
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/QcqwPmXGg9j0Y0fXnV1ksuJYiSY.roa
File: QcqwPmXGg9j0Y0fXnV1ksuJYiSY.roa (raw, json)
Hash identifier: uRsh++YXh/SjzF6IfhItxsw2eGElQo1ITDPJBjOTctE=
Subject key identifier: 41:CA:B0:3E:65:C6:83:D8:F4:63:47:D7:9D:5D:64:B2:E2:58:89:26
Certificate issuer: /CN=67018B4DFE54BD644E000641A234B471DB20B892
Certificate serial: C9
Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/QcqwPmXGg9j0Y0fXnV1ksuJYiSY.roa
Signing time: Tue 31 Mar 2026 07:27:22 +0000
ROA not before: Tue 31 Mar 2026 07:27:22 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 7521
IP address blocks: 210.173.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201 (0xc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892
Validity
Not Before: Mar 31 07:27:22 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=41CAB03E65C683D8F46347D79D5D64B2E2588926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b9:f5:88:45:72:7d:e1:e4:13:c0:38:d9:32:
44:d4:1d:91:f5:12:f1:cc:e3:01:60:66:3c:e7:de:
a7:b3:f0:9b:a7:32:1e:d0:7d:05:54:f1:53:94:13:
a2:d7:08:03:d5:0b:c3:8c:01:96:c4:15:d2:03:5b:
2a:b5:33:25:e4:97:f2:ee:68:6b:43:fa:f3:9e:e2:
77:94:85:e3:97:f9:43:8a:e9:e1:f4:50:22:63:53:
38:8a:eb:88:5c:af:6f:4e:7a:0e:60:62:e5:57:52:
4a:ed:dd:8b:00:d4:94:cc:45:cb:ec:86:80:9a:20:
3a:dc:66:a0:8b:cb:7e:d3:27:ed:0b:bf:9d:f3:fd:
79:89:cf:9a:93:78:07:50:39:69:fe:bf:71:7c:21:
36:a3:36:49:38:40:3e:fa:8a:73:3a:67:c6:74:d7:
58:cc:6c:e0:90:41:ed:24:20:63:d7:bf:8e:1f:c6:
1f:94:5c:9c:a3:71:c7:19:46:41:92:8e:99:c9:00:
da:9e:4e:20:a5:3b:2f:0f:46:94:a0:6b:53:7d:cb:
61:41:f3:83:46:18:7e:60:09:09:80:53:35:d6:4a:
10:60:fb:4f:2c:6f:c5:52:c2:cf:c4:99:5d:7c:3e:
9a:bf:85:15:98:e6:e3:57:97:52:95:8b:68:06:95:
cd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CA:B0:3E:65:C6:83:D8:F4:63:47:D7:9D:5D:64:B2:E2:58:89:26
X509v3 Authority Key Identifier:
keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/QcqwPmXGg9j0Y0fXnV1ksuJYiSY.roa
sbgp-ipAddrBlock: critical
IPv4:
210.173.160.0/19
Signature Algorithm: sha256WithRSAEncryption
99:68:7a:db:3a:23:42:31:2e:11:a3:d3:74:8d:a0:0d:db:32:
c0:77:50:5b:5d:98:03:3a:5b:55:3c:d3:e1:b0:f9:37:3d:78:
fd:2c:36:8b:11:47:7a:98:4c:94:b6:8e:6b:7c:7b:d5:91:a0:
b1:8e:91:00:c9:4b:62:ac:de:d5:21:3a:60:ea:b1:b0:f2:5c:
16:18:f5:cf:26:28:4b:e6:1b:15:f4:54:e2:90:e8:ee:f7:03:
61:08:95:10:7f:dd:35:a9:a1:eb:18:24:a6:fa:ce:5f:5a:52:
b4:74:d9:6c:36:4d:d8:79:88:95:16:5c:44:3d:53:3c:de:f5:
3c:91:63:f1:7d:82:7d:47:2f:77:d5:cd:63:f7:be:be:dd:5f:
ac:6e:3d:ea:22:1e:39:77:d4:e5:f4:ad:b1:4e:aa:32:2b:e3:
55:0c:25:86:8d:22:11:e0:82:0b:d3:ce:d1:94:bc:7f:92:60:
c1:de:c6:e3:75:86:f7:0c:6e:4c:59:40:83:26:dd:ed:cf:7f:
51:c4:40:f0:36:67:9f:15:1b:6d:fd:d8:dc:78:f5:e5:84:91:
f9:68:70:a4:45:d0:74:58:b2:d7:86:a7:fa:60:62:c9:0b:02:
a1:e4:02:94:73:29:12:83:da:64:a8:84:31:0b:2a:10:04:94:
69:30:f4:e7
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjcw
MThCNERGRTU0QkQ2NDRFMDAwNjQxQTIzNEI0NzFEQjIwQjg5MjAeFw0yNjAzMzEw
NzI3MjJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQxQ0FCMDNFNjVDNjgz
RDhGNDYzNDdENzlENUQ2NEIyRTI1ODg5MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDufWIRXJ94eQTwDjZMkTUHZH1EvHM4wFgZjzn3qez8JunMh7Q
fQVU8VOUE6LXCAPVC8OMAZbEFdIDWyq1MyXkl/LuaGtD+vOe4neUheOX+UOK6eH0
UCJjUziK64hcr29Oeg5gYuVXUkrt3YsA1JTMRcvshoCaIDrcZqCLy37TJ+0Lv53z
/XmJz5qTeAdQOWn+v3F8ITajNkk4QD76inM6Z8Z011jMbOCQQe0kIGPXv44fxh+U
XJyjcccZRkGSjpnJANqeTiClOy8PRpSga1N9y2FB84NGGH5gCQmAUzXWShBg+08s
b8VSws/EmV18Ppq/hRWY5uNXl1KVi2gGlc2JAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUQcqwPmXGg9j0Y0fXnV1ksuJYiSYwHwYDVR0jBBgwFoAUZwGLTf5UvWROAAZB
ojS0cdsguJIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwNy9ad0dMVGY1VXZXUk9BQVpCb2pTMGNkc2d1SkkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9ad0dMVGY1VXZXUk9BQVpCb2pTMGNk
c2d1SkkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMjA3L1FjcXdQbVhHZzlqMFkwZlhuVjFrc3VKWWlTWS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXSraAwDQYJKoZIhvcNAQELBQADggEB
AJloets6I0IxLhGj03SNoA3bMsB3UFtdmAM6W1U80+Gw+Tc9eP0sNosRR3qYTJS2
jmt8e9WRoLGOkQDJS2Ks3tUhOmDqsbDyXBYY9c8mKEvmGxX0VOKQ6O73A2EIlRB/
3TWpoesYJKb6zl9aUrR02Ww2Tdh5iJUWXEQ9Uzze9TyRY/F9gn1HL3fVzWP3vr7d
X6xuPeoiHjl31OX0rbFOqjIr41UMJYaNIhHgggvTztGUvH+SYMHexuN1hvcMbkxZ
QIMm3e3Pf1HEQPA2Z58VG2392Nx49eWEkflocKRF0HRYsteGp/pgYskLAqHkApRz
KRKD2mSohDELKhAElGkw9Oc=
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:18:19 2026 by rpki-client