
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/232/25mSffADTDEwUH0INQB7EcKqZuc.roa
File: 25mSffADTDEwUH0INQB7EcKqZuc.roa (raw, json)
Hash identifier: 1LZHuonsA2UFU+rNcGn2uglwZVxd63g5fx39UmJ5tZA=
Subject key identifier: DB:99:92:7D:F0:03:4C:31:30:50:7D:08:35:00:7B:11:C2:AA:66:E7
Certificate issuer: /CN=2222A4C3961E467181A78700B960718846C8404B
Certificate serial: 5D
Authority key identifier: 22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/25mSffADTDEwUH0INQB7EcKqZuc.roa
Signing time: Tue 31 Mar 2026 08:16:32 +0000
ROA not before: Tue 31 Mar 2026 08:16:32 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 7672
IP address blocks: 110.232.224.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 16:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2222A4C3961E467181A78700B960718846C8404B
Validity
Not Before: Mar 31 08:16:32 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=DB99927DF0034C3130507D0835007B11C2AA66E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b9:03:10:9d:d0:80:36:9e:f8:63:5e:47:4f:
65:0b:a1:22:54:44:90:d7:39:21:6e:1e:51:fa:ec:
e9:22:7b:aa:ee:0e:d7:9f:74:9f:ca:3e:06:d8:b8:
a5:a4:c0:d4:72:27:6e:0d:f7:09:44:47:0e:cd:be:
b2:82:a6:7a:1f:9a:ee:7e:af:9c:e3:b6:bd:76:2d:
e7:7f:f1:03:14:dd:2e:b3:7f:5e:1b:a9:5f:9b:17:
c1:7b:5d:b6:a7:ef:bc:b9:f1:bd:af:69:37:df:5a:
54:25:7c:2c:b5:90:95:75:95:ba:20:6e:8b:61:54:
a5:86:bb:bf:94:27:8b:c7:4d:d2:2c:3d:89:69:12:
28:1f:e6:d4:35:6d:55:62:2f:17:d6:c7:73:12:4a:
56:f1:fb:48:b8:d3:8a:a7:e1:89:ff:10:0c:72:89:
0a:70:46:4d:86:32:94:df:31:3c:71:be:ef:fc:59:
1f:e5:08:09:96:4b:d3:25:53:13:eb:e0:c9:ab:0f:
50:fb:e7:07:17:bf:2e:38:ef:65:b6:1a:29:8a:a9:
93:24:38:90:f9:00:48:2e:ce:ce:7d:4a:34:ed:70:
f5:d6:87:24:0a:4c:28:e7:32:ae:3d:d7:00:d2:fc:
fb:cd:04:2e:ec:dc:d3:b5:84:64:b2:a4:f8:0d:9d:
a8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:99:92:7D:F0:03:4C:31:30:50:7D:08:35:00:7B:11:C2:AA:66:E7
X509v3 Authority Key Identifier:
keyid:22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/25mSffADTDEwUH0INQB7EcKqZuc.roa
sbgp-ipAddrBlock: critical
IPv4:
110.232.224.0/21
Signature Algorithm: sha256WithRSAEncryption
9e:30:1f:62:04:94:1b:67:a9:38:98:ff:0c:82:1d:29:8c:be:
6f:04:0c:fe:9d:93:f8:48:b3:04:ca:ac:1c:2a:4a:e7:31:72:
cf:1c:f0:ce:1b:ed:08:34:14:ed:24:70:c8:66:d8:76:12:94:
90:f5:31:55:fb:6c:a0:f8:f6:d6:12:04:28:18:e0:79:14:2d:
21:30:96:4d:a2:07:24:0b:bf:f4:0d:c2:9b:e3:a5:38:e0:ba:
0a:73:cb:81:92:6f:6e:4d:7f:ec:76:0a:55:58:c0:6f:f8:9e:
ba:c1:f1:62:94:b7:4e:64:0a:dd:d8:70:12:74:21:e0:5f:a2:
d2:18:90:d2:07:0a:55:f5:e1:3e:68:38:20:ca:b0:05:78:d0:
67:f5:db:fc:70:c9:43:8d:df:e4:d7:a7:ef:2f:56:d0:1f:54:
9e:eb:b7:9a:64:b3:51:56:9f:06:b0:b8:61:47:c6:28:49:94:
47:78:da:a9:9d:5a:46:74:6e:b6:ba:9b:43:3f:3e:a4:9e:fb:
40:f2:15:76:b8:23:00:47:41:bb:19:4a:05:35:14:d8:1e:93:
f0:2e:73:e2:1c:cf:ec:fc:5d:61:e3:fb:9d:85:22:ab:b8:80:
1d:f3:58:a0:98:82:c2:a8:02:ea:27:8c:9e:c7:e9:54:76:47:
c2:90:66:5a
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBXTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyMjIy
QTRDMzk2MUU0NjcxODFBNzg3MDBCOTYwNzE4ODQ2Qzg0MDRCMB4XDTI2MDMzMTA4
MTYzMloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoREI5OTkyN0RGMDAzNEMz
MTMwNTA3RDA4MzUwMDdCMTFDMkFBNjZFNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANC5AxCd0IA2nvhjXkdPZQuhIlREkNc5IW4eUfrs6SJ7qu4O1590
n8o+Bti4paTA1HInbg33CURHDs2+soKmeh+a7n6vnOO2vXYt53/xAxTdLrN/Xhup
X5sXwXtdtqfvvLnxva9pN99aVCV8LLWQlXWVuiBui2FUpYa7v5Qni8dN0iw9iWkS
KB/m1DVtVWIvF9bHcxJKVvH7SLjTiqfhif8QDHKJCnBGTYYylN8xPHG+7/xZH+UI
CZZL0yVTE+vgyasPUPvnBxe/LjjvZbYaKYqpkyQ4kPkASC7Ozn1KNO1w9daHJApM
KOcyrj3XANL8+80ELuzc07WEZLKk+A2dqJUCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBTbmZJ98ANMMTBQfQg1AHsRwqpm5zAfBgNVHSMEGDAWgBQiIqTDlh5GcYGnhwC5
YHGIRshASzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjMyL0lpS2t3NVllUm5HQnA0Y0F1V0J4aUViSVFFcy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lpS2t3NVllUm5HQnA0Y0F1V0J4aUVi
SVFFcy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8yMzIvMjVtU2ZmQURUREV3VUgwSU5RQjdFY0txWnVjLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA27o4DANBgkqhkiG9w0BAQsFAAOCAQEA
njAfYgSUG2epOJj/DIIdKYy+bwQM/p2T+EizBMqsHCpK5zFyzxzwzhvtCDQU7SRw
yGbYdhKUkPUxVftsoPj21hIEKBjgeRQtITCWTaIHJAu/9A3Cm+OlOOC6CnPLgZJv
bk1/7HYKVVjAb/ieusHxYpS3TmQK3dhwEnQh4F+i0hiQ0gcKVfXhPmg4IMqwBXjQ
Z/Xb/HDJQ43f5Nen7y9W0B9Unuu3mmSzUVafBrC4YUfGKEmUR3jaqZ1aRnRutrqb
Qz8+pJ77QPIVdrgjAEdBuxlKBTUU2B6T8C5z4hzP7PxdYeP7nYUiq7iAHfNYoJiC
wqgC6ieMnsfpVHZHwpBmWg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:16 2026 by rpki-client