
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30072/l4qqsrk44JN4FKmjj_ig25y0Gkw.roa
File: l4qqsrk44JN4FKmjj_ig25y0Gkw.roa (raw, json)
Hash identifier: eO/nHRJAWlo5Q2pRb4bjkyiFnwZePChsC/GSjqxzGn0=
Subject key identifier: 97:8A:AA:B2:B9:38:E0:93:78:14:A9:A3:8F:F8:A0:DB:9C:B4:1A:4C
Certificate issuer: /CN=58AE52C1F36BFAF852F410F1CAD0D3683D541261
Certificate serial: 59
Authority key identifier: 58:AE:52:C1:F3:6B:FA:F8:52:F4:10:F1:CA:D0:D3:68:3D:54:12:61
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/l4qqsrk44JN4FKmjj_ig25y0Gkw.roa
Signing time: Tue 31 Mar 2026 08:14:26 +0000
ROA not before: Tue 31 Mar 2026 08:14:26 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9824
IP address blocks: 2405:1200::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 10:05:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58AE52C1F36BFAF852F410F1CAD0D3683D541261
Validity
Not Before: Mar 31 08:14:26 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=978AAAB2B938E0937814A9A38FF8A0DB9CB41A4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7e:9a:54:11:b5:38:0a:65:fb:e0:c6:8d:be:
0b:51:18:6d:a9:54:65:bc:8e:80:85:8b:cc:97:97:
09:8f:70:30:3c:27:a7:62:b8:cb:91:8e:7e:10:db:
c1:ea:03:1a:71:0c:ec:e7:00:c8:2e:c6:e5:54:d5:
7b:09:a9:64:17:14:d2:60:75:c2:25:2d:19:17:d9:
31:a4:a4:a4:ce:68:09:8c:8f:85:db:11:10:48:d5:
49:3d:64:32:8b:55:0b:eb:9d:28:0a:6c:a0:e7:40:
44:3b:ba:ab:ac:22:c5:01:b5:21:f1:70:32:c9:44:
44:04:c3:7c:a4:73:fa:37:f4:7b:65:ee:04:e6:4e:
97:25:bd:57:95:e7:b5:f4:3f:8a:86:1d:6e:a2:64:
31:59:dd:3e:08:17:6b:7f:3a:70:17:2e:e2:05:53:
f9:b7:83:57:5c:ca:73:70:ac:eb:d2:86:ac:47:53:
92:24:cf:20:2e:75:fc:52:c8:fc:b4:84:86:ed:98:
72:d4:ad:78:bd:c2:2a:8d:c8:d3:77:b2:b9:70:a8:
fc:53:1b:57:a9:62:5f:5a:09:9d:ad:2a:18:17:21:
4a:f5:34:ab:c6:70:ed:39:28:4a:08:1a:c4:7a:95:
e1:e4:bf:3a:a4:de:62:0c:05:cb:cc:2c:eb:92:0c:
ea:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8A:AA:B2:B9:38:E0:93:78:14:A9:A3:8F:F8:A0:DB:9C:B4:1A:4C
X509v3 Authority Key Identifier:
keyid:58:AE:52:C1:F3:6B:FA:F8:52:F4:10:F1:CA:D0:D3:68:3D:54:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/l4qqsrk44JN4FKmjj_ig25y0Gkw.roa
sbgp-ipAddrBlock: critical
IPv6:
2405:1200::/29
Signature Algorithm: sha256WithRSAEncryption
9a:a6:86:b8:87:c9:37:04:3c:82:76:cb:03:f7:8a:18:3c:10:
e9:db:54:66:4f:fc:5a:6e:4e:b1:6c:b9:3f:00:a6:c8:bd:d1:
41:ca:00:23:e2:b8:8c:62:3b:ce:50:2b:95:fe:7d:e0:94:cc:
fa:95:2b:e9:4c:5c:88:b4:d2:af:4b:60:ea:18:eb:85:50:d9:
ec:9f:8f:97:87:4c:86:ca:ec:d6:8d:8a:86:45:36:a2:5a:af:
a0:cd:c5:ff:29:92:9a:4e:b2:a2:28:3b:39:f8:cc:77:a0:67:
0b:d3:b1:0d:ce:89:e6:3a:9c:54:11:c8:f2:ba:94:b8:92:89:
cd:cf:94:04:f9:6e:70:15:b3:b6:3d:d4:75:aa:3e:da:62:f3:
82:b1:97:c4:ea:d5:aa:bc:a5:f3:16:f8:52:15:29:18:f4:18:
af:a4:60:2b:bb:cb:24:7f:8b:85:e7:8a:d8:83:26:79:33:66:
c5:f3:88:eb:24:b2:b5:e8:f8:99:ac:3d:51:08:62:75:01:21:
fc:51:f0:ec:0c:ba:f8:6f:16:83:b5:ee:ff:95:13:ae:86:f4:
ec:67:d4:93:1e:ee:22:80:b9:99:c1:5c:5b:c9:37:1a:19:b1:
26:59:99:9d:4c:5b:9a:c1:c7:74:73:cf:f8:77:c1:49:2c:ae:
d0:ba:87:2b
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgIBWTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1OEFF
NTJDMUYzNkJGQUY4NTJGNDEwRjFDQUQwRDM2ODNENTQxMjYxMB4XDTI2MDMzMTA4
MTQyNloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoOTc4QUFBQjJCOTM4RTA5
Mzc4MTRBOUEzOEZGOEEwREI5Q0I0MUE0QzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANJ+mlQRtTgKZfvgxo2+C1EYbalUZbyOgIWLzJeXCY9wMDwnp2K4
y5GOfhDbweoDGnEM7OcAyC7G5VTVewmpZBcU0mB1wiUtGRfZMaSkpM5oCYyPhdsR
EEjVST1kMotVC+udKApsoOdARDu6q6wixQG1IfFwMslERATDfKRz+jf0e2XuBOZO
lyW9V5XntfQ/ioYdbqJkMVndPggXa386cBcu4gVT+beDV1zKc3Cs69KGrEdTkiTP
IC51/FLI/LSEhu2YctSteL3CKo3I03eyuXCo/FMbV6liX1oJna0qGBchSvU0q8Zw
7TkoSggaxHqV4eS/OqTeYgwFy8ws65IM6uUCAwEAAaOCAd4wggHaMB0GA1UdDgQW
BBSXiqqyuTjgk3gUqaOP+KDbnLQaTDAfBgNVHSMEGDAWgBRYrlLB82v6+FL0EPHK
0NNoPVQSYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwNzIvV0s1U3dmTnItdmhTOUJEeHl0RFRhRDFVRW1FLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvV0s1U3dmTnItdmhTOUJEeHl0RFRh
RDFVRW1FLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMDcyL2w0cXFzcms0NEpONEZLbWpqX2lnMjV5MEdrdy5yb2Ew
IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQMkBRIAMA0GCSqGSIb3DQEBCwUA
A4IBAQCapoa4h8k3BDyCdssD94oYPBDp21RmT/xabk6xbLk/AKbIvdFBygAj4riM
YjvOUCuV/n3glMz6lSvpTFyItNKvS2DqGOuFUNnsn4+Xh0yGyuzWjYqGRTaiWq+g
zcX/KZKaTrKiKDs5+Mx3oGcL07ENzonmOpxUEcjyupS4konNz5QE+W5wFbO2PdR1
qj7aYvOCsZfE6tWqvKXzFvhSFSkY9BivpGAru8skf4uF54rYgyZ5M2bF84jrJLK1
6PiZrD1RCGJ1ASH8UfDsDLr4bxaDte7/lROuhvTsZ9STHu4igLmZwVxbyTcaGbEm
WZmdTFuawcd0c8/4d8FJLK7Quocr
-----END CERTIFICATE-----
Generated at Mon Apr 6 12:58:25 2026 by rpki-client