
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/RmHcVvfKrQd8a2tcmBvKzCMFWbg.roa
File: RmHcVvfKrQd8a2tcmBvKzCMFWbg.roa (raw, json)
Hash identifier: +la4O/JQYal6XW6+7J9VuoRM9R++P3wqgnXjUj1JMbs=
Subject key identifier: 46:61:DC:56:F7:CA:AD:07:7C:6B:6B:5C:98:1B:CA:CC:23:05:59:B8
Certificate issuer: /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial: BB
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/RmHcVvfKrQd8a2tcmBvKzCMFWbg.roa
Signing time: Tue 31 Mar 2026 08:17:44 +0000
ROA not before: Tue 31 Mar 2026 08:17:44 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2514
IP address blocks: 210.153.0.0/16 maxlen: 17
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 16:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187 (0xbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
Validity
Not Before: Mar 31 08:17:44 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=4661DC56F7CAAD077C6B6B5C981BCACC230559B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1e:5a:69:ca:53:8a:b5:2d:9a:7d:4b:bd:53:
cb:6c:48:b4:85:07:53:36:a1:9e:10:e4:94:3e:ca:
1e:f8:de:7f:bd:30:36:36:5d:bf:75:d4:d3:13:a0:
a4:e2:18:81:2b:6d:69:53:19:1d:e9:54:cc:eb:a9:
91:bb:2f:9e:53:44:ce:30:4f:b1:c6:c2:a2:a6:59:
ee:d3:2e:62:c0:f3:4f:4a:28:f9:f7:85:39:4d:b3:
28:b2:c6:0a:15:e1:7b:2e:9c:19:8c:74:0d:d5:70:
7d:69:85:6c:45:61:cc:d7:46:bc:5e:67:11:5c:88:
2f:51:ee:99:ed:96:df:3c:fb:6d:de:49:98:62:cb:
2a:8a:17:46:df:09:9b:21:05:f0:fb:52:59:6a:3f:
6e:e7:87:96:6c:fa:bc:7e:79:16:31:ca:3c:85:c1:
06:f9:2c:13:c5:6c:27:4d:76:1d:dd:20:7c:ce:98:
5c:84:93:c4:46:4b:19:15:1b:f0:d1:55:ff:6b:6a:
52:df:06:65:83:5d:3c:3f:fa:21:1c:90:02:76:c8:
c3:30:5b:97:9c:f7:3c:9f:2e:83:f5:05:8c:4c:13:
87:66:b0:38:c5:8e:ad:d7:7b:83:ab:07:50:ad:cb:
08:37:fa:65:7d:d9:16:d7:a6:d3:55:b7:78:53:41:
90:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:61:DC:56:F7:CA:AD:07:7C:6B:6B:5C:98:1B:CA:CC:23:05:59:B8
X509v3 Authority Key Identifier:
keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/RmHcVvfKrQd8a2tcmBvKzCMFWbg.roa
sbgp-ipAddrBlock: critical
IPv4:
210.153.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b4:98:1a:d8:ca:19:8f:5e:7d:7e:0e:38:2e:d4:9a:5e:3b:35:
64:39:b9:33:c4:32:96:ad:b2:49:b4:32:82:82:f7:f1:02:84:
9b:66:55:e2:45:e1:61:ab:3b:c5:07:5f:15:9e:ac:05:4b:a8:
79:60:b1:84:a5:49:cc:04:5f:40:7a:ad:3b:3c:7b:74:08:4f:
97:16:fd:97:07:08:67:13:cd:63:b3:11:19:87:17:c1:c1:fe:
6d:c2:c7:32:6a:ba:29:a3:12:ac:f7:88:f8:c3:6b:39:3c:28:
a9:19:2a:24:af:3c:3c:be:8b:08:b1:24:30:54:fc:4e:93:0b:
23:cf:eb:80:a2:f4:7e:e5:04:2d:1e:27:b0:1a:92:d7:05:cd:
ef:ce:e0:86:27:a5:c6:c6:ea:ec:1b:bb:a0:e7:c1:05:61:fc:
2c:d2:c3:8d:28:4e:aa:b0:cf:4a:91:5d:fc:ab:7e:79:39:97:
bb:7b:32:d4:78:b4:a2:f0:24:8f:e3:de:d8:5a:c7:55:b4:07:
64:b7:7a:4f:d3:ea:19:65:25:89:be:fc:4b:f0:c1:bd:19:33:
9c:31:24:1f:98:ee:88:df:61:9d:9e:7e:89:be:a3:e1:a1:8a:
65:99:ec:74:8a:3b:e3:dc:a3:e0:83:73:87:3f:b6:81:ae:1e:
4d:7f:79:f5
-----BEGIN CERTIFICATE-----
MIIEujCCA6KgAwIBAgICALswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDZG
QTY2MjE5NEZDRjFFQjk4M0FCNDRDQzkxMzAwNDE4MDc3MEQxODAeFw0yNjAzMzEw
ODE3NDRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQ2NjFEQzU2RjdDQUFE
MDc3QzZCNkI1Qzk4MUJDQUNDMjMwNTU5QjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3HlppylOKtS2afUu9U8tsSLSFB1M2oZ4Q5JQ+yh743n+9MDY2
Xb911NMToKTiGIErbWlTGR3pVMzrqZG7L55TRM4wT7HGwqKmWe7TLmLA809KKPn3
hTlNsyiyxgoV4XsunBmMdA3VcH1phWxFYczXRrxeZxFciC9R7pntlt88+23eSZhi
yyqKF0bfCZshBfD7UllqP27nh5Zs+rx+eRYxyjyFwQb5LBPFbCdNdh3dIHzOmFyE
k8RGSxkVG/DRVf9ralLfBmWDXTw/+iEckAJ2yMMwW5ec9zyfLoP1BYxME4dmsDjF
jq3Xe4OrB1Ctywg3+mV92RbXptNVt3hTQZCvAgMBAAGjggHWMIIB0jAdBgNVHQ4E
FgQURmHcVvfKrQd8a2tcmBvKzCMFWbgwHwYDVR0jBBgwFoAUBvpmIZT88euYOrRM
yRMAQYB3DRgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzI5L0J2cG1JWlQ4OGV1WU9yUk15Uk1BUVlCM0RSZy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0J2cG1JWlQ4OGV1WU9yUk15Uk1BUVlC
M0RSZy5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF
BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8yOS9SbUhjVnZmS3JRZDhhMnRjbUJ2S3pDTUZXYmcucm9hMB4GCCsG
AQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0pkwDQYJKoZIhvcNAQELBQADggEBALSY
GtjKGY9efX4OOC7Uml47NWQ5uTPEMpatskm0MoKC9/EChJtmVeJF4WGrO8UHXxWe
rAVLqHlgsYSlScwEX0B6rTs8e3QIT5cW/ZcHCGcTzWOzERmHF8HB/m3CxzJquimj
Eqz3iPjDazk8KKkZKiSvPDy+iwixJDBU/E6TCyPP64Ci9H7lBC0eJ7AaktcFze/O
4IYnpcbG6uwbu6DnwQVh/CzSw40oTqqwz0qRXfyrfnk5l7t7MtR4tKLwJI/j3tha
x1W0B2S3ek/T6hllJYm+/Evwwb0ZM5wxJB+Y7ojfYZ2efom+o+GhimWZ7HSKO+Pc
o+CDc4c/toGuHk1/efU=
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:59 2026 by rpki-client