
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/oBlfzfMz1PJ9tFOX5mx8FHMuaOE.roa
File: oBlfzfMz1PJ9tFOX5mx8FHMuaOE.roa (raw, json)
Hash identifier: rXwqXIX1C75AxK4tvoHY2O4GkJ+NAj1iMkInSmLeGuk=
Subject key identifier: A0:19:5F:CD:F3:33:D4:F2:7D:B4:53:97:E6:6C:7C:14:73:2E:68:E1
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: 016D
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/oBlfzfMz1PJ9tFOX5mx8FHMuaOE.roa
Signing time: Tue 31 Mar 2026 07:48:13 +0000
ROA not before: Tue 31 Mar 2026 07:48:13 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2914
IP address blocks: 202.47.16.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Apr 2026 12:27:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 365 (0x16d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Mar 31 07:48:13 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=A0195FCDF333D4F27DB45397E66C7C14732E68E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a3:78:10:b4:6e:0e:2a:cd:33:c2:e2:5c:7d:
dc:9f:18:de:97:65:c5:23:1d:aa:2f:e0:29:e4:9c:
76:8b:dc:1e:8c:8e:c6:75:80:fa:99:56:5d:44:51:
2d:6b:55:7e:3f:53:5c:30:dc:3f:41:c2:f7:45:b6:
2c:a5:12:69:cc:53:a4:fc:2a:39:d9:82:fa:4e:f1:
15:de:d8:ac:29:1d:89:9f:fa:f4:f4:b7:bc:98:b8:
6b:4b:b2:39:d7:5a:95:d1:7d:92:02:d5:8c:81:93:
ad:d0:29:94:ac:67:7a:a9:80:b0:51:fc:cf:ae:65:
59:6b:c3:2b:d1:f6:bf:4f:db:14:78:c5:c4:3b:de:
ce:a0:3a:41:d4:2f:21:40:74:2b:56:96:6b:02:e4:
cd:27:94:3b:41:00:85:ce:14:70:7a:e2:f1:fe:18:
f4:b2:1c:24:2d:9e:14:85:34:c0:8e:9c:e9:84:df:
27:e7:68:25:66:71:1d:64:f6:84:64:e8:0a:69:12:
20:52:7d:cd:e1:cb:88:d8:3c:9d:28:44:51:f4:46:
49:13:ca:21:69:6a:55:3f:e3:9c:26:85:91:d5:c7:
a4:94:ea:4f:24:35:4b:9f:65:51:de:de:de:ee:cc:
c4:49:ec:ea:31:3e:bb:7f:97:20:6a:36:13:e9:ce:
19:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:19:5F:CD:F3:33:D4:F2:7D:B4:53:97:E6:6C:7C:14:73:2E:68:E1
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/oBlfzfMz1PJ9tFOX5mx8FHMuaOE.roa
sbgp-ipAddrBlock: critical
IPv4:
202.47.16.0/20
Signature Algorithm: sha256WithRSAEncryption
2d:02:e8:4d:23:d5:eb:df:c3:2d:39:10:24:02:13:8e:5e:b9:
9f:16:da:eb:be:f5:92:2a:7c:0f:79:84:25:48:36:7a:a1:07:
55:3d:24:34:9f:cd:34:38:eb:d0:79:fe:66:a8:fa:32:1a:a8:
f3:40:42:c2:13:13:f1:78:5c:8f:7b:a6:cd:1b:6c:19:5e:24:
0d:a3:ec:df:1b:14:3d:f8:1f:10:91:cc:96:e4:5c:d7:8e:90:
c2:59:14:fa:c7:6e:a1:5b:5c:40:7d:d3:58:a5:54:45:5a:94:
9f:0a:2b:14:c0:9b:5e:db:37:49:59:2c:6e:39:9e:67:df:3e:
c0:f1:6a:2c:0c:de:f8:c8:68:fe:51:67:fb:27:84:11:b3:c6:
91:ac:55:43:9b:c1:12:c3:bb:4f:1a:e4:bd:4f:f7:e0:14:fb:
a5:c4:a2:b0:f2:4d:4c:40:7e:2f:53:fc:68:a3:46:b4:51:99:
90:d2:93:12:fd:be:b2:bf:e4:b4:1c:a7:6e:de:72:5f:ce:e8:
35:ed:c3:35:b3:8c:c1:92:8e:34:61:f6:3b:da:f9:cd:3d:75:
74:67:7d:e2:b7:3e:00:99:89:95:a4:d8:ea:84:89:73:be:88:
c1:28:10:58:70:21:c0:f0:2f:36:3f:72:3e:1e:67:18:47:eb:
6f:45:3c:f2
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0
NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNjAzMzEw
NzQ4MTNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEEwMTk1RkNERjMzM0Q0
RjI3REI0NTM5N0U2NkM3QzE0NzMyRTY4RTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqo3gQtG4OKs0zwuJcfdyfGN6XZcUjHaov4CnknHaL3B6MjsZ1
gPqZVl1EUS1rVX4/U1ww3D9BwvdFtiylEmnMU6T8KjnZgvpO8RXe2KwpHYmf+vT0
t7yYuGtLsjnXWpXRfZIC1YyBk63QKZSsZ3qpgLBR/M+uZVlrwyvR9r9P2xR4xcQ7
3s6gOkHULyFAdCtWlmsC5M0nlDtBAIXOFHB64vH+GPSyHCQtnhSFNMCOnOmE3yfn
aCVmcR1k9oRk6AppEiBSfc3hy4jYPJ0oRFH0RkkTyiFpalU/45wmhZHVx6SU6k8k
NUufZVHe3t7uzMRJ7OoxPrt/lyBqNhPpzhnBAgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQUoBlfzfMz1PJ9tFOX5mx8FHMuaOEwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur
X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3
WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMDEyOC9vQmxmemZNejFQSjl0Rk9YNW14OEZITXVhT0Uucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEyi8QMA0GCSqGSIb3DQEBCwUA
A4IBAQAtAuhNI9Xr38MtORAkAhOOXrmfFtrrvvWSKnwPeYQlSDZ6oQdVPSQ0n800
OOvQef5mqPoyGqjzQELCExPxeFyPe6bNG2wZXiQNo+zfGxQ9+B8QkcyW5FzXjpDC
WRT6x26hW1xAfdNYpVRFWpSfCisUwJte2zdJWSxuOZ5n3z7A8WosDN74yGj+UWf7
J4QRs8aRrFVDm8ESw7tPGuS9T/fgFPulxKKw8k1MQH4vU/xoo0a0UZmQ0pMS/b6y
v+S0HKdu3nJfzug17cM1s4zBko40YfY72vnNPXV0Z33itz4AmYmVpNjqhIlzvojB
KBBYcCHA8C82P3I+HmcYR+tvRTzy
-----END CERTIFICATE-----
Generated at Wed Apr 8 14:50:15 2026 by rpki-client