
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/232/VQfHZDUin3SP2vF8kLeN6VPBvW8.roa
File: VQfHZDUin3SP2vF8kLeN6VPBvW8.roa (raw, json)
Hash identifier: 93X5sldaSTcS0gs0H+83LkZfx+nSlJlBbBAMw/pqD7I=
Subject key identifier: 55:07:C7:64:35:22:9F:74:8F:DA:F1:7C:90:B7:8D:E9:53:C1:BD:6F
Certificate issuer: /CN=2222A4C3961E467181A78700B960718846C8404B
Certificate serial: 61
Authority key identifier: 22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/VQfHZDUin3SP2vF8kLeN6VPBvW8.roa
Signing time: Tue 31 Mar 2026 08:16:34 +0000
ROA not before: Tue 31 Mar 2026 08:16:34 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 7672
IP address blocks: 202.125.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 16:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97 (0x61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2222A4C3961E467181A78700B960718846C8404B
Validity
Not Before: Mar 31 08:16:34 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=5507C76435229F748FDAF17C90B78DE953C1BD6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3e:fd:34:d1:81:35:2e:ba:5a:22:db:15:cf:
13:49:52:77:33:ec:d7:d5:24:9f:c0:66:2f:89:29:
3e:27:eb:b0:c0:5c:b5:06:94:78:b0:f9:bb:81:ea:
a9:8f:7b:c1:0a:0a:3e:3a:e8:c3:74:4b:3b:f8:4f:
f6:65:b2:1f:49:48:5d:a3:9a:b3:ee:68:7b:5a:fa:
b3:e5:ec:e5:97:e3:17:78:54:22:13:ac:85:c9:8f:
dc:02:ce:08:3d:df:d1:06:d3:ae:55:21:30:55:35:
75:69:c6:07:93:19:ec:f3:0d:03:04:97:71:1c:f1:
b5:bc:bf:f1:da:ae:dd:5c:28:d4:b1:7d:48:84:8f:
76:c9:cc:03:4c:fd:85:e3:83:3b:8a:f7:94:a7:ad:
84:3f:ba:38:0e:7c:6b:42:3b:66:37:80:27:67:2e:
67:89:15:1c:6c:8b:e6:a1:12:5a:7e:d5:71:d5:e8:
61:f9:ae:3c:36:8b:b6:76:b9:02:fb:be:b3:95:a4:
34:68:fb:09:29:1a:5f:e3:23:28:9a:2e:c0:a3:85:
97:2a:de:96:34:d8:ed:45:af:eb:3a:60:30:17:12:
f5:2a:57:7d:13:16:c1:74:15:ff:81:ca:09:6a:da:
90:5a:2a:6a:3d:db:97:a7:e9:ff:f5:2f:80:3f:4d:
aa:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:07:C7:64:35:22:9F:74:8F:DA:F1:7C:90:B7:8D:E9:53:C1:BD:6F
X509v3 Authority Key Identifier:
keyid:22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/VQfHZDUin3SP2vF8kLeN6VPBvW8.roa
sbgp-ipAddrBlock: critical
IPv4:
202.125.48.0/20
Signature Algorithm: sha256WithRSAEncryption
85:ed:72:ab:0e:03:f5:17:61:9a:48:4d:4f:fe:e2:95:c2:87:
01:ce:40:67:49:e1:64:af:7f:c7:83:cd:6b:3a:08:31:ce:64:
af:f7:bc:f3:ba:dc:65:ce:89:39:35:69:f0:25:cc:7f:f9:42:
8c:bf:57:67:9f:1e:d7:b5:af:16:f6:05:a3:43:c9:cc:78:6d:
e9:fe:6c:dc:ea:03:c3:53:db:00:bd:da:95:9e:e0:44:b5:d3:
0c:f3:27:90:8a:bb:e2:cd:04:fa:e4:15:85:76:c8:57:ae:94:
20:89:9c:e2:1d:fc:e7:fb:21:23:6f:8c:25:55:1c:9e:dd:ca:
c8:e1:76:22:94:32:1f:09:81:5c:d8:80:32:14:32:a1:ce:12:
6b:42:7b:ec:e4:fa:38:2b:ad:ac:9d:3b:a0:de:19:81:9c:03:
f4:58:46:ba:51:ac:ad:f5:d1:f3:06:14:c5:76:73:77:58:09:
9c:bf:a2:8f:e8:e7:d7:02:05:9e:be:33:bd:25:7f:ac:87:c1:
e5:f7:6a:67:11:63:1a:ad:53:4d:60:78:33:eb:cd:c4:e2:8d:
1e:92:00:34:1e:30:ea:77:da:34:81:10:e7:14:5a:9f:d8:6a:
ab:b1:e5:cb:58:69:5d:f3:dd:ee:da:e5:e9:b0:ac:a3:11:b7:
2c:34:ac:d5
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBYTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyMjIy
QTRDMzk2MUU0NjcxODFBNzg3MDBCOTYwNzE4ODQ2Qzg0MDRCMB4XDTI2MDMzMTA4
MTYzNFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNTUwN0M3NjQzNTIyOUY3
NDhGREFGMTdDOTBCNzhERTk1M0MxQkQ2RjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMA+/TTRgTUuuloi2xXPE0lSdzPs19Ukn8BmL4kpPifrsMBctQaU
eLD5u4HqqY97wQoKPjrow3RLO/hP9mWyH0lIXaOas+5oe1r6s+Xs5ZfjF3hUIhOs
hcmP3ALOCD3f0QbTrlUhMFU1dWnGB5MZ7PMNAwSXcRzxtby/8dqu3Vwo1LF9SISP
dsnMA0z9heODO4r3lKethD+6OA58a0I7ZjeAJ2cuZ4kVHGyL5qESWn7VcdXoYfmu
PDaLtna5Avu+s5WkNGj7CSkaX+MjKJouwKOFlyreljTY7UWv6zpgMBcS9SpXfRMW
wXQV/4HKCWrakFoqaj3bl6fp//UvgD9NqgMCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBRVB8dkNSKfdI/a8XyQt43pU8G9bzAfBgNVHSMEGDAWgBQiIqTDlh5GcYGnhwC5
YHGIRshASzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjMyL0lpS2t3NVllUm5HQnA0Y0F1V0J4aUViSVFFcy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lpS2t3NVllUm5HQnA0Y0F1V0J4aUVi
SVFFcy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8yMzIvVlFmSFpEVWluM1NQMnZGOGtMZU42VlBCdlc4LnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMp9MDANBgkqhkiG9w0BAQsFAAOCAQEA
he1yqw4D9RdhmkhNT/7ilcKHAc5AZ0nhZK9/x4PNazoIMc5kr/e887rcZc6JOTVp
8CXMf/lCjL9XZ58e17WvFvYFo0PJzHht6f5s3OoDw1PbAL3alZ7gRLXTDPMnkIq7
4s0E+uQVhXbIV66UIImc4h385/shI2+MJVUcnt3KyOF2IpQyHwmBXNiAMhQyoc4S
a0J77OT6OCutrJ07oN4ZgZwD9FhGulGsrfXR8wYUxXZzd1gJnL+ij+jn1wIFnr4z
vSV/rIfB5fdqZxFjGq1TTWB4M+vNxOKNHpIANB4w6nfaNIEQ5xRan9hqq7Hly1hp
XfPd7trl6bCsoxG3LDSs1Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:19 2026 by rpki-client