
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5263/jpGsBuDRqDy7SCKFfSyKWjMxrcc.roa
File: jpGsBuDRqDy7SCKFfSyKWjMxrcc.roa (raw, json)
Hash identifier: qtVIrjxg0kTPqDndoW8oDk+6jb9DSKLoKCGpJSTYfPI=
Subject key identifier: 8E:91:AC:06:E0:D1:A8:3C:BB:48:22:85:7D:2C:8A:5A:33:31:AD:C7
Certificate issuer: /CN=3C8E0CC97F583641E6C2EF077EBC1668C4EE6999
Certificate serial: 25
Authority key identifier: 3C:8E:0C:C9:7F:58:36:41:E6:C2:EF:07:7E:BC:16:68:C4:EE:69:99
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PI4MyX9YNkHmwu8HfrwWaMTuaZk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5263/jpGsBuDRqDy7SCKFfSyKWjMxrcc.roa
Signing time: Tue 31 Mar 2026 08:39:38 +0000
ROA not before: Tue 31 Mar 2026 08:39:38 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 24229
IP address blocks: 218.100.15.0/24 maxlen: 25
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5263/PI4MyX9YNkHmwu8HfrwWaMTuaZk.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5263/PI4MyX9YNkHmwu8HfrwWaMTuaZk.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PI4MyX9YNkHmwu8HfrwWaMTuaZk.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C8E0CC97F583641E6C2EF077EBC1668C4EE6999
Validity
Not Before: Mar 31 08:39:38 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=8E91AC06E0D1A83CBB4822857D2C8A5A3331ADC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:89:ba:28:69:e1:ed:48:11:74:ac:de:d8:c7:
26:0a:ec:b7:b5:59:e2:32:23:86:16:5f:ed:e4:1c:
5b:0e:d9:4e:c8:5f:9e:a7:98:fe:15:f4:0b:6b:4c:
48:11:10:25:b1:5a:50:86:4d:18:43:61:c1:36:1f:
f6:1a:7d:84:20:9a:79:e4:1e:b0:d1:93:68:a9:bc:
b9:db:73:8e:c6:67:5b:30:9b:54:fc:4c:62:bd:34:
1c:7f:7d:de:39:2b:6e:d4:82:d3:09:04:29:dd:53:
c6:70:0b:92:ae:5b:9e:ce:f5:56:5f:f6:f5:0f:3b:
5d:02:75:10:44:82:15:5d:25:d2:c7:ea:b3:29:1f:
d4:b3:08:dc:62:61:8a:ef:d2:49:81:3b:fa:d6:ba:
d3:52:e6:7a:f8:ae:1c:14:1c:7f:06:14:5f:7a:5e:
23:91:3a:12:a8:54:cc:a5:9e:58:0b:bd:3a:d6:fd:
bd:7c:c7:69:75:e1:57:2e:4a:dc:19:f2:42:b5:e9:
5d:8c:65:8a:d6:bb:22:8c:20:21:63:8a:8b:3b:a5:
c5:7f:08:c9:9a:73:b6:7f:4e:cb:52:07:ce:04:65:
0c:6b:a7:23:3c:c5:c0:f0:a0:7f:fc:83:a6:c7:31:
ff:11:49:97:48:0d:79:78:5d:10:9a:f2:45:67:da:
68:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:91:AC:06:E0:D1:A8:3C:BB:48:22:85:7D:2C:8A:5A:33:31:AD:C7
X509v3 Authority Key Identifier:
keyid:3C:8E:0C:C9:7F:58:36:41:E6:C2:EF:07:7E:BC:16:68:C4:EE:69:99
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5263/PI4MyX9YNkHmwu8HfrwWaMTuaZk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PI4MyX9YNkHmwu8HfrwWaMTuaZk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5263/jpGsBuDRqDy7SCKFfSyKWjMxrcc.roa
sbgp-ipAddrBlock: critical
IPv4:
218.100.15.0/24
Signature Algorithm: sha256WithRSAEncryption
33:f0:e7:2d:83:0d:c5:2c:34:ab:c0:85:d3:7c:ea:6e:38:5e:
7f:54:ef:3c:8c:8b:06:87:d1:af:f5:c9:34:c8:43:75:aa:31:
ae:ef:73:bf:6d:2f:5d:97:70:be:3d:fa:3c:24:e1:4e:1c:7a:
19:03:a0:5e:3b:64:fd:06:c9:ef:83:a4:4b:91:8a:8f:e7:d6:
52:4b:6e:08:6d:a5:dd:d7:8f:8d:85:04:c0:54:91:5f:6d:d9:
7d:d9:77:72:f2:f9:10:0e:32:d3:f5:65:2f:65:59:69:4d:1a:
64:20:a1:69:de:b3:91:d7:05:3b:20:44:7a:85:94:f3:6b:66:
e2:94:b2:de:76:cd:6e:cd:05:3b:07:bc:4a:6e:07:7d:e6:95:
35:47:15:f8:2c:a7:13:93:e4:35:30:f2:35:05:f5:de:b2:e9:
a8:5c:05:23:be:d7:82:ce:6c:c4:26:a1:b0:5b:88:b7:9b:6e:
0e:e5:dc:7b:49:a6:32:46:1c:a1:3c:07:19:ce:22:95:68:58:
c1:61:5b:87:0a:65:1a:bf:70:25:21:73:a6:7a:82:94:10:f4:
1f:79:9b:a9:60:b3:b6:3e:51:c4:cb:52:af:95:82:1e:d3:9b:
0f:47:c8:0c:82:a9:2c:a6:93:0f:16:46:c7:74:25:f0:be:7f:
81:4c:5c:dd
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIBJTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzQzhF
MENDOTdGNTgzNjQxRTZDMkVGMDc3RUJDMTY2OEM0RUU2OTk5MB4XDTI2MDMzMTA4
MzkzOFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoOEU5MUFDMDZFMEQxQTgz
Q0JCNDgyMjg1N0QyQzhBNUEzMzMxQURDNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOaJuihp4e1IEXSs3tjHJgrst7VZ4jIjhhZf7eQcWw7ZTshfnqeY
/hX0C2tMSBEQJbFaUIZNGENhwTYf9hp9hCCaeeQesNGTaKm8udtzjsZnWzCbVPxM
Yr00HH993jkrbtSC0wkEKd1TxnALkq5bns71Vl/29Q87XQJ1EESCFV0l0sfqsykf
1LMI3GJhiu/SSYE7+ta601LmeviuHBQcfwYUX3peI5E6EqhUzKWeWAu9Otb9vXzH
aXXhVy5K3BnyQrXpXYxlita7IowgIWOKizulxX8IyZpztn9Oy1IHzgRlDGunIzzF
wPCgf/yDpscx/xFJl0gNeXhdEJryRWfaaGECAwEAAaOCAdswggHXMB0GA1UdDgQW
BBSOkawG4NGoPLtIIoV9LIpaMzGtxzAfBgNVHSMEGDAWgBQ8jgzJf1g2QebC7wd+
vBZoxO5pmTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTI2My9QSTRNeVg5WU5rSG13dThIZnJ3V2FNVHVhWmsuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9QSTRNeVg5WU5rSG13dThIZnJ3V2FN
VHVhWmsuY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB
BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNTI2My9qcEdzQnVEUnFEeTdTQ0tGZlN5S1dqTXhyY2Mucm9hMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2mQPMA0GCSqGSIb3DQEBCwUAA4IB
AQAz8Octgw3FLDSrwIXTfOpuOF5/VO88jIsGh9Gv9ck0yEN1qjGu73O/bS9dl3C+
Pfo8JOFOHHoZA6BeO2T9Bsnvg6RLkYqP59ZSS24IbaXd14+NhQTAVJFfbdl92Xdy
8vkQDjLT9WUvZVlpTRpkIKFp3rOR1wU7IER6hZTza2bilLLeds1uzQU7B7xKbgd9
5pU1RxX4LKcTk+Q1MPI1BfXesumoXAUjvteCzmzEJqGwW4i3m24O5dx7SaYyRhyh
PAcZziKVaFjBYVuHCmUav3AlIXOmeoKUEPQfeZupYLO2PlHEy1KvlYIe05sPR8gM
gqksppMPFkbHdCXwvn+BTFzd
-----END CERTIFICATE-----
Generated at Mon Apr 6 18:54:50 2026 by rpki-client