
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/laN0OqkDD-Mzor5bTFexYTtYweE.roa
File: laN0OqkDD-Mzor5bTFexYTtYweE.roa (raw, json)
Hash identifier: VjqSsYW3BEBgvN0zvPGC68qXgfzNpdVxn4m+93+sO3Y=
Subject key identifier: 95:A3:74:3A:A9:03:0F:E3:33:A2:BE:5B:4C:57:B1:61:3B:58:C1:E1
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 02B3
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/laN0OqkDD-Mzor5bTFexYTtYweE.roa
Signing time: Tue 31 Mar 2026 07:34:36 +0000
ROA not before: Tue 31 Mar 2026 07:34:36 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9371
IP address blocks: 112.78.208.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 691 (0x2b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Mar 31 07:34:36 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=95A3743AA9030FE333A2BE5B4C57B1613B58C1E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a1:3d:df:de:18:6b:c9:cc:21:93:aa:e7:07:
04:c2:63:41:d5:52:81:e7:2b:2f:57:49:37:61:d4:
8b:c8:9b:00:4f:ce:db:c4:b9:48:36:01:44:37:2f:
c5:15:7e:ae:27:a8:e3:df:88:fc:31:4f:c8:69:19:
2c:ad:eb:69:20:1c:a8:00:60:65:a0:19:64:cc:ab:
95:ed:68:77:3a:e5:86:93:63:43:ef:a4:45:1b:82:
25:91:59:ed:20:d1:bf:7a:b2:f6:28:33:3a:9a:a6:
49:4c:9d:5a:50:06:d4:f0:ff:d3:8c:98:70:41:c1:
3b:04:33:18:58:b5:ed:4a:98:cc:5c:e7:37:34:58:
3d:e7:bc:c3:48:e0:8b:b6:e0:b9:19:fd:51:56:38:
31:7e:c9:26:74:81:94:53:a9:39:bf:9c:42:7e:ef:
93:6c:95:75:0e:8b:58:a8:85:14:a7:16:8b:16:72:
c9:1f:07:a2:a5:79:61:16:7d:11:22:d8:a9:ad:a7:
c5:81:10:bf:5f:f4:03:86:4c:8e:98:13:53:df:1a:
03:e9:8e:1c:b1:19:86:85:fe:77:8e:d4:a9:f9:58:
5f:c6:42:9f:ac:fb:01:2f:a3:07:77:c7:17:7a:a9:
5c:0c:6f:8b:69:dd:4d:26:24:3e:cb:1a:a6:d1:a3:
d3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A3:74:3A:A9:03:0F:E3:33:A2:BE:5B:4C:57:B1:61:3B:58:C1:E1
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/laN0OqkDD-Mzor5bTFexYTtYweE.roa
sbgp-ipAddrBlock: critical
IPv4:
112.78.208.0/21
Signature Algorithm: sha256WithRSAEncryption
ac:9b:ba:61:0c:cf:19:c1:33:26:39:9a:40:17:f5:d6:69:a1:
13:22:aa:54:1b:44:ce:75:b1:6f:e8:21:d4:9e:c9:6f:c0:55:
c6:ca:58:5f:1e:4c:8f:0e:f8:68:47:40:e4:6b:a6:dc:cb:31:
59:c6:1f:20:db:48:7b:05:93:67:0f:49:f5:6a:9c:fe:b5:13:
aa:36:da:89:e5:84:e1:36:be:5d:20:8c:93:26:59:92:fb:90:
a1:2e:1f:6e:50:7b:e8:c6:b7:43:06:e1:e2:bc:34:b4:5c:06:
02:cb:6d:32:cd:51:e1:c1:ef:d5:1e:47:dc:70:db:b4:86:13:
53:98:b0:6e:7d:61:4a:b9:48:7c:9b:52:fc:24:17:ac:50:9e:
26:30:2c:eb:9a:59:a5:7e:a0:3e:8a:50:2f:72:59:56:d2:06:
1f:13:af:7a:d7:b8:29:a4:db:42:7d:ba:3d:b6:c0:3b:82:31:
53:2e:b3:0d:84:54:43:dd:3e:a5:6d:e9:ff:f7:11:81:6f:21:
b8:33:19:29:ab:59:21:67:6c:b4:dc:65:5f:fe:c2:a9:7f:16:
cb:25:78:1d:dc:5d:43:71:fc:67:1e:4b:b8:9c:ce:a4:b9:d6:
24:79:32:0b:7f:2e:22:61:89:f3:53:74:cd:d4:fe:53:69:f0:
f8:98:42:c4
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICArMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz
MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yNjAzMzEw
NzM0MzZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk1QTM3NDNBQTkwMzBG
RTMzM0EyQkU1QjRDNTdCMTYxM0I1OEMxRTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAoT3f3hhrycwhk6rnBwTCY0HVUoHnKy9XSTdh1IvImwBPztvE
uUg2AUQ3L8UVfq4nqOPfiPwxT8hpGSyt62kgHKgAYGWgGWTMq5XtaHc65YaTY0Pv
pEUbgiWRWe0g0b96svYoMzqapklMnVpQBtTw/9OMmHBBwTsEMxhYte1KmMxc5zc0
WD3nvMNI4Iu24LkZ/VFWODF+ySZ0gZRTqTm/nEJ+75NslXUOi1iohRSnFosWcskf
B6KleWEWfREi2Kmtp8WBEL9f9AOGTI6YE1PfGgPpjhyxGYaF/neO1Kn5WF/GQp+s
+wEvowd3xxd6qVwMb4tp3U0mJD7LGqbRo9O9AgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQUlaN0OqkDD+Mzor5bTFexYTtYweEwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK
PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG
RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8xMDI0Ny9sYU4wT3FrREQtTXpvcjViVEZleFlUdFl3ZUUucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDcE7QMA0GCSqGSIb3DQEBCwUA
A4IBAQCsm7phDM8ZwTMmOZpAF/XWaaETIqpUG0TOdbFv6CHUnslvwFXGylhfHkyP
DvhoR0Dka6bcyzFZxh8g20h7BZNnD0n1apz+tROqNtqJ5YThNr5dIIyTJlmS+5Ch
Lh9uUHvoxrdDBuHivDS0XAYCy20yzVHhwe/VHkfccNu0hhNTmLBufWFKuUh8m1L8
JBesUJ4mMCzrmlmlfqA+ilAvcllW0gYfE69617gppNtCfbo9tsA7gjFTLrMNhFRD
3T6lben/9xGBbyG4Mxkpq1khZ2y03GVf/sKpfxbLJXgd3F1DcfxnHku4nM6kudYk
eTILfy4iYYnzU3TN1P5TafD4mELE
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:36:06 2026 by rpki-client