
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10207/tk0kKM6e5Ubm55jo0PN8xaebLUE.roa
File: tk0kKM6e5Ubm55jo0PN8xaebLUE.roa (raw, json)
Hash identifier: bqxACY0GEmlyeHfdGQPWhkdbh28K8KFYbILf3vkuUOo=
Subject key identifier: B6:4D:24:28:CE:9E:E5:46:E6:E7:98:E8:D0:F3:7C:C5:A7:9B:2D:41
Certificate issuer: /CN=C3A03D286196CB3388028B4047BE4F1F9B0FEBAC
Certificate serial: 95
Authority key identifier: C3:A0:3D:28:61:96:CB:33:88:02:8B:40:47:BE:4F:1F:9B:0F:EB:AC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/tk0kKM6e5Ubm55jo0PN8xaebLUE.roa
Signing time: Tue 31 Mar 2026 07:29:23 +0000
ROA not before: Tue 31 Mar 2026 07:29:23 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 38644
IP address blocks: 115.69.238.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 16:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149 (0x95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3A03D286196CB3388028B4047BE4F1F9B0FEBAC
Validity
Not Before: Mar 31 07:29:23 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=B64D2428CE9EE546E6E798E8D0F37CC5A79B2D41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:71:6f:76:f8:09:47:17:25:ec:ca:00:91:6c:
3e:18:36:b1:24:2f:12:48:43:be:a3:e6:5c:63:ea:
79:aa:67:71:25:bd:e1:1b:a9:96:30:f1:6f:50:28:
bd:20:af:26:d3:7b:60:f2:27:fc:6c:95:d3:d1:4a:
96:7d:a4:71:61:8c:dc:a3:2e:0d:a0:1c:76:cc:cf:
0e:df:72:b2:53:a0:f7:be:11:5d:1b:d6:7a:e3:76:
76:d4:a7:f9:76:52:47:ec:f9:fd:60:9e:4c:db:24:
5a:e8:ce:25:de:e6:8b:5d:de:81:2d:ab:62:a3:48:
09:a9:72:ec:68:36:73:47:e9:96:c1:96:2b:ea:25:
ef:9f:bc:b5:fe:1a:cc:41:45:29:07:3e:de:ae:76:
a8:1f:a1:96:4f:52:f6:88:e8:a3:e1:4f:71:2c:5e:
87:5d:86:5b:75:5e:20:6c:55:d3:fe:e1:09:85:14:
54:15:c9:4a:65:62:2f:27:8a:8f:63:0f:d6:c1:9a:
d9:bb:56:09:1b:88:2e:40:2e:b3:0d:62:9f:31:6c:
68:6e:c9:eb:03:73:67:02:66:19:bb:c5:b6:b4:93:
6f:c8:35:9f:6e:32:b9:bc:77:fd:24:ec:45:ee:99:
81:a4:ca:da:fe:ff:de:56:09:6f:b6:d8:70:a1:65:
f1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4D:24:28:CE:9E:E5:46:E6:E7:98:E8:D0:F3:7C:C5:A7:9B:2D:41
X509v3 Authority Key Identifier:
keyid:C3:A0:3D:28:61:96:CB:33:88:02:8B:40:47:BE:4F:1F:9B:0F:EB:AC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/tk0kKM6e5Ubm55jo0PN8xaebLUE.roa
sbgp-ipAddrBlock: critical
IPv4:
115.69.238.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:91:e9:a6:c4:0a:9d:5d:91:ea:e1:c8:c7:dc:ef:06:67:7c:
8c:30:c4:70:6f:65:ea:89:f9:7b:bb:7e:f5:d6:9d:38:03:31:
78:74:7c:53:eb:74:d6:6a:5a:40:cd:0e:f5:d9:e8:ea:7e:93:
12:2b:33:e2:94:ba:64:ef:ec:3c:61:d0:a4:b5:d5:fd:7b:c1:
9c:46:64:de:14:ee:8f:0f:c6:02:a7:0b:aa:fd:67:5b:dc:a5:
bd:3a:da:31:0c:26:cc:29:4b:97:f2:16:de:b6:7b:e2:a7:9d:
71:09:df:fa:d9:97:0b:67:4c:aa:84:69:55:40:96:92:bd:c1:
52:d7:fa:4f:4b:d7:fa:03:53:52:f9:ff:0b:af:0f:7e:28:b3:
7a:ff:28:9c:93:6a:74:ce:0c:52:bf:c7:f6:2c:48:23:db:6e:
84:60:be:9a:fd:af:2b:f7:36:13:d6:42:21:35:d1:10:40:bb:
ad:de:4b:d7:59:66:12:9b:8a:d3:0d:d2:05:db:07:7c:df:9a:
98:d4:14:6a:90:cf:fe:ce:a3:00:3e:ed:84:34:84:d3:f6:7b:
d4:7f:1f:bd:60:71:7d:11:7f:e0:13:f6:15:d5:cc:34:06:a3:
90:f4:0f:64:35:74:92:74:9e:65:fb:74:ab:cc:6e:02:48:76:
f4:18:0d:03
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzNB
MDNEMjg2MTk2Q0IzMzg4MDI4QjQwNDdCRTRGMUY5QjBGRUJBQzAeFw0yNjAzMzEw
NzI5MjNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEI2NEQyNDI4Q0U5RUU1
NDZFNkU3OThFOEQwRjM3Q0M1QTc5QjJENDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGcW92+AlHFyXsygCRbD4YNrEkLxJIQ76j5lxj6nmqZ3ElveEb
qZYw8W9QKL0grybTe2DyJ/xsldPRSpZ9pHFhjNyjLg2gHHbMzw7fcrJToPe+EV0b
1nrjdnbUp/l2Ukfs+f1gnkzbJFroziXe5otd3oEtq2KjSAmpcuxoNnNH6ZbBlivq
Je+fvLX+GsxBRSkHPt6udqgfoZZPUvaI6KPhT3EsXoddhlt1XiBsVdP+4QmFFFQV
yUplYi8nio9jD9bBmtm7VgkbiC5ALrMNYp8xbGhuyesDc2cCZhm7xba0k2/INZ9u
Mrm8d/0k7EXumYGkytr+/95WCW+22HChZfGrAgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQUtk0kKM6e5Ubm55jo0PN8xaebLUEwHwYDVR0jBBgwFoAUw6A9KGGWyzOIAotA
R75PH5sP66wwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMjA3L3c2QTlLR0dXeXpPSUFvdEFSNzVQSDVzUDY2dy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3c2QTlLR0dXeXpPSUFvdEFSNzVQ
SDVzUDY2dy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8xMDIwNy90azBrS002ZTVVYm01NWpvMFBOOHhhZWJMVUUucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAc0XuMA0GCSqGSIb3DQEBCwUA
A4IBAQCMkemmxAqdXZHq4cjH3O8GZ3yMMMRwb2Xqifl7u3711p04AzF4dHxT63TW
alpAzQ712ejqfpMSKzPilLpk7+w8YdCktdX9e8GcRmTeFO6PD8YCpwuq/Wdb3KW9
OtoxDCbMKUuX8hbetnvip51xCd/62ZcLZ0yqhGlVQJaSvcFS1/pPS9f6A1NS+f8L
rw9+KLN6/yick2p0zgxSv8f2LEgj226EYL6a/a8r9zYT1kIhNdEQQLut3kvXWWYS
m4rTDdIF2wd835qY1BRqkM/+zqMAPu2ENITT9nvUfx+9YHF9EX/gE/YV1cw0BqOQ
9A9kNXSSdJ5l+3SrzG4CSHb0GA0D
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:22 2026 by rpki-client