
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/cBC5uH-EsCU5_X38fxy71mTbx5E.roa
File: cBC5uH-EsCU5_X38fxy71mTbx5E.roa (raw, json)
Hash identifier: 6QkxWJVX7dLE1lloPn1rvvtLbiH2/KA5RE/XSuXVo9w=
Subject key identifier: 70:10:B9:B8:7F:84:B0:25:39:FD:7D:FC:7F:1C:BB:D6:64:DB:C7:91
Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial: EC
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/cBC5uH-EsCU5_X38fxy71mTbx5E.roa
Signing time: Tue 31 Mar 2026 08:16:56 +0000
ROA not before: Tue 31 Mar 2026 08:16:56 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2514
IP address blocks: 107.153.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236 (0xec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Validity
Not Before: Mar 31 08:16:56 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=7010B9B87F84B02539FD7DFC7F1CBBD664DBC791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a8:ee:28:94:3a:11:98:02:41:fe:10:0f:1f:
53:49:94:39:c6:7a:5c:56:ed:cc:4d:6c:39:9a:b5:
b7:21:1a:86:6c:1c:c7:38:7f:d2:ab:15:8f:45:22:
01:16:32:a1:7e:ab:61:17:29:a9:f8:e1:7b:a5:54:
dd:38:50:dd:f7:a9:d4:80:e7:3b:e7:d3:08:35:93:
a0:4b:f0:9c:3d:e0:38:3e:f6:f6:0f:60:c5:b5:af:
72:98:af:64:a3:97:6d:a4:07:c4:aa:58:12:be:e3:
8a:9d:13:9c:9b:96:35:d0:fa:13:26:14:20:27:9d:
3d:79:a1:3b:de:9e:49:d7:3b:91:4f:9e:bb:00:5e:
3e:e4:d6:da:10:18:ed:46:e2:e0:67:27:69:56:48:
eb:ce:2c:b4:76:a6:ae:cd:d1:95:e0:0a:60:58:36:
fa:0b:f2:68:74:b8:d4:ea:5c:4e:b0:31:7d:e1:74:
53:be:06:be:b9:c5:50:65:a2:b2:12:0c:30:be:b5:
4b:12:92:40:4f:b6:2f:35:ad:c3:42:12:2b:42:bd:
a6:41:f9:1e:e7:22:36:19:e8:62:19:4d:34:2f:43:
c2:72:f7:8c:4c:66:0c:ad:21:f3:e2:c5:0e:53:85:
49:d3:0c:4b:65:be:71:cd:da:51:a0:93:56:58:c0:
85:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:10:B9:B8:7F:84:B0:25:39:FD:7D:FC:7F:1C:BB:D6:64:DB:C7:91
X509v3 Authority Key Identifier:
keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/cBC5uH-EsCU5_X38fxy71mTbx5E.roa
sbgp-ipAddrBlock: critical
IPv4:
107.153.0.0/16
Signature Algorithm: sha256WithRSAEncryption
16:99:66:94:92:39:96:77:b0:9f:05:e0:b3:62:8b:4e:40:0f:
91:5f:ae:e1:7f:be:a7:45:32:b6:c7:e8:63:5b:b3:f4:30:85:
bc:fe:ec:80:b6:2c:bd:8c:f9:3a:72:7f:75:fe:27:d9:0c:df:
bb:d5:c8:86:2f:41:23:5c:5c:da:bf:27:4b:d9:46:f6:81:be:
73:f5:cc:4c:30:7c:5b:7d:47:4b:6e:d7:e5:f2:03:57:be:1d:
5a:14:ef:53:88:b9:2c:ea:b7:62:15:ec:4e:8b:89:97:99:dd:
07:d6:11:c8:48:63:8f:ef:9f:2f:7a:3d:91:fd:ff:1e:16:73:
1e:ff:cf:af:5e:ec:b9:04:3d:f7:91:ea:3f:3c:9d:3e:18:ee:
79:68:e5:b9:dc:e1:30:04:60:81:52:ee:1c:16:31:8c:22:5d:
0e:11:e7:4f:d1:07:ff:bd:df:d2:14:d2:12:41:9f:3a:8e:02:
3d:4b:bb:9a:ce:72:6d:f9:c0:74:31:f8:06:10:ed:a4:19:ff:
02:f8:8b:05:86:b3:03:81:b8:d2:a9:d6:af:6a:06:4c:c8:48:
79:e0:c5:64:cc:b5:86:84:6e:5a:b6:e1:f8:8a:c0:4d:40:04:
8f:c2:14:c5:6d:e4:29:01:56:03:c5:2a:94:e8:a8:e7:22:86:
a3:db:1f:15
-----BEGIN CERTIFICATE-----
MIIEujCCA6KgAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDE0
MDBBQjg5QjZENzJGN0RCNDI0RjRBQUE4Q0NGRjY0MzhEM0Q0QTAeFw0yNjAzMzEw
ODE2NTZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDcwMTBCOUI4N0Y4NEIw
MjUzOUZEN0RGQzdGMUNCQkQ2NjREQkM3OTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDpqO4olDoRmAJB/hAPH1NJlDnGelxW7cxNbDmatbchGoZsHMc4
f9KrFY9FIgEWMqF+q2EXKan44XulVN04UN33qdSA5zvn0wg1k6BL8Jw94Dg+9vYP
YMW1r3KYr2Sjl22kB8SqWBK+44qdE5ybljXQ+hMmFCAnnT15oTvenknXO5FPnrsA
Xj7k1toQGO1G4uBnJ2lWSOvOLLR2pq7N0ZXgCmBYNvoL8mh0uNTqXE6wMX3hdFO+
Br65xVBlorISDDC+tUsSkkBPti81rcNCEitCvaZB+R7nIjYZ6GIZTTQvQ8Jy94xM
ZgytIfPixQ5ThUnTDEtlvnHN2lGgk1ZYwIXlAgMBAAGjggHWMIIB0jAdBgNVHQ4E
FgQUcBC5uH+EsCU5/X38fxy71mTbx5EwHwYDVR0jBBgwFoAU0UAKuJttcvfbQk9K
qozP9kONPUowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzI5LzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtPTlBVby5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtP
TlBVby5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF
BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8yOS9jQkM1dUgtRXNDVTVfWDM4Znh5NzFtVGJ4NUUucm9hMB4GCCsG
AQUFBwEHAQH/BA8wDTALBAIAATAFAwMAa5kwDQYJKoZIhvcNAQELBQADggEBABaZ
ZpSSOZZ3sJ8F4LNii05AD5FfruF/vqdFMrbH6GNbs/Qwhbz+7IC2LL2M+Tpyf3X+
J9kM37vVyIYvQSNcXNq/J0vZRvaBvnP1zEwwfFt9R0tu1+XyA1e+HVoU71OIuSzq
t2IV7E6LiZeZ3QfWEchIY4/vny96PZH9/x4Wcx7/z69e7LkEPfeR6j88nT4Y7nlo
5bnc4TAEYIFS7hwWMYwiXQ4R50/RB/+939IU0hJBnzqOAj1Lu5rOcm35wHQx+AYQ
7aQZ/wL4iwWGswOBuNKp1q9qBkzISHngxWTMtYaEblq24fiKwE1ABI/CFMVt5CkB
VgPFKpToqOcihqPbHxU=
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:22 2026 by rpki-client