
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20250/Hwp12BnVa8T9EGtoKcfBISvmwys.roa
File: Hwp12BnVa8T9EGtoKcfBISvmwys.roa (raw, json)
Hash identifier: p1IObtWpcX0K5b7f/1RAekirGBh13TGtNxhqa4S8aHA=
Subject key identifier: 1F:0A:75:D8:19:D5:6B:C4:FD:10:6B:68:29:C7:C1:21:2B:E6:C3:2B
Certificate issuer: /CN=89FF1AE864ABF9F12614E3076404F556D56FFA82
Certificate serial: 21
Authority key identifier: 89:FF:1A:E8:64:AB:F9:F1:26:14:E3:07:64:04:F5:56:D5:6F:FA:82
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/if8a6GSr-fEmFOMHZAT1VtVv-oI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/Hwp12BnVa8T9EGtoKcfBISvmwys.roa
Signing time: Tue 31 Mar 2026 08:38:13 +0000
ROA not before: Tue 31 Mar 2026 08:38:13 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 59106
IP address blocks: 210.171.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/if8a6GSr-fEmFOMHZAT1VtVv-oI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89FF1AE864ABF9F12614E3076404F556D56FFA82
Validity
Not Before: Mar 31 08:38:13 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=1F0A75D819D56BC4FD106B6829C7C1212BE6C32B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:02:98:6a:d7:e7:a4:f9:4c:c6:08:08:08:cb:
b9:77:2d:3f:5f:e7:63:c3:3b:c0:3e:92:8b:c4:3a:
90:ab:09:45:8e:b1:38:52:7c:30:32:12:32:13:8f:
3a:d0:db:73:a2:5e:47:03:41:0a:ee:01:4c:d3:6c:
33:5b:b8:4e:12:99:8d:0d:bc:05:b4:67:5f:6d:45:
3d:eb:2f:69:7c:a0:ab:e4:8b:80:e0:77:67:03:71:
36:32:48:4a:75:05:f8:6f:10:05:2b:99:fe:0e:fc:
b3:29:4a:44:7a:3a:b8:bc:89:97:97:73:dd:71:36:
be:2f:1b:71:ae:b3:f7:22:5e:ab:03:d0:40:9c:a2:
86:31:c2:d2:87:fe:47:ca:e2:e9:52:6d:18:72:32:
c1:bb:9a:d3:64:d2:d7:36:09:60:5a:c2:7c:a5:a6:
5f:30:9e:f9:db:2d:d8:ac:c3:6d:56:8d:fb:61:28:
de:ef:62:90:63:34:9d:a9:9a:fb:46:6a:c5:84:c3:
6c:9b:85:5c:80:99:fa:d8:a2:88:4e:93:d8:97:94:
4b:24:ba:84:9a:93:03:4e:fa:de:b1:c0:f8:25:1f:
a4:e6:b8:8b:3b:d7:48:4f:12:3c:f8:26:a0:ed:d5:
17:75:d6:24:02:63:bc:78:04:14:29:81:c3:ba:de:
72:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0A:75:D8:19:D5:6B:C4:FD:10:6B:68:29:C7:C1:21:2B:E6:C3:2B
X509v3 Authority Key Identifier:
keyid:89:FF:1A:E8:64:AB:F9:F1:26:14:E3:07:64:04:F5:56:D5:6F:FA:82
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/if8a6GSr-fEmFOMHZAT1VtVv-oI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/Hwp12BnVa8T9EGtoKcfBISvmwys.roa
sbgp-ipAddrBlock: critical
IPv4:
210.171.160.0/20
Signature Algorithm: sha256WithRSAEncryption
4e:44:1f:32:15:6e:b1:dd:a3:90:fe:e9:96:82:93:11:eb:a3:
3b:8e:36:82:bc:cc:d8:f1:a3:77:a8:a1:72:6c:78:72:e4:af:
8b:b2:6f:a7:fa:a8:4a:4f:57:7d:c2:7a:a6:c0:f8:44:ea:4f:
79:1e:11:71:b7:21:05:0c:45:d3:4f:d4:17:91:ef:69:4f:0a:
85:14:20:10:15:67:2b:94:78:7a:12:54:68:b6:8a:da:4d:a7:
29:e6:e8:0b:d5:35:9e:9a:7f:a9:38:56:b1:64:b2:89:31:f4:
3e:37:6c:f6:2b:b4:15:85:44:ea:e1:79:42:94:26:69:2d:80:
64:98:ec:9d:44:17:80:15:20:e2:55:a7:51:61:1a:ca:72:ea:
82:42:56:5f:f3:cc:d4:e9:0a:1a:88:65:7e:be:ab:08:b1:83:
de:c2:99:5d:44:60:ce:e5:aa:b7:7e:da:41:2f:e0:59:20:5d:
d5:6d:07:0b:81:65:79:e6:84:5e:70:75:fb:43:ee:78:34:8f:
01:3c:9b:b9:ae:c1:75:2b:2c:e4:f0:59:0e:af:ec:36:7f:b6:
14:13:f5:90:30:57:74:f4:5e:a4:c6:38:8c:dd:01:b8:a2:0f:
e6:f3:42:5f:d3:41:d0:66:64:11:82:c6:2f:51:67:1e:b2:b0:
33:f9:8e:32
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBITANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4OUZG
MUFFODY0QUJGOUYxMjYxNEUzMDc2NDA0RjU1NkQ1NkZGQTgyMB4XDTI2MDMzMTA4
MzgxM1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMUYwQTc1RDgxOUQ1NkJD
NEZEMTA2QjY4MjlDN0MxMjEyQkU2QzMyQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOUCmGrX56T5TMYICAjLuXctP1/nY8M7wD6Si8Q6kKsJRY6xOFJ8
MDISMhOPOtDbc6JeRwNBCu4BTNNsM1u4ThKZjQ28BbRnX21FPesvaXygq+SLgOB3
ZwNxNjJISnUF+G8QBSuZ/g78sylKRHo6uLyJl5dz3XE2vi8bca6z9yJeqwPQQJyi
hjHC0of+R8ri6VJtGHIywbua02TS1zYJYFrCfKWmXzCe+dst2KzDbVaN+2Eo3u9i
kGM0nama+0ZqxYTDbJuFXICZ+tiiiE6T2JeUSyS6hJqTA0763rHA+CUfpOa4izvX
SE8SPPgmoO3VF3XWJAJjvHgEFCmBw7reclkCAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBQfCnXYGdVrxP0Qa2gpx8EhK+bDKzAfBgNVHSMEGDAWgBSJ/xroZKv58SYU4wdk
BPVW1W/6gjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAyNTAvaWY4YTZHU3ItZkVtRk9NSFpBVDFWdFZ2LW9JLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvaWY4YTZHU3ItZkVtRk9NSFpBVDFW
dFZ2LW9JLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMjUwL0h3cDEyQm5WYThUOUVHdG9LY2ZCSVN2bXd5cy5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATSq6AwDQYJKoZIhvcNAQELBQAD
ggEBAE5EHzIVbrHdo5D+6ZaCkxHrozuONoK8zNjxo3eooXJseHLkr4uyb6f6qEpP
V33CeqbA+ETqT3keEXG3IQUMRdNP1BeR72lPCoUUIBAVZyuUeHoSVGi2itpNpynm
6AvVNZ6af6k4VrFksokx9D43bPYrtBWFROrheUKUJmktgGSY7J1EF4AVIOJVp1Fh
Gspy6oJCVl/zzNTpChqIZX6+qwixg97CmV1EYM7lqrd+2kEv4FkgXdVtBwuBZXnm
hF5wdftD7ng0jwE8m7muwXUrLOTwWQ6v7DZ/thQT9ZAwV3T0XqTGOIzdAbiiD+bz
Ql/TQdBmZBGCxi9RZx6ysDP5jjI=
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:29:16 2026 by rpki-client