
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/cmZl5lmcSxFPKU-Q48zEPsbH79s.roa
File: cmZl5lmcSxFPKU-Q48zEPsbH79s.roa (raw, json)
Hash identifier: Jg/cFd5Uxtw9YWABRU/9Kj7oLn602eZG/IcD0DRYZDs=
Subject key identifier: 72:66:65:E6:59:9C:4B:11:4F:29:4F:90:E3:CC:C4:3E:C6:C7:EF:DB
Certificate issuer: /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial: C4
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/cmZl5lmcSxFPKU-Q48zEPsbH79s.roa
Signing time: Tue 31 Mar 2026 08:17:48 +0000
ROA not before: Tue 31 Mar 2026 08:17:48 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2514
IP address blocks: 124.146.128.0/17 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 16:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196 (0xc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
Validity
Not Before: Mar 31 08:17:48 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=726665E6599C4B114F294F90E3CCC43EC6C7EFDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f5:c9:df:c8:1a:c2:94:f8:b1:11:dd:65:ce:
e0:3a:3e:88:de:03:e8:8b:94:0a:8d:d7:0d:fe:97:
7a:a5:8d:44:9d:01:66:be:74:7e:4b:e6:b9:09:5a:
a4:8e:51:3a:bc:f5:25:81:8f:49:83:2f:c5:b2:c7:
c5:8c:02:ed:18:27:36:f1:ca:33:0e:c1:c2:83:e3:
33:07:13:3d:43:d0:fe:0e:11:39:b1:d2:72:4d:97:
e4:b7:8c:1e:ba:f3:6e:1b:78:a1:0a:61:f0:2c:c3:
f6:85:13:e5:30:07:2b:05:49:60:3e:df:7a:28:f8:
54:1e:bc:55:9c:7c:4c:79:a0:12:6a:e8:f4:0e:47:
68:05:f8:fc:b6:0f:33:34:31:43:a5:9a:7f:34:61:
64:12:a7:1f:e5:08:a7:df:35:88:c1:41:d0:ad:56:
d7:a1:97:d7:fa:17:19:ca:60:2b:34:4e:b4:3c:ef:
c5:5b:f6:7a:ac:98:09:a4:42:db:b3:34:35:16:16:
1e:b5:cc:0c:a9:75:a8:31:1d:94:f2:24:3a:12:bd:
9a:4b:41:3f:53:b8:dc:2e:84:da:6a:96:f4:c3:4b:
15:13:26:a1:80:26:5b:7e:8a:92:59:71:37:cf:76:
3c:29:2e:09:61:64:3f:6c:5b:30:07:e6:3d:ed:c0:
f5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:66:65:E6:59:9C:4B:11:4F:29:4F:90:E3:CC:C4:3E:C6:C7:EF:DB
X509v3 Authority Key Identifier:
keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/cmZl5lmcSxFPKU-Q48zEPsbH79s.roa
sbgp-ipAddrBlock: critical
IPv4:
124.146.128.0/17
Signature Algorithm: sha256WithRSAEncryption
ba:d7:ee:2f:e4:12:de:bd:56:1f:68:f2:a2:b7:9e:68:f8:56:
ac:a4:d9:bb:f0:73:bc:88:e5:fb:c6:96:dc:a2:d1:92:67:2b:
ba:b0:0b:82:03:94:c8:c0:96:9c:b1:c3:be:26:a4:29:dd:bf:
af:2e:f5:34:1a:ad:a5:57:c2:28:de:40:07:02:04:34:74:20:
3d:b3:77:b4:ae:3e:dc:16:df:25:bd:fa:88:78:2c:58:75:ac:
85:af:e8:a7:5b:48:71:86:f4:bd:fd:6e:17:d8:0a:91:53:8b:
3b:ab:55:f2:3b:a4:bf:e6:da:3b:2e:a3:ae:dc:85:75:d2:39:
88:dd:3c:62:49:92:2d:d4:23:07:24:fa:04:28:65:cf:6e:d6:
20:f8:1a:44:84:be:62:1c:e1:2e:ea:f2:b6:5f:67:bd:1f:1f:
bb:89:e2:1b:ec:ff:3b:a6:8e:98:cb:7a:cd:49:c0:25:72:cf:
0f:e8:f7:fe:18:c6:04:66:fd:c0:d6:25:00:85:00:bb:21:50:
c5:7d:4e:78:97:39:63:b2:7c:65:9f:6a:ff:37:50:82:09:ee:
b5:36:33:ee:4d:ef:f3:f2:dd:4c:84:26:4c:bc:6c:6d:83:a7:
36:a8:b2:fb:a0:ff:78:c6:46:e9:11:21:7a:7b:d0:aa:e8:f7:
8e:b8:b7:0b
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDZG
QTY2MjE5NEZDRjFFQjk4M0FCNDRDQzkxMzAwNDE4MDc3MEQxODAeFw0yNjAzMzEw
ODE3NDhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDcyNjY2NUU2NTk5QzRC
MTE0RjI5NEY5MEUzQ0NDNDNFQzZDN0VGREIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDA9cnfyBrClPixEd1lzuA6PojeA+iLlAqN1w3+l3qljUSdAWa+
dH5L5rkJWqSOUTq89SWBj0mDL8Wyx8WMAu0YJzbxyjMOwcKD4zMHEz1D0P4OETmx
0nJNl+S3jB66824beKEKYfAsw/aFE+UwBysFSWA+33oo+FQevFWcfEx5oBJq6PQO
R2gF+Py2DzM0MUOlmn80YWQSpx/lCKffNYjBQdCtVtehl9f6FxnKYCs0TrQ878Vb
9nqsmAmkQtuzNDUWFh61zAypdagxHZTyJDoSvZpLQT9TuNwuhNpqlvTDSxUTJqGA
Jlt+ipJZcTfPdjwpLglhZD9sWzAH5j3twPVfAgMBAAGjggHXMIIB0zAdBgNVHQ4E
FgQUcmZl5lmcSxFPKU+Q48zEPsbH79swHwYDVR0jBBgwFoAUBvpmIZT88euYOrRM
yRMAQYB3DRgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzI5L0J2cG1JWlQ4OGV1WU9yUk15Uk1BUVlCM0RSZy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0J2cG1JWlQ4OGV1WU9yUk15Uk1BUVlC
M0RSZy5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF
BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8yOS9jbVpsNWxtY1N4RlBLVS1RNDh6RVBzYkg3OXMucm9hMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHfJKAMA0GCSqGSIb3DQEBCwUAA4IBAQC6
1+4v5BLevVYfaPKit55o+FaspNm78HO8iOX7xpbcotGSZyu6sAuCA5TIwJacscO+
JqQp3b+vLvU0Gq2lV8Io3kAHAgQ0dCA9s3e0rj7cFt8lvfqIeCxYdayFr+inW0hx
hvS9/W4X2AqRU4s7q1XyO6S/5to7LqOu3IV10jmI3TxiSZIt1CMHJPoEKGXPbtYg
+BpEhL5iHOEu6vK2X2e9Hx+7ieIb7P87po6Yy3rNScAlcs8P6Pf+GMYEZv3A1iUA
hQC7IVDFfU54lzljsnxln2r/N1CCCe61NjPuTe/z8t1MhCZMvGxtg6c2qLL7oP94
xkbpESF6e9Cq6PeOuLcL
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:19 2026 by rpki-client