
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/4X0foaY-7OzSK-T1TiDJCL_gdAw.roa
File: 4X0foaY-7OzSK-T1TiDJCL_gdAw.roa (raw, json)
Hash identifier: bNJFooV041mSEXzTMos/zO6wdxo3lRAmu1XNchFvrh4=
Subject key identifier: E1:7D:1F:A1:A6:3E:EC:EC:D2:2B:E4:F5:4E:20:C9:08:BF:E0:74:0C
Certificate issuer: /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial: B9
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/4X0foaY-7OzSK-T1TiDJCL_gdAw.roa
Signing time: Tue 31 Mar 2026 08:17:43 +0000
ROA not before: Tue 31 Mar 2026 08:17:43 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2514
IP address blocks: 210.139.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 16:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185 (0xb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
Validity
Not Before: Mar 31 08:17:43 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=E17D1FA1A63EECECD22BE4F54E20C908BFE0740C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:99:b8:78:da:db:b6:01:84:46:7d:c7:eb:5d:
c0:57:e5:09:73:ee:ca:c5:ed:fc:fb:1b:2a:1d:ec:
86:e9:16:ad:21:1f:98:5e:e5:a3:25:96:fe:bb:3f:
82:59:6d:3b:06:64:80:0c:df:6e:e1:fd:71:64:c3:
d3:e5:80:0a:cc:f2:02:22:c4:8b:20:d9:22:81:41:
f2:ba:62:bc:48:23:2e:3a:98:09:36:fc:6c:c1:27:
91:b7:7f:4e:74:56:e9:03:f9:4b:a5:b2:6d:7c:50:
35:d8:f0:58:dd:7c:69:c5:31:86:12:71:c5:3c:f2:
79:1f:1b:f8:9c:3f:18:b5:72:4c:90:50:b5:f7:49:
0a:73:2c:bc:85:cd:6c:c2:6f:2b:9a:e6:ba:90:90:
cf:04:0e:f9:ca:01:fe:b8:82:9f:fc:74:29:56:25:
e9:3b:0e:2d:a3:d1:0e:26:2a:79:eb:4b:00:ae:d9:
65:60:fd:8e:ae:86:85:6b:0d:5c:44:f3:92:a4:19:
6a:44:92:12:8e:d8:83:9c:62:4f:be:7d:fa:76:84:
6b:49:a6:48:28:aa:49:96:fc:39:24:53:28:66:fb:
1d:85:d3:57:ea:10:78:47:5e:d0:ff:e6:a2:03:2a:
c0:74:98:d9:7e:1f:6a:f4:e1:ec:df:ac:6c:27:76:
ad:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7D:1F:A1:A6:3E:EC:EC:D2:2B:E4:F5:4E:20:C9:08:BF:E0:74:0C
X509v3 Authority Key Identifier:
keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/4X0foaY-7OzSK-T1TiDJCL_gdAw.roa
sbgp-ipAddrBlock: critical
IPv4:
210.139.0.0/17
Signature Algorithm: sha256WithRSAEncryption
64:b3:9f:a5:c3:56:0e:41:de:b2:9d:ea:37:f5:c9:06:d1:49:
51:d9:0c:f8:a6:8d:55:9d:3d:d6:69:15:aa:7b:61:50:4f:d2:
f8:e7:02:0e:38:3e:4e:14:ee:f0:9a:ac:cc:d7:87:9f:ba:41:
06:c2:b6:d4:12:af:78:82:86:de:30:b7:49:22:a9:8b:f0:05:
ff:b4:ae:cb:bc:58:da:03:77:8c:b3:a5:67:da:d7:ac:31:37:
a0:c8:de:ca:97:d3:63:b7:b5:99:02:89:47:42:f8:3f:fe:bb:
03:ed:26:c4:e3:fc:63:a8:cf:84:f2:fe:29:8f:45:e2:ee:87:
8a:e0:f5:cd:42:f4:cc:a5:4a:c9:1f:2d:2a:61:56:86:75:d3:
77:b8:bd:11:b7:71:cc:3c:6e:f7:7c:6d:44:81:ef:f6:ef:cc:
83:4a:6d:05:6c:c3:85:55:2d:d2:e0:62:9b:ec:35:fa:54:f5:
57:20:10:ce:1a:be:37:3c:70:f6:a7:35:fb:5d:54:7b:04:69:
7b:bd:bc:c9:e9:ec:08:7b:41:cd:3f:14:92:8f:bd:a5:84:c7:
1c:5f:61:01:e0:10:9d:54:4b:76:13:cf:c4:a1:a1:f4:72:86:
71:7c:94:c6:ad:2c:c3:52:7e:02:fa:ec:ae:dc:ea:de:85:38:
64:d5:e2:8b
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgICALkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDZG
QTY2MjE5NEZDRjFFQjk4M0FCNDRDQzkxMzAwNDE4MDc3MEQxODAeFw0yNjAzMzEw
ODE3NDNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEUxN0QxRkExQTYzRUVD
RUNEMjJCRTRGNTRFMjBDOTA4QkZFMDc0MEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCcmbh42tu2AYRGfcfrXcBX5Qlz7srF7fz7Gyod7IbpFq0hH5he
5aMllv67P4JZbTsGZIAM327h/XFkw9PlgArM8gIixIsg2SKBQfK6YrxIIy46mAk2
/GzBJ5G3f050VukD+Uulsm18UDXY8FjdfGnFMYYSccU88nkfG/icPxi1ckyQULX3
SQpzLLyFzWzCbyua5rqQkM8EDvnKAf64gp/8dClWJek7Di2j0Q4mKnnrSwCu2WVg
/Y6uhoVrDVxE85KkGWpEkhKO2IOcYk++ffp2hGtJpkgoqkmW/DkkUyhm+x2F01fq
EHhHXtD/5qIDKsB0mNl+H2r04ezfrGwndq1rAgMBAAGjggHXMIIB0zAdBgNVHQ4E
FgQU4X0foaY+7OzSK+T1TiDJCL/gdAwwHwYDVR0jBBgwFoAUBvpmIZT88euYOrRM
yRMAQYB3DRgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzI5L0J2cG1JWlQ4OGV1WU9yUk15Uk1BUVlCM0RSZy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0J2cG1JWlQ4OGV1WU9yUk15Uk1BUVlC
M0RSZy5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF
BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8yOS80WDBmb2FZLTdPelNLLVQxVGlESkNMX2dkQXcucm9hMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0osAMA0GCSqGSIb3DQEBCwUAA4IBAQBk
s5+lw1YOQd6yneo39ckG0UlR2Qz4po1VnT3WaRWqe2FQT9L45wIOOD5OFO7wmqzM
14efukEGwrbUEq94gobeMLdJIqmL8AX/tK7LvFjaA3eMs6Vn2tesMTegyN7Kl9Nj
t7WZAolHQvg//rsD7SbE4/xjqM+E8v4pj0Xi7oeK4PXNQvTMpUrJHy0qYVaGddN3
uL0Rt3HMPG73fG1Ege/278yDSm0FbMOFVS3S4GKb7DX6VPVXIBDOGr43PHD2pzX7
XVR7BGl7vbzJ6ewIe0HNPxSSj72lhMccX2EB4BCdVEt2E8/EoaH0coZxfJTGrSzD
Un4C+uyu3OrehThk1eKL
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:26 2026 by rpki-client