
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/lPfJKwg9sFx6-aXIjScDS7wgV-U.roa
File: lPfJKwg9sFx6-aXIjScDS7wgV-U.roa (raw, json)
Hash identifier: nJMUgpdjuwGNEYUQikMEAuzg/su7Xfj5MXmc3FEBAhg=
Subject key identifier: 94:F7:C9:2B:08:3D:B0:5C:7A:F9:A5:C8:8D:27:03:4B:BC:20:57:E5
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: 0135
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/lPfJKwg9sFx6-aXIjScDS7wgV-U.roa
Signing time: Tue 31 Mar 2026 07:47:44 +0000
ROA not before: Tue 31 Mar 2026 07:47:44 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 131274
IP address blocks: 61.213.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 309 (0x135)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Mar 31 07:47:44 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=94F7C92B083DB05C7AF9A5C88D27034BBC2057E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6b:5e:f9:44:8d:e7:85:fc:81:15:c8:ad:b4:
07:83:8d:20:5c:6d:68:f0:a4:b3:7a:d0:2d:11:c0:
ac:2e:f5:1a:81:13:54:95:29:94:b5:e7:e0:48:d9:
6a:5c:b4:18:01:41:3e:60:4d:c4:3f:de:41:ef:9f:
0d:9b:a0:31:dd:bf:a3:03:65:45:d0:4d:c7:83:a7:
4b:aa:16:a2:85:8b:1e:0c:fd:74:87:8a:12:c1:3d:
d7:0f:2d:d9:13:f1:9c:63:92:71:67:50:a6:9b:6d:
f7:9a:0b:29:2c:1b:10:1b:b9:77:16:8c:e3:b9:b1:
da:f1:33:bb:9e:b4:2e:58:fd:8c:a0:27:ae:4f:59:
fe:b3:a7:e5:7b:43:c9:04:2d:f8:de:09:f0:db:85:
87:df:ef:26:91:94:5a:f2:17:8c:2f:ec:52:cd:91:
c1:3f:81:a4:80:fb:28:d0:81:01:aa:d7:7c:05:e4:
25:5f:e0:1a:03:e6:40:22:0c:ca:e5:99:69:15:dd:
ea:59:9c:3f:b5:69:d6:1c:7d:31:ec:f4:40:b6:59:
8b:8d:c9:02:27:5e:05:d7:a4:f3:a6:03:79:b5:a9:
59:a0:ed:aa:19:b6:b6:f8:df:4e:c6:3f:ae:02:f0:
d1:1e:17:c3:7d:e5:35:26:6f:c9:50:af:6f:3b:e3:
e4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F7:C9:2B:08:3D:B0:5C:7A:F9:A5:C8:8D:27:03:4B:BC:20:57:E5
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/lPfJKwg9sFx6-aXIjScDS7wgV-U.roa
sbgp-ipAddrBlock: critical
IPv4:
61.213.166.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:d5:b2:04:cd:53:60:b4:41:cb:90:8c:e4:76:2b:38:bd:b5:
62:c5:da:6b:04:6f:77:c3:c5:43:31:d8:14:a8:a5:77:22:c1:
2a:97:6a:56:d3:82:e9:5e:63:87:63:5c:53:91:7b:f6:31:bb:
f7:c5:43:a4:b3:03:2e:9c:61:1e:76:a1:ff:80:53:82:30:48:
7f:f9:f6:98:fd:3b:2c:6c:1a:4d:5c:67:f4:cf:49:cb:6e:c4:
d5:8d:d5:8a:9f:3a:b0:ed:8b:fe:99:c6:54:95:b0:71:ca:70:
95:c4:b4:26:16:79:6b:b4:09:91:d4:f0:d6:07:8f:73:c5:91:
e9:c2:3b:86:69:ec:b4:ab:3c:0b:47:63:b3:ff:91:73:5e:b5:
44:64:c0:90:e3:44:e9:29:e4:2c:57:23:d2:d6:95:eb:3d:2c:
ea:ca:36:10:b3:b3:ae:84:e7:b0:4f:e5:bd:a7:21:9f:c7:42:
03:18:08:6c:66:0d:3a:ba:48:d0:69:af:46:d0:02:39:eb:c8:
15:78:58:77:c7:2c:5e:ea:68:15:b5:54:25:ec:6a:c2:15:0a:
77:a6:38:89:b2:bd:c8:1e:0b:c7:08:e9:b3:77:7c:4a:d2:ad:
25:bd:cf:1a:60:3d:a2:01:de:a0:b2:d7:bf:98:33:c7:e9:a2:
b2:08:3b:05
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICATUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0
NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNjAzMzEw
NzQ3NDRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk0RjdDOTJCMDgzREIw
NUM3QUY5QTVDODhEMjcwMzRCQkMyMDU3RTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDfa175RI3nhfyBFcittAeDjSBcbWjwpLN60C0RwKwu9RqBE1SV
KZS15+BI2WpctBgBQT5gTcQ/3kHvnw2boDHdv6MDZUXQTceDp0uqFqKFix4M/XSH
ihLBPdcPLdkT8ZxjknFnUKabbfeaCyksGxAbuXcWjOO5sdrxM7uetC5Y/YygJ65P
Wf6zp+V7Q8kELfjeCfDbhYff7yaRlFryF4wv7FLNkcE/gaSA+yjQgQGq13wF5CVf
4BoD5kAiDMrlmWkV3epZnD+1adYcfTHs9EC2WYuNyQInXgXXpPOmA3m1qVmg7aoZ
trb4307GP64C8NEeF8N95TUmb8lQr2874+QFAgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQUlPfJKwg9sFx6+aXIjScDS7wgV+UwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur
X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3
WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMDEyOC9sUGZKS3dnOXNGeDYtYVhJalNjRFM3d2dWLVUucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPdWmMA0GCSqGSIb3DQEBCwUA
A4IBAQBf1bIEzVNgtEHLkIzkdis4vbVixdprBG93w8VDMdgUqKV3IsEql2pW04Lp
XmOHY1xTkXv2Mbv3xUOkswMunGEedqH/gFOCMEh/+faY/TssbBpNXGf0z0nLbsTV
jdWKnzqw7Yv+mcZUlbBxynCVxLQmFnlrtAmR1PDWB49zxZHpwjuGaey0qzwLR2Oz
/5FzXrVEZMCQ40TpKeQsVyPS1pXrPSzqyjYQs7OuhOewT+W9pyGfx0IDGAhsZg06
ukjQaa9G0AI568gVeFh3xyxe6mgVtVQl7GrCFQp3pjiJsr3IHgvHCOmzd3xK0q0l
vc8aYD2iAd6gste/mDPH6aKyCDsF
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:30:15 2026 by rpki-client