
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/924/W7ZjtxA5Opgr0tmopmUx_DQ5ItM.roa
File: W7ZjtxA5Opgr0tmopmUx_DQ5ItM.roa (raw, json)
Hash identifier: 9okQz3jfjzvvvUPDEKIoIkkyi4IOshq5ERWeZJVg6c0=
Subject key identifier: 5B:B6:63:B7:10:39:3A:98:2B:D2:D9:A8:A6:65:31:FC:34:39:22:D3
Certificate issuer: /CN=4C11E03B4B88F3B90ADB73173864F7005132484F
Certificate serial: 51
Authority key identifier: 4C:11:E0:3B:4B:88:F3:B9:0A:DB:73:17:38:64:F7:00:51:32:48:4F
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TBHgO0uI87kK23MXOGT3AFEySE8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/W7ZjtxA5Opgr0tmopmUx_DQ5ItM.roa
Signing time: Sun 01 Feb 2026 01:28:53 +0000
ROA not before: Sun 01 Feb 2026 01:28:53 +0000
ROA not after: Fri 15 Jan 2027 01:30:02 +0000
asID: 24284
IP address blocks: 157.112.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/TBHgO0uI87kK23MXOGT3AFEySE8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/TBHgO0uI87kK23MXOGT3AFEySE8.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TBHgO0uI87kK23MXOGT3AFEySE8.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Feb 2026 02:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81 (0x51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C11E03B4B88F3B90ADB73173864F7005132484F
Validity
Not Before: Feb 1 01:28:53 2026 GMT
Not After : Jan 15 01:30:02 2027 GMT
Subject: CN=5BB663B710393A982BD2D9A8A66531FC343922D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:28:d7:f2:f8:25:4f:6f:14:71:51:3a:fd:4c:
c6:29:be:16:c4:8a:de:ca:cb:6b:1a:07:41:13:e2:
0b:b8:df:37:79:fe:ce:33:e9:47:76:35:27:09:30:
88:cc:13:e8:4c:c2:9f:47:a1:dd:f2:7f:45:7f:6d:
aa:d9:50:89:53:06:b8:ae:20:c9:37:9d:8c:af:76:
68:3a:ad:7d:49:e5:11:e4:80:29:ee:ea:d0:af:b3:
27:25:e6:4c:1d:21:81:af:82:ee:f5:ed:22:18:5c:
cb:9e:ae:c5:17:60:5e:c1:d4:2e:cf:b4:81:db:da:
dc:c9:9b:00:43:5b:0e:7c:e1:39:a2:1f:1c:ff:b7:
1a:77:a6:36:ab:ab:c8:29:5d:9e:c3:f8:23:47:10:
57:22:37:69:42:5b:59:86:32:07:4c:b0:d2:50:32:
11:c8:19:91:29:1d:ea:78:ee:16:94:f0:e9:4d:be:
30:47:fc:88:d4:37:fa:e6:0b:3a:23:dc:d6:cc:07:
ff:ab:ca:98:5e:99:7c:e7:21:4b:f1:ab:74:86:1a:
a9:c5:7c:e3:20:bf:6d:54:1c:43:45:1f:ec:c2:1e:
d5:cd:7a:50:5a:f7:99:34:95:cc:df:b7:e4:d4:80:
ed:34:9c:dc:36:7c:19:ea:4e:a9:7f:2f:f5:bc:7e:
d8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B6:63:B7:10:39:3A:98:2B:D2:D9:A8:A6:65:31:FC:34:39:22:D3
X509v3 Authority Key Identifier:
keyid:4C:11:E0:3B:4B:88:F3:B9:0A:DB:73:17:38:64:F7:00:51:32:48:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/TBHgO0uI87kK23MXOGT3AFEySE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TBHgO0uI87kK23MXOGT3AFEySE8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/W7ZjtxA5Opgr0tmopmUx_DQ5ItM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.112.64.0/20
Signature Algorithm: sha256WithRSAEncryption
04:a0:e5:53:a5:2e:2c:0e:b5:00:34:50:a9:83:5a:e4:a0:57:
46:84:e2:67:33:b2:8a:ee:58:4c:82:b2:57:bd:d1:37:d6:5b:
71:2c:11:32:b1:76:7f:42:44:bb:f8:64:7c:f4:a4:5b:f7:69:
0e:41:00:ff:fa:bc:a3:aa:de:fd:a6:f2:6e:01:69:70:90:09:
3a:89:1f:5e:09:96:38:2f:3e:ed:83:ed:50:7a:0d:cd:6e:89:
e1:94:c3:ce:26:5f:ba:8a:5e:08:24:d9:c3:27:1c:0d:15:23:
b3:92:0d:60:e9:f0:bf:b3:ba:d7:6d:04:59:f3:23:87:b1:f4:
89:da:3c:16:82:f7:e7:22:81:2b:e2:bb:f5:fc:47:ec:d3:9e:
fa:76:8f:e0:8f:fd:2f:34:ee:5e:eb:5f:57:3a:a5:16:e5:ba:
79:1f:cc:3f:99:c7:a3:68:4c:ee:d9:bc:11:35:b5:1e:20:fb:
23:3b:2b:b0:fd:06:ef:bd:2c:7a:6b:3b:65:c5:6c:d5:d5:aa:
87:fe:3e:20:8f:5e:db:59:27:07:07:6f:0b:3f:e6:0b:e4:c3:
33:14:76:3d:13:7d:69:c4:fb:bc:02:87:c4:4c:f6:1d:50:eb:
cf:78:98:c9:5e:45:ee:ca:1c:13:67:83:3c:37:21:8f:d2:ce:
1f:2d:42:e9
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBUTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0QzEx
RTAzQjRCODhGM0I5MEFEQjczMTczODY0RjcwMDUxMzI0ODRGMB4XDTI2MDIwMTAx
Mjg1M1oXDTI3MDExNTAxMzAwMlowMzExMC8GA1UEAxMoNUJCNjYzQjcxMDM5M0E5
ODJCRDJEOUE4QTY2NTMxRkMzNDM5MjJEMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALUo1/L4JU9vFHFROv1Mxim+FsSK3srLaxoHQRPiC7jfN3n+zjPp
R3Y1JwkwiMwT6EzCn0eh3fJ/RX9tqtlQiVMGuK4gyTedjK92aDqtfUnlEeSAKe7q
0K+zJyXmTB0hga+C7vXtIhhcy56uxRdgXsHULs+0gdva3MmbAENbDnzhOaIfHP+3
GnemNquryCldnsP4I0cQVyI3aUJbWYYyB0yw0lAyEcgZkSkd6njuFpTw6U2+MEf8
iNQ3+uYLOiPc1swH/6vKmF6ZfOchS/GrdIYaqcV84yC/bVQcQ0Uf7MIe1c16UFr3
mTSVzN+35NSA7TSc3DZ8GepOqX8v9bx+2I0CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRbtmO3EDk6mCvS2aimZTH8NDki0zAfBgNVHSMEGDAWgBRMEeA7S4jzuQrbcxc4
ZPcAUTJITzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTI0L1RCSGdPMHVJODdrSzIzTVhPR1QzQUZFeVNFOC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1RCSGdPMHVJODdrSzIzTVhPR1QzQUZF
eVNFOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85MjQvVzdaanR4QTVPcGdyMHRtb3BtVXhfRFE1SXRNLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBJ1wQDANBgkqhkiG9w0BAQsFAAOCAQEABKDlU6UuLA61ADRQqYNa5KBXRoTi
ZzOyiu5YTIKyV73RN9ZbcSwRMrF2f0JEu/hkfPSkW/dpDkEA//q8o6re/abybgFp
cJAJOokfXgmWOC8+7YPtUHoNzW6J4ZTDziZfuopeCCTZwyccDRUjs5INYOnwv7O6
120EWfMjh7H0ido8FoL35yKBK+K79fxH7NOe+naP4I/9LzTuXutfVzqlFuW6eR/M
P5nHo2hM7tm8ETW1HiD7IzsrsP0G770sems7ZcVs1dWqh/4+II9e21knBwdvCz/m
C+TDMxR2PRN9acT7vAKHxEz2HVDrz3iYyV5F7socE2eDPDchj9LOHy1C6Q==
-----END CERTIFICATE-----
Generated at Sat Feb 21 10:02:48 2026 by rpki-client