
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12/eF_1dTyWKEE-YTe-KpzrU9wSSN4.roa
File: eF_1dTyWKEE-YTe-KpzrU9wSSN4.roa (raw, json)
Hash identifier: R8Jtl7vjlMs937JVO5t15XAuCcZgsaaqonld+zivA84=
Subject key identifier: 78:5F:F5:75:3C:96:28:41:3E:61:37:BE:2A:9C:EB:53:DC:12:48:DE
Certificate issuer: /CN=1589EECCC6718C652638CF4E92C60003C56FB697
Certificate serial: 84
Authority key identifier: 15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/eF_1dTyWKEE-YTe-KpzrU9wSSN4.roa
Signing time: Tue 31 Mar 2026 07:32:37 +0000
ROA not before: Tue 31 Mar 2026 07:32:37 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2907
IP address blocks: 202.235.128.0/18 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132 (0x84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1589EECCC6718C652638CF4E92C60003C56FB697
Validity
Not Before: Mar 31 07:32:37 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=785FF5753C9628413E6137BE2A9CEB53DC1248DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9f:cb:14:a1:d5:bd:da:a5:0e:67:e6:06:71:
2f:e5:66:78:df:53:1a:95:da:5e:2d:ec:1e:3f:57:
58:c4:2c:3c:0d:bd:f7:57:0c:9c:64:1c:c3:fe:15:
e5:ba:65:d4:39:a1:1e:fb:12:77:ed:29:75:c9:22:
4a:6d:92:6f:8f:1a:eb:74:6a:c4:f4:35:6c:15:f0:
58:e6:8e:5c:43:a3:6d:1c:e6:de:23:f3:a2:6d:67:
03:ea:c4:34:96:b2:a0:f4:a5:3e:b1:89:6f:18:16:
19:85:df:31:0c:01:ca:23:65:6c:1d:a8:13:7b:0b:
2d:70:4f:e6:66:35:1d:40:9a:c7:16:dd:b3:e4:8f:
df:f1:9e:aa:c6:5e:31:9a:6d:bc:82:98:a0:18:a1:
b0:17:5f:b9:88:ff:f5:e3:1f:d4:7f:3d:ae:8c:b8:
ba:01:86:68:24:d8:55:71:ea:44:51:67:22:b5:9c:
6d:a6:fe:14:c9:ad:95:2f:47:78:03:74:eb:6b:fa:
31:0f:ab:fc:26:63:74:37:f4:cd:58:a2:a1:52:2c:
ee:61:0d:c9:11:43:94:a2:cf:e0:a5:e8:ae:67:27:
0d:70:7d:cc:f9:f5:04:36:af:b6:e6:5a:f9:a2:6b:
29:69:25:cf:b9:7c:a3:8a:6e:b4:de:83:24:b8:f4:
8c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5F:F5:75:3C:96:28:41:3E:61:37:BE:2A:9C:EB:53:DC:12:48:DE
X509v3 Authority Key Identifier:
keyid:15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/eF_1dTyWKEE-YTe-KpzrU9wSSN4.roa
sbgp-ipAddrBlock: critical
IPv4:
202.235.128.0/18
Signature Algorithm: sha256WithRSAEncryption
71:50:b6:7b:78:74:32:b4:67:b3:5e:79:60:e1:5e:53:08:7f:
40:73:b6:24:bb:26:4d:91:84:06:0d:e1:70:fe:08:d7:6d:72:
38:57:a7:65:bc:bd:5f:7f:9b:76:e9:f1:d9:e6:41:6d:22:e7:
6a:ee:ff:25:e8:1d:28:f9:5d:61:6c:aa:02:cc:30:4a:d2:0d:
21:c1:93:1e:11:a3:26:e5:82:5c:ac:1a:1c:a0:d8:9e:25:03:
27:91:3b:5d:73:69:b2:0a:78:59:f4:76:36:59:2f:38:3f:8d:
de:b5:9a:55:fa:4b:9b:68:b4:cb:9b:0e:5e:4b:d4:09:f5:f2:
af:14:e2:0e:51:cf:67:1f:5d:b9:46:ad:f8:a2:14:1a:74:b1:
80:8c:c4:5b:ae:99:03:a0:3b:b8:ba:2b:81:4d:6f:95:d8:6c:
b4:de:ad:c6:e2:25:da:39:e4:f4:ae:58:c3:a5:50:48:ac:b2:
13:59:45:2a:3d:61:42:a3:1c:3f:e7:e7:80:57:16:f2:ef:9c:
b6:b2:98:2d:d0:06:51:e2:1a:de:2b:5a:fe:e3:99:86:03:04:
4d:e1:67:f5:2b:b2:8f:4b:dc:27:f7:c9:0d:50:fb:ef:1c:b6:
fc:2e:41:48:41:c2:80:c1:62:68:3f:c5:a3:22:d9:05:f8:7c:
7d:56:23:c1
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTU4
OUVFQ0NDNjcxOEM2NTI2MzhDRjRFOTJDNjAwMDNDNTZGQjY5NzAeFw0yNjAzMzEw
NzMyMzdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDc4NUZGNTc1M0M5NjI4
NDEzRTYxMzdCRTJBOUNFQjUzREMxMjQ4REUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCcn8sUodW92qUOZ+YGcS/lZnjfUxqV2l4t7B4/V1jELDwNvfdX
DJxkHMP+FeW6ZdQ5oR77EnftKXXJIkptkm+PGut0asT0NWwV8FjmjlxDo20c5t4j
86JtZwPqxDSWsqD0pT6xiW8YFhmF3zEMAcojZWwdqBN7Cy1wT+ZmNR1AmscW3bPk
j9/xnqrGXjGabbyCmKAYobAXX7mI//XjH9R/Pa6MuLoBhmgk2FVx6kRRZyK1nG2m
/hTJrZUvR3gDdOtr+jEPq/wmY3Q39M1YoqFSLO5hDckRQ5Siz+Cl6K5nJw1wfcz5
9QQ2r7bmWvmiaylpJc+5fKOKbrTegyS49IyHAgMBAAGjggHXMIIB0zAdBgNVHQ4E
FgQUeF/1dTyWKEE+YTe+KpzrU9wSSN4wHwYDVR0jBBgwFoAUFYnuzMZxjGUmOM9O
ksYAA8VvtpcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEyL0ZZbnV6TVp4akdVbU9NOU9rc1lBQThWdnRwYy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZZbnV6TVp4akdVbU9NOU9rc1lBQThW
dnRwYy5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF
BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8xMi9lRl8xZFR5V0tFRS1ZVGUtS3B6clU5d1NTTjQucm9hMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGyuuAMA0GCSqGSIb3DQEBCwUAA4IBAQBx
ULZ7eHQytGezXnlg4V5TCH9Ac7YkuyZNkYQGDeFw/gjXbXI4V6dlvL1ff5t26fHZ
5kFtIudq7v8l6B0o+V1hbKoCzDBK0g0hwZMeEaMm5YJcrBocoNieJQMnkTtdc2my
CnhZ9HY2WS84P43etZpV+kubaLTLmw5eS9QJ9fKvFOIOUc9nH125Rq34ohQadLGA
jMRbrpkDoDu4uiuBTW+V2Gy03q3G4iXaOeT0rljDpVBIrLITWUUqPWFCoxw/5+eA
Vxby75y2spgt0AZR4hreK1r+45mGAwRN4Wf1K7KPS9wn98kNUPvvHLb8LkFIQcKA
wWJoP8WjItkF+Hx9ViPB
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:49:40 2026 by rpki-client