
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/RXxW8Zw3fGZkjEDycm9HdLVAXjI.roa
File: RXxW8Zw3fGZkjEDycm9HdLVAXjI.roa (raw, json)
Hash identifier: T7KPUe9Ab+duKjzDpEVxOUqPgSFaxJe3ziB9EC0+5Xk=
Subject key identifier: 45:7C:56:F1:9C:37:7C:66:64:8C:40:F2:72:6F:47:74:B5:40:5E:32
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: 0171
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/RXxW8Zw3fGZkjEDycm9HdLVAXjI.roa
Signing time: Tue 31 Mar 2026 07:48:16 +0000
ROA not before: Tue 31 Mar 2026 07:48:16 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2914
IP address blocks: 203.105.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Apr 2026 12:27:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 369 (0x171)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Mar 31 07:48:16 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=457C56F19C377C66648C40F2726F4774B5405E32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dd:ad:6f:4e:f3:e1:2d:73:be:2c:28:7c:11:
77:30:f3:68:be:ab:8e:3e:1e:62:27:fb:31:81:2b:
ec:e5:70:5e:a2:6a:e5:4e:5e:43:5b:b1:26:13:96:
06:91:68:7e:c9:eb:62:ec:b8:87:57:a0:6a:f9:41:
40:bb:c4:88:ec:3e:c5:e5:98:d9:7e:9c:ef:14:fb:
f2:51:c3:dd:87:ea:ab:c5:f9:e4:18:27:97:49:98:
70:3c:8c:62:2a:83:59:af:73:44:37:b4:95:79:54:
ce:d6:0b:d4:05:6c:db:50:fc:c2:2c:3c:72:25:5a:
26:2d:ea:10:b3:a2:43:c2:cd:e5:e9:67:8d:e0:16:
39:ab:31:9d:18:da:63:6f:d2:35:ce:16:1c:35:fc:
2c:e3:76:9f:ba:b2:81:de:de:05:4c:df:61:92:60:
58:b1:37:0e:40:de:f5:5d:c3:e2:47:db:24:0f:07:
de:b3:64:70:3d:97:e2:32:83:0f:3a:9e:dc:32:ef:
04:e5:5c:3f:29:d9:8b:0e:c1:2f:95:d4:77:e0:c6:
41:dc:b8:3d:6f:a6:63:57:fa:86:f5:fb:ae:c3:8d:
a2:10:0c:23:01:84:ba:3d:b9:33:89:8a:13:b2:65:
93:7e:5c:67:ad:da:78:09:2f:85:02:fe:a4:3f:50:
76:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7C:56:F1:9C:37:7C:66:64:8C:40:F2:72:6F:47:74:B5:40:5E:32
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/RXxW8Zw3fGZkjEDycm9HdLVAXjI.roa
sbgp-ipAddrBlock: critical
IPv4:
203.105.64.0/19
Signature Algorithm: sha256WithRSAEncryption
27:79:b5:d3:50:94:48:f6:01:bf:4a:d0:6b:6e:2c:4b:73:c9:
2e:d0:36:2d:e5:cc:29:a8:40:4b:83:f3:52:de:2d:ab:19:62:
ac:f1:5c:0c:1d:9c:11:9c:55:ff:82:c9:4a:1f:cd:83:08:c0:
8f:ab:6e:10:dd:01:46:b9:3d:4f:35:3d:c9:f9:5a:04:60:ee:
58:da:b2:93:af:f4:59:0f:2f:f0:62:10:65:65:4b:51:c3:bb:
29:20:83:15:69:46:13:99:16:13:32:fb:92:e6:e7:50:73:a2:
a0:41:bb:89:81:89:97:fa:fa:ff:d6:6b:f7:54:42:12:4d:1c:
89:18:6c:1a:d0:a3:21:f9:ee:a9:87:36:db:3e:9c:d2:e3:49:
61:a0:ce:d7:96:79:b2:25:b0:99:4d:57:d9:ad:3f:04:81:d7:
a7:20:23:90:cb:b7:d7:1e:25:ca:bb:1c:49:34:18:cd:da:d6:
63:75:a2:16:03:9b:a3:3f:5d:f6:07:fa:d0:fa:c3:bd:0b:17:
08:ea:bf:15:3c:4b:e5:8a:c0:5a:a8:0d:10:24:84:7f:0d:24:
a4:ac:26:b1:a0:06:d0:4a:ab:26:6b:4e:c2:19:3b:58:0f:32:
ae:00:3c:22:ab:c8:bc:ae:81:16:38:49:23:34:16:47:18:33:
5e:13:be:8b
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0
NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNjAzMzEw
NzQ4MTZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQ1N0M1NkYxOUMzNzdD
NjY2NDhDNDBGMjcyNkY0Nzc0QjU0MDVFMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/3a1vTvPhLXO+LCh8EXcw82i+q44+HmIn+zGBK+zlcF6iauVO
XkNbsSYTlgaRaH7J62LsuIdXoGr5QUC7xIjsPsXlmNl+nO8U+/JRw92H6qvF+eQY
J5dJmHA8jGIqg1mvc0Q3tJV5VM7WC9QFbNtQ/MIsPHIlWiYt6hCzokPCzeXpZ43g
FjmrMZ0Y2mNv0jXOFhw1/Czjdp+6soHe3gVM32GSYFixNw5A3vVdw+JH2yQPB96z
ZHA9l+Iygw86ntwy7wTlXD8p2YsOwS+V1HfgxkHcuD1vpmNX+ob1+67DjaIQDCMB
hLo9uTOJihOyZZN+XGet2ngJL4UC/qQ/UHazAgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQURXxW8Zw3fGZkjEDycm9HdLVAXjIwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur
X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3
WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMDEyOC9SWHhXOFp3M2ZHWmtqRUR5Y205SGRMVkFYakkucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFy2lAMA0GCSqGSIb3DQEBCwUA
A4IBAQAnebXTUJRI9gG/StBrbixLc8ku0DYt5cwpqEBLg/NS3i2rGWKs8VwMHZwR
nFX/gslKH82DCMCPq24Q3QFGuT1PNT3J+VoEYO5Y2rKTr/RZDy/wYhBlZUtRw7sp
IIMVaUYTmRYTMvuS5udQc6KgQbuJgYmX+vr/1mv3VEISTRyJGGwa0KMh+e6phzbb
PpzS40lhoM7XlnmyJbCZTVfZrT8EgdenICOQy7fXHiXKuxxJNBjN2tZjdaIWA5uj
P132B/rQ+sO9CxcI6r8VPEvlisBaqA0QJIR/DSSkrCaxoAbQSqsma07CGTtYDzKu
ADwiq8i8roEWOEkjNBZHGDNeE76L
-----END CERTIFICATE-----
Generated at Wed Apr 8 14:50:14 2026 by rpki-client