
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20081/CJtFQKKIwW6KgJiiX-2vcb4jk_A.roa
File: CJtFQKKIwW6KgJiiX-2vcb4jk_A.roa (raw, json)
Hash identifier: tjPEx6uPnIv64nt8yAL/S0WtZENCLRtmIV1rfajcYuw=
Subject key identifier: 08:9B:45:40:A2:88:C1:6E:8A:80:98:A2:5F:ED:AF:71:BE:23:93:F0
Certificate issuer: /CN=049B35AACA20B630F4AD52CB598F951250FF07FD
Certificate serial: 34
Authority key identifier: 04:9B:35:AA:CA:20:B6:30:F4:AD:52:CB:59:8F:95:12:50:FF:07:FD
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/CJtFQKKIwW6KgJiiX-2vcb4jk_A.roa
Signing time: Tue 31 Mar 2026 08:42:31 +0000
ROA not before: Tue 31 Mar 2026 08:42:31 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 17529
IP address blocks: 61.213.192.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 16:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049B35AACA20B630F4AD52CB598F951250FF07FD
Validity
Not Before: Mar 31 08:42:31 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=089B4540A288C16E8A8098A25FEDAF71BE2393F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:63:cd:71:44:22:2f:fb:00:78:75:69:6d:4a:
de:9d:9a:97:8a:36:46:50:46:47:36:84:fc:7a:8f:
f9:b9:f5:0f:6e:db:c3:de:5b:3b:8a:71:ba:87:6e:
2c:a2:80:87:66:4c:ab:30:b8:4c:5f:3f:29:25:e2:
53:03:11:c7:13:cd:60:47:86:e4:5f:fb:26:ab:e7:
8a:86:20:bb:87:33:4a:4a:34:ac:99:52:ea:4b:95:
70:62:04:94:3f:3b:90:ea:4d:1a:2b:65:fb:e0:61:
fd:a8:85:c2:79:92:5f:5c:ff:bc:f0:33:90:30:fb:
ac:a6:2b:cc:d4:16:40:62:b1:88:36:63:41:91:35:
b0:d2:87:4d:b8:57:4f:73:bf:58:2d:ba:6f:87:5c:
61:48:66:b6:52:4b:c3:db:3d:24:36:e7:b2:97:fd:
34:82:2b:7e:5c:d0:07:40:8a:e4:91:22:55:97:6e:
5c:16:b1:a5:98:9c:31:4c:b1:6a:34:fb:ae:cf:ed:
5b:93:26:0e:95:cd:0f:e7:3d:a7:47:3e:5f:ae:a5:
a6:57:d0:b5:1f:43:01:9b:a5:d9:5c:b4:dc:3b:da:
fa:60:bf:3a:11:fa:98:d5:57:90:d5:fc:4b:f0:e4:
2a:34:09:4f:58:e0:91:a8:f3:7c:4c:10:a1:f4:78:
c7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9B:45:40:A2:88:C1:6E:8A:80:98:A2:5F:ED:AF:71:BE:23:93:F0
X509v3 Authority Key Identifier:
keyid:04:9B:35:AA:CA:20:B6:30:F4:AD:52:CB:59:8F:95:12:50:FF:07:FD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/CJtFQKKIwW6KgJiiX-2vcb4jk_A.roa
sbgp-ipAddrBlock: critical
IPv4:
61.213.192.0/21
Signature Algorithm: sha256WithRSAEncryption
18:2d:c4:df:75:3f:27:2d:01:bf:dc:11:9a:ed:29:88:ad:4d:
bd:bc:0e:f6:24:4c:97:72:72:62:aa:4a:6e:db:95:b0:d2:de:
26:99:1a:db:6b:92:3d:ee:3b:4c:2e:ea:9c:56:30:1a:7a:4e:
67:2a:f2:8d:96:eb:16:cc:16:5b:f8:0e:69:e9:1e:5d:06:88:
23:22:75:77:93:59:01:19:41:6d:1f:46:ff:52:db:d8:43:dc:
27:bf:9e:4a:60:65:a0:08:66:80:d2:ac:40:5c:68:a0:d5:9b:
03:b7:3c:7a:ff:b9:35:cd:d4:86:ab:04:2a:ca:c9:72:2a:22:
c6:aa:5f:3a:d8:a7:db:af:03:a3:62:fa:6d:72:fa:1c:a3:4a:
62:9b:95:e7:59:2f:e4:aa:d7:62:09:4b:2c:0f:7f:c3:6b:46:
1b:59:25:1e:aa:2d:0b:f3:8a:21:f2:66:59:ab:d3:c3:6f:6b:
19:96:89:f1:91:f2:f0:36:30:4d:8c:c8:ae:a0:66:e2:83:c1:
97:40:ed:64:48:38:44:d0:a4:67:36:11:52:8e:19:da:59:c4:
ba:1e:85:09:2a:5f:b3:3a:08:b7:92:4d:a0:4f:59:f7:4c:21:
bf:a3:b5:90:3f:18:55:be:85:9b:32:76:91:86:49:48:d8:e7:
99:db:68:8d
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBNDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwNDlC
MzVBQUNBMjBCNjMwRjRBRDUyQ0I1OThGOTUxMjUwRkYwN0ZEMB4XDTI2MDMzMTA4
NDIzMVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMDg5QjQ1NDBBMjg4QzE2
RThBODA5OEEyNUZFREFGNzFCRTIzOTNGMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANpjzXFEIi/7AHh1aW1K3p2al4o2RlBGRzaE/HqP+bn1D27bw95b
O4pxuoduLKKAh2ZMqzC4TF8/KSXiUwMRxxPNYEeG5F/7JqvnioYgu4czSko0rJlS
6kuVcGIElD87kOpNGitl++Bh/aiFwnmSX1z/vPAzkDD7rKYrzNQWQGKxiDZjQZE1
sNKHTbhXT3O/WC26b4dcYUhmtlJLw9s9JDbnspf9NIIrflzQB0CK5JEiVZduXBax
pZicMUyxajT7rs/tW5MmDpXND+c9p0c+X66lplfQtR9DAZul2Vy03Dva+mC/OhH6
mNVXkNX8S/DkKjQJT1jgkajzfEwQofR4x0kCAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBQIm0VAoojBboqAmKJf7a9xviOT8DAfBgNVHSMEGDAWgBQEmzWqyiC2MPStUstZ
j5USUP8H/TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwODEvQkpzMXFzb2d0akQwclZMTFdZLVZFbERfQl8wLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQkpzMXFzb2d0akQwclZMTFdZLVZF
bERfQl8wLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMDgxL0NKdEZRS0tJd1c2S2dKaWlYLTJ2Y2I0amtfQS5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAM91cAwDQYJKoZIhvcNAQELBQAD
ggEBABgtxN91PyctAb/cEZrtKYitTb28DvYkTJdycmKqSm7blbDS3iaZGttrkj3u
O0wu6pxWMBp6Tmcq8o2W6xbMFlv4DmnpHl0GiCMidXeTWQEZQW0fRv9S29hD3Ce/
nkpgZaAIZoDSrEBcaKDVmwO3PHr/uTXN1IarBCrKyXIqIsaqXzrYp9uvA6Ni+m1y
+hyjSmKbledZL+Sq12IJSywPf8NrRhtZJR6qLQvziiHyZlmr08NvaxmWifGR8vA2
ME2MyK6gZuKDwZdA7WRIOETQpGc2EVKOGdpZxLoehQkqX7M6CLeSTaBPWfdMIb+j
tZA/GFW+hZsydpGGSUjY55nbaI0=
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:42:39 2026 by rpki-client