
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/yO-yQ4z0Uc6vYrBSFoDO6QTZxQ0.roa
File: yO-yQ4z0Uc6vYrBSFoDO6QTZxQ0.roa (raw, json)
Hash identifier: SKX0TSy/6VTfPPmBeG4adtY9POjGIsUxvBvAG6JkLxA=
Subject key identifier: C8:EF:B2:43:8C:F4:51:CE:AF:62:B0:52:16:80:CE:E9:04:D9:C5:0D
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 02AA
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/yO-yQ4z0Uc6vYrBSFoDO6QTZxQ0.roa
Signing time: Tue 31 Mar 2026 07:34:33 +0000
ROA not before: Tue 31 Mar 2026 07:34:33 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9371
IP address blocks: 210.188.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 682 (0x2aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Mar 31 07:34:33 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=C8EFB2438CF451CEAF62B0521680CEE904D9C50D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b8:45:5c:45:14:f8:02:b0:a4:fc:07:f3:cc:
92:79:ba:28:e7:f5:92:f1:b2:a7:fb:ca:ac:15:4e:
db:49:9f:5f:f6:58:cc:aa:13:72:cd:c1:fb:76:93:
0a:a3:26:b5:34:d1:e5:35:bb:e3:1a:00:70:ee:fd:
fa:bc:be:75:52:6e:45:e9:1d:ed:ac:ef:76:4f:9c:
38:cd:4f:67:13:3c:2e:67:06:c7:83:5a:df:f4:e1:
94:c2:ca:eb:0e:22:fc:1e:ae:56:68:f0:77:f5:28:
2a:f8:c4:e8:9b:01:4f:d1:1e:db:1f:f2:14:80:29:
6f:98:a9:32:be:2a:69:af:15:47:10:96:52:b8:50:
c9:a3:51:9d:8e:e2:5f:8e:9a:a5:a8:7a:f3:1d:e3:
fd:89:2e:e9:63:b3:fb:63:b7:00:e9:5d:88:03:66:
73:d4:b7:4c:ea:cc:99:73:be:d0:05:8e:a7:38:c3:
58:9e:b2:22:24:ac:23:6c:7a:5a:b8:a0:87:43:95:
94:95:8e:ae:ee:c4:1e:0f:c7:ad:fa:59:4f:1d:06:
75:3e:85:7c:62:f2:95:1f:a1:b7:f6:89:62:8b:3d:
e9:9a:cb:c1:c7:54:c2:fb:bd:5b:51:ab:7e:f6:dd:
e3:6e:83:21:6e:1e:df:a6:19:3e:64:38:d9:03:8d:
c3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:EF:B2:43:8C:F4:51:CE:AF:62:B0:52:16:80:CE:E9:04:D9:C5:0D
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/yO-yQ4z0Uc6vYrBSFoDO6QTZxQ0.roa
sbgp-ipAddrBlock: critical
IPv4:
210.188.192.0/20
Signature Algorithm: sha256WithRSAEncryption
b6:4f:9d:5d:1f:f9:88:a7:c7:2a:7a:8b:ca:bd:5c:df:1d:57:
7e:ad:f3:2d:e3:0a:2b:30:37:da:67:38:b9:8c:21:d9:c3:76:
be:37:d4:46:82:ef:36:9d:19:fd:a3:fa:80:3f:5d:09:df:6b:
fe:cd:37:12:9f:a0:52:9e:c2:02:47:d1:a9:0f:c1:4a:d3:0e:
f2:3d:51:0f:d7:d9:20:2b:b9:b1:82:da:7d:4a:c8:b5:a2:08:
b4:fe:5a:0e:e1:aa:33:36:57:02:91:5a:f0:fa:1f:72:c3:92:
85:6b:3e:76:6c:fa:f2:f7:c2:21:bb:c6:b6:0e:f2:ee:38:5a:
bf:34:84:60:90:2b:36:36:8d:67:68:10:bd:b2:46:15:2e:ce:
f3:81:f6:4f:e0:1f:6d:be:d2:16:68:56:64:aa:4a:7b:eb:6d:
87:fb:61:46:c2:2f:4c:6d:35:59:95:3f:7d:1e:7a:20:bd:96:
d0:fd:2c:65:29:ac:55:b9:95:e2:d2:ef:42:39:a8:db:44:e3:
53:14:21:f3:76:ac:ad:69:76:b4:cb:aa:83:80:8e:af:f9:82:
18:93:99:67:1d:16:cd:23:0b:f5:e7:68:0b:a2:32:ec:a2:94:
17:ca:b2:59:63:4b:da:1d:31:9e:1f:96:3b:75:07:2b:95:6f:
fb:f2:0a:73
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICAqowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz
MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yNjAzMzEw
NzM0MzNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM4RUZCMjQzOENGNDUx
Q0VBRjYyQjA1MjE2ODBDRUU5MDREOUM1MEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpuEVcRRT4ArCk/AfzzJJ5uijn9ZLxsqf7yqwVTttJn1/2WMyq
E3LNwft2kwqjJrU00eU1u+MaAHDu/fq8vnVSbkXpHe2s73ZPnDjNT2cTPC5nBseD
Wt/04ZTCyusOIvwerlZo8Hf1KCr4xOibAU/RHtsf8hSAKW+YqTK+KmmvFUcQllK4
UMmjUZ2O4l+OmqWoevMd4/2JLuljs/tjtwDpXYgDZnPUt0zqzJlzvtAFjqc4w1ie
siIkrCNselq4oIdDlZSVjq7uxB4Px636WU8dBnU+hXxi8pUfobf2iWKLPemay8HH
VML7vVtRq3723eNugyFuHt+mGT5kONkDjcPbAgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQUyO+yQ4z0Uc6vYrBSFoDO6QTZxQ0wHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK
PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG
RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8xMDI0Ny95Ty15UTR6MFVjNnZZckJTRm9ETzZRVFp4UTAucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0rzAMA0GCSqGSIb3DQEBCwUA
A4IBAQC2T51dH/mIp8cqeovKvVzfHVd+rfMt4worMDfaZzi5jCHZw3a+N9RGgu82
nRn9o/qAP10J32v+zTcSn6BSnsICR9GpD8FK0w7yPVEP19kgK7mxgtp9Ssi1ogi0
/loO4aozNlcCkVrw+h9yw5KFaz52bPry98Ihu8a2DvLuOFq/NIRgkCs2No1naBC9
skYVLs7zgfZP4B9tvtIWaFZkqkp7622H+2FGwi9MbTVZlT99HnogvZbQ/SxlKaxV
uZXi0u9COajbRONTFCHzdqytaXa0y6qDgI6v+YIYk5lnHRbNIwv152gLojLsopQX
yrJZY0vaHTGeH5Y7dQcrlW/78gpz
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:59:57 2026 by rpki-client