
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/LOgdC3gqZOI4XE69Q-MrSrGy8O0.roa
File: LOgdC3gqZOI4XE69Q-MrSrGy8O0.roa (raw, json)
Hash identifier: DhSY1G3qsW4xxEAoLQgoVggVCnZSIMa/K3Yf6/awtG4=
Subject key identifier: 2C:E8:1D:0B:78:2A:64:E2:38:5C:4E:BD:43:E3:2B:4A:B1:B2:F0:ED
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: 0130
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/LOgdC3gqZOI4XE69Q-MrSrGy8O0.roa
Signing time: Tue 31 Mar 2026 07:47:42 +0000
ROA not before: Tue 31 Mar 2026 07:47:42 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 24319
IP address blocks: 124.40.52.208/28 maxlen: 28
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 304 (0x130)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Mar 31 07:47:42 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=2CE81D0B782A64E2385C4EBD43E32B4AB1B2F0ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4e:24:ce:0d:97:66:85:5a:de:75:b4:78:d4:
45:07:60:4e:75:16:c2:ad:1c:3e:07:5f:2b:5a:d5:
6e:32:64:b5:58:39:40:15:5d:8d:ed:4e:0c:2e:3f:
5a:f4:dd:ac:9e:bd:2d:f6:cd:ca:db:a4:c6:fb:80:
e1:1f:ce:b2:aa:1f:4f:af:1c:9f:49:a9:81:9e:4a:
18:2d:35:82:e2:e6:0a:b4:80:b2:c4:66:26:f8:12:
c8:5c:a7:1a:e7:af:81:7a:34:90:21:44:f2:46:fc:
b0:f8:00:64:11:e0:1e:04:45:fd:56:30:38:ce:0a:
aa:0b:42:d3:01:9a:49:24:2d:e0:4e:14:c5:4c:bd:
c5:4b:b1:ed:d3:05:f6:9c:61:f9:b6:6c:ab:19:64:
4a:e2:4b:9d:50:a4:13:77:18:f6:55:bd:08:67:89:
0c:d1:ea:a8:65:44:e6:56:45:d4:62:4f:eb:5a:a7:
90:29:c9:ed:7c:04:a4:ae:94:73:e7:00:b9:1e:b0:
ec:fa:6e:1c:45:6c:8f:38:28:4b:ab:27:a3:35:16:
ce:59:2b:da:d3:c3:63:ab:be:e2:ef:a4:5f:67:45:
90:78:ea:92:d2:29:bd:97:b4:0e:0a:eb:0b:21:ec:
07:32:90:36:67:4f:12:4d:c1:ae:c7:1f:10:73:62:
6c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E8:1D:0B:78:2A:64:E2:38:5C:4E:BD:43:E3:2B:4A:B1:B2:F0:ED
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/LOgdC3gqZOI4XE69Q-MrSrGy8O0.roa
sbgp-ipAddrBlock: critical
IPv4:
124.40.52.208/28
Signature Algorithm: sha256WithRSAEncryption
30:b8:75:8f:0b:48:3a:48:9a:c0:d4:d3:25:a4:a1:a4:56:3a:
68:0a:ec:db:47:ae:2e:82:0f:b5:d2:33:59:2f:8f:1f:f8:22:
5f:0f:e8:69:07:5e:90:99:ca:19:28:10:49:66:37:83:55:f9:
65:37:88:40:b4:6e:2a:a1:3c:86:3c:61:df:d0:d2:76:b0:2a:
1f:d5:1b:b2:b8:38:fc:7c:aa:ec:a8:33:04:3c:37:02:39:2a:
cf:8e:43:5f:02:1d:36:71:e0:f8:68:fe:41:13:af:99:e9:3e:
d8:54:d4:c0:72:9a:eb:27:39:78:be:d9:6b:17:93:89:4b:18:
3b:9c:85:66:3d:5b:68:56:a6:ec:4d:11:38:cc:8a:30:e4:6f:
43:de:04:2b:f7:61:25:75:49:fc:1d:85:a3:04:fd:09:f2:56:
ed:e7:0a:9e:3e:e6:d8:5c:40:d8:ef:7d:b9:fe:ab:ca:bf:a3:
4b:b2:16:d6:49:8a:e9:5d:45:11:be:6f:17:36:3c:6e:db:22:
17:c9:5b:7f:b4:e8:0b:dd:66:5b:d9:da:bd:76:50:ea:7b:8b:
2c:d6:99:16:49:b7:3c:25:a5:05:f9:e5:8b:0d:1d:e0:9c:e0:
5f:a4:7e:b0:75:c2:e5:98:ec:d1:d0:06:56:33:1a:05:18:54:
16:ec:64:7c
-----BEGIN CERTIFICATE-----
MIIEwjCCA6qgAwIBAgICATAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0
NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNjAzMzEw
NzQ3NDJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJDRTgxRDBCNzgyQTY0
RTIzODVDNEVCRDQzRTMyQjRBQjFCMkYwRUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1TiTODZdmhVredbR41EUHYE51FsKtHD4HXyta1W4yZLVYOUAV
XY3tTgwuP1r03ayevS32zcrbpMb7gOEfzrKqH0+vHJ9JqYGeShgtNYLi5gq0gLLE
Zib4Eshcpxrnr4F6NJAhRPJG/LD4AGQR4B4ERf1WMDjOCqoLQtMBmkkkLeBOFMVM
vcVLse3TBfacYfm2bKsZZEriS51QpBN3GPZVvQhniQzR6qhlROZWRdRiT+tap5Ap
ye18BKSulHPnALkesOz6bhxFbI84KEurJ6M1Fs5ZK9rTw2OrvuLvpF9nRZB46pLS
Kb2XtA4K6wsh7AcykDZnTxJNwa7HHxBzYmwVAgMBAAGjggHeMIIB2jAdBgNVHQ4E
FgQULOgdC3gqZOI4XE69Q+MrSrGy8O0wHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur
X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3
WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMDEyOC9MT2dkQzNncVpPSTRYRTY5US1NclNyR3k4TzAucm9h
MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEfCg00DANBgkqhkiG9w0BAQsF
AAOCAQEAMLh1jwtIOkiawNTTJaShpFY6aArs20euLoIPtdIzWS+PH/giXw/oaQde
kJnKGSgQSWY3g1X5ZTeIQLRuKqE8hjxh39DSdrAqH9Ubsrg4/Hyq7KgzBDw3Ajkq
z45DXwIdNnHg+Gj+QROvmek+2FTUwHKa6yc5eL7ZaxeTiUsYO5yFZj1baFam7E0R
OMyKMORvQ94EK/dhJXVJ/B2FowT9CfJW7ecKnj7m2FxA2O99uf6ryr+jS7IW1kmK
6V1FEb5vFzY8btsiF8lbf7ToC91mW9navXZQ6nuLLNaZFkm3PCWlBfnliw0d4Jzg
X6R+sHXC5Zjs0dAGVjMaBRhUFuxkfA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:25:29 2026 by rpki-client