
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/597/j534Psi0CWgUoZzzAod5HmyFueA.roa
File: j534Psi0CWgUoZzzAod5HmyFueA.roa (raw, json)
Hash identifier: l4rd61PmOqaKPZ2Mn0WoyEbC2mw7oL0ml3kQSgym5TE=
Subject key identifier: 8F:9D:F8:3E:C8:B4:09:68:14:A1:9C:F3:02:87:79:1E:6C:85:B9:E0
Certificate issuer: /CN=71F76FA07735F685991FC882C885E21EFBB161BC
Certificate serial: A7
Authority key identifier: 71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/j534Psi0CWgUoZzzAod5HmyFueA.roa
Signing time: Tue 31 Mar 2026 08:30:49 +0000
ROA not before: Tue 31 Mar 2026 08:30:49 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2915
IP address blocks: 126.209.192.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 13:54:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167 (0xa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71F76FA07735F685991FC882C885E21EFBB161BC
Validity
Not Before: Mar 31 08:30:49 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=8F9DF83EC8B4096814A19CF30287791E6C85B9E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:dc:15:d2:02:b7:9b:30:b9:a1:f2:25:7a:b6:
a9:fd:ba:47:9d:6a:e9:0a:15:f4:2f:94:4e:2e:22:
d8:fc:e4:1c:d7:7c:98:e3:ab:e1:92:c6:92:f6:78:
70:cf:95:ae:c2:2e:9d:fb:0b:ce:c4:67:24:19:8c:
cb:bc:49:33:74:92:12:6e:8f:04:73:c7:d0:13:d7:
1f:9f:e0:f3:7a:93:2f:1c:f8:84:43:fe:93:57:b8:
c0:e5:b0:ab:49:9b:9d:a2:fb:7e:bf:18:37:ce:e8:
20:01:f2:2d:79:6b:7b:34:b9:cf:a2:22:50:db:57:
83:85:5e:4a:37:18:8b:e8:32:1a:5c:99:15:7f:68:
9f:c3:ff:e0:53:9f:74:07:c7:73:af:e1:a1:14:86:
45:4c:c8:07:c4:a5:04:78:89:33:fd:9a:fa:34:4d:
17:9a:6f:20:69:e9:ae:00:fc:90:46:93:c9:27:89:
97:03:19:d6:42:93:94:05:22:dc:6b:60:bb:7c:c7:
f2:cc:6c:06:cf:08:42:c4:a9:7a:ab:05:d2:40:0a:
e9:ca:e1:5f:86:3c:44:76:6c:5c:97:00:38:ff:f4:
af:5c:f3:cf:d2:c1:7f:b3:53:2b:61:72:06:a9:40:
32:0b:f7:70:bb:8f:10:d6:89:0c:ae:d2:87:a0:6c:
77:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9D:F8:3E:C8:B4:09:68:14:A1:9C:F3:02:87:79:1E:6C:85:B9:E0
X509v3 Authority Key Identifier:
keyid:71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/j534Psi0CWgUoZzzAod5HmyFueA.roa
sbgp-ipAddrBlock: critical
IPv4:
126.209.192.0/24
Signature Algorithm: sha256WithRSAEncryption
09:c7:76:a7:8b:eb:93:7a:2f:28:37:d0:c5:a2:ab:45:94:08:
cf:b0:9b:30:07:6a:de:42:d8:b6:4d:e0:68:b8:7c:e6:59:5a:
64:bd:7d:6d:18:1c:54:e6:a9:b4:53:d0:2f:6e:ad:9f:ae:3b:
6f:ab:fb:f8:0f:88:4b:13:31:90:6f:f3:6b:aa:3a:c9:6d:55:
a4:5a:aa:a8:f4:ed:56:c1:be:b8:4c:35:74:d4:01:f4:8f:ae:
34:89:fe:f7:c3:72:21:8f:e2:cc:33:b5:1b:a1:01:44:eb:d8:
0e:e2:7e:59:cc:cd:e8:ff:cd:b2:5c:a6:dd:fc:b2:37:fd:d1:
81:c8:08:d4:45:6c:fd:ac:e8:3d:0c:8f:e6:02:db:7d:14:02:
88:18:f6:b5:89:78:13:64:7c:b7:5f:dd:91:32:93:cb:1a:f2:
9d:dd:a6:ce:7e:29:2c:65:31:f2:a4:c3:f5:3c:0d:c8:ae:57:
4d:a1:96:78:83:25:47:22:b8:f5:02:6a:c5:78:31:1c:b4:33:
0c:0b:23:ad:01:fa:ec:79:3a:89:8b:64:4d:a2:68:b2:8e:20:
b7:f7:3a:40:18:f1:5d:53:f9:f9:6c:d8:f5:54:f8:6d:71:99:
31:b3:07:29:94:bf:52:a6:b5:8c:da:f5:a1:50:f9:68:5a:52:
24:8e:e4:39
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFG
NzZGQTA3NzM1RjY4NTk5MUZDODgyQzg4NUUyMUVGQkIxNjFCQzAeFw0yNjAzMzEw
ODMwNDlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDhGOURGODNFQzhCNDA5
NjgxNEExOUNGMzAyODc3OTFFNkM4NUI5RTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDb3BXSArebMLmh8iV6tqn9ukedaukKFfQvlE4uItj85BzXfJjj
q+GSxpL2eHDPla7CLp37C87EZyQZjMu8STN0khJujwRzx9AT1x+f4PN6ky8c+IRD
/pNXuMDlsKtJm52i+36/GDfO6CAB8i15a3s0uc+iIlDbV4OFXko3GIvoMhpcmRV/
aJ/D/+BTn3QHx3Ov4aEUhkVMyAfEpQR4iTP9mvo0TReabyBp6a4A/JBGk8kniZcD
GdZCk5QFItxrYLt8x/LMbAbPCELEqXqrBdJACunK4V+GPER2bFyXADj/9K9c88/S
wX+zUythcgapQDIL93C7jxDWiQyu0oegbHeLAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUj534Psi0CWgUoZzzAod5HmyFueAwHwYDVR0jBBgwFoAUcfdvoHc19oWZH8iC
yIXiHvuxYbwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU5Ny9jZmR2b0hjMTlvV1pIOGlDeUlYaUh2dXhZYncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9jZmR2b0hjMTlvV1pIOGlDeUlYaUh2
dXhZYncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNTk3L2o1MzRQc2kwQ1dnVW9aenpBb2Q1SG15RnVlQS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB+0cAwDQYJKoZIhvcNAQELBQADggEB
AAnHdqeL65N6Lyg30MWiq0WUCM+wmzAHat5C2LZN4Gi4fOZZWmS9fW0YHFTmqbRT
0C9urZ+uO2+r+/gPiEsTMZBv82uqOsltVaRaqqj07VbBvrhMNXTUAfSPrjSJ/vfD
ciGP4swztRuhAUTr2A7iflnMzej/zbJcpt38sjf90YHICNRFbP2s6D0Mj+YC230U
AogY9rWJeBNkfLdf3ZEyk8sa8p3dps5+KSxlMfKkw/U8DciuV02hlniDJUciuPUC
asV4MRy0MwwLI60B+ux5OomLZE2iaLKOILf3OkAY8V1T+fls2PVU+G1xmTGzBymU
v1KmtYza9aFQ+WhaUiSO5Dk=
-----END CERTIFICATE-----
Generated at Mon Apr 6 16:31:23 2026 by rpki-client