57:6c:d6:d8:0a:83:04:27:70:a5:34:27:41:3c:29:0a:
7d:c0:9a:6b:94:22:e3:84:3f:55:04:d6:3c:5e:19:f4:e8:d4:
3d:de:8d:85:5f:a5:cd:e8:72:13:7e:a8:3c:57:26:46:50:56:
55:c0:60:b2:49:69:31:45:e6:8d:f8:78:f2:fe:32:42:df:ef:
3b:cf:35:fe:5d:74:75:9a:83:58:fb:fc:08:a5:05:a5:35:f9:
b8:09:25:96:c3:0e:21:be:e5:ef:1d:85:89:23:4d:df:e3:92:
93:20:b7:2b:33:3d:db:20:49:42:d5:6a:26:8a:2a:ad:db:94:
04:dd:f1:f3:cb:5b:82:ae:78:0a:fe:ed:b6:71:ad:42:ed:58:
9b:fb:71:3c:cb:3c:87:c0:90:0a:10:9f:9c:eb:eb:0a:57:fb:
5f:db:09:a9:89:71:71:32:b2:27:3e:c3:4d:39:f2:4f:49:4c:
de:83:df:fa:05:60:97:7c:d2:19:95:6f:d2:61:81:3f:30:a8:
3f:34:ce:ae
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw
QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw
NzUzMzZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEJDRDJCQ0Q3NzQ5MkQ1
RkE1RDU1OTYzNTJGNUE3NkJDNUIwM0JFQ0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDUC/Wk5V2bv5UKEEf/TFGG4W2gav/19KEAh0a3zScrH1RKK2XE
9uwF7uPd1mhytudIatTCQdbY2zHUAX+66fN8VAf5OU21LWchFhLhnDvNUuOfXNxk
SdeXKULhlK8XHEPQV807/1qMf0suUzhJcdISZxiv7HSn85+sD9/68c+5TsHBYHyZ
Z0wNf6JhdmUh2Nl2hluFG4k+ZsD9VWEtXCTIO/3xVay+QFsjrpOeh9I++z5dTvsG
acEdH5CXtUS+MPqwMiBOdUHZwjfjV39Plprl1Ew/Sg1uwr5+CPVtCwanuGLE9i5v
ifMBMmslOoWo2YkZjutprcMbLdpgj6BQxqUdAgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQUvNK813SS1fpdVZY1L1p2vFsDvs0wHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP
Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1
bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMDA4My92Tks4MTNTUzFmcGRWWlkxTDFwMnZGc0R2czAucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0pggMA0GCSqGSIb3DQEBCwUA
A4IBAQAF6KLOmupbpHUqAGqaVEKiyUnpbmdCC+cTtrfI+S5KuAQ2ytV+mNvPycHJ
p06j665+i/MIQcaIG1ds1tgKgwQncKU0J0E8KQp9wJprlCLjhD9VBNY8Xhn06NQ9
3o2FX6XN6HITfqg8VyZGUFZVwGCySWkxReaN+Hjy/jJC3+87zzX+XXR1moNY+/wI
pQWlNfm4CSWWww4hvuXvHYWJI03f45KTILcrMz3bIElC1Womiiqt25QE3fHzy1uC
rngK/u22ca1C7Vib+3E8yzyHwJAKEJ+c6+sKV/tf2wmpiXFxMrInPsNNOfJPSUze
g9/6BWCXfNIZlW/SYYE/MKg/NM6u
-----END CERTIFICATE-----
Generated at Wed Apr 1 15:55:51 2026 by rpki-client