
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/iu57f8apUVW41YYm-559GE-gs68.roa
File: iu57f8apUVW41YYm-559GE-gs68.roa (raw, json)
Hash identifier: nrnQZB3u4Ujxn1zgH/WzzNNNGRcjE+k3JD5kEKmTNXs=
Subject key identifier: 8A:EE:7B:7F:C6:A9:51:55:B8:D5:86:26:FB:9E:7D:18:4F:A0:B3:AF
Certificate issuer: /CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
Certificate serial: 5E
Authority key identifier: 6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/iu57f8apUVW41YYm-559GE-gs68.roa
Signing time: Tue 31 Mar 2026 08:35:48 +0000
ROA not before: Tue 31 Mar 2026 08:35:48 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 23783
IP address blocks: 61.11.176.0/20 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94 (0x5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
Validity
Not Before: Mar 31 08:35:48 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=8AEE7B7FC6A95155B8D58626FB9E7D184FA0B3AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:dd:86:ed:54:8c:ba:8b:eb:49:69:66:ab:9e:
36:80:ec:e4:a2:2d:b2:73:e0:b5:da:bd:92:89:21:
df:d8:3f:0e:3e:35:2d:56:d0:9d:fc:e4:da:43:02:
a5:28:11:f7:0a:09:0d:65:5c:d0:80:98:6a:a4:f5:
78:bc:b5:06:eb:56:c8:d5:83:40:63:ad:28:c8:59:
9a:92:bc:90:9e:c8:04:4b:f6:d3:ab:3e:0e:84:17:
53:20:70:57:45:12:b0:af:27:b4:dd:0e:8e:2c:3f:
a6:b9:1e:da:5e:f8:ed:20:b6:67:c3:7f:a1:0e:96:
6b:cb:6c:f3:22:cb:1a:b1:92:73:5e:4e:6a:0e:08:
d1:1a:e3:41:f1:8d:d2:08:f5:8f:45:ee:e2:3b:93:
27:f8:38:6f:63:cd:c7:02:cb:03:92:4a:f4:38:ae:
68:d7:b6:58:53:47:51:db:01:51:42:64:87:09:c1:
47:f9:20:97:38:1a:d7:9f:73:d9:e5:68:49:c6:9f:
c7:1c:65:0c:7d:6b:ab:0f:a4:c9:d8:ba:45:46:92:
ce:27:7e:81:92:fb:4b:1e:43:fc:d8:a4:7b:24:2e:
20:69:96:c7:57:7d:26:95:4a:cd:ab:ee:97:24:30:
30:59:59:51:a2:5c:07:46:6b:d7:b3:1c:bf:57:64:
aa:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:EE:7B:7F:C6:A9:51:55:B8:D5:86:26:FB:9E:7D:18:4F:A0:B3:AF
X509v3 Authority Key Identifier:
keyid:6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/iu57f8apUVW41YYm-559GE-gs68.roa
sbgp-ipAddrBlock: critical
IPv4:
61.11.176.0/20
Signature Algorithm: sha256WithRSAEncryption
d9:3d:ac:1d:ca:28:55:c7:87:e4:96:0a:91:dd:f2:62:1b:76:
b5:10:6b:f8:24:e6:6e:47:ee:a0:41:92:41:de:5e:48:22:81:
2b:96:6a:24:b2:47:30:87:c9:79:9a:be:9d:12:9e:7d:fe:be:
59:d3:9d:1d:ab:ac:49:2d:8b:2e:f9:d5:20:34:f7:9f:30:74:
19:91:b6:80:f3:75:46:ec:a6:c2:2d:b1:52:c2:48:9c:c5:ca:
e7:2d:d9:65:7d:01:4d:f9:62:5f:89:bc:25:a1:e4:d9:5b:06:
01:eb:fa:4b:0a:57:76:2b:9c:92:f7:90:c5:44:2b:6f:37:32:
2d:a4:4f:66:3b:3d:a3:f2:cd:1a:77:d2:7b:d1:b9:97:c7:59:
14:b2:11:8c:2a:5b:b6:b1:d9:7a:d3:e6:c7:67:a6:8c:35:38:
e7:b1:b4:b8:10:b0:99:67:89:df:82:95:01:cc:d9:99:c4:f2:
9c:4c:2c:12:39:9a:65:6a:73:68:f6:3e:d3:15:4d:4c:41:35:
f6:cd:17:7f:42:f2:1d:e1:9d:a5:f0:eb:04:27:63:6b:db:e2:
5b:33:ca:78:95:d3:17:c2:c5:cb:e8:ae:5b:c8:55:1b:b3:c8:
7d:d0:dc:37:d3:99:df:ec:01:42:38:05:ff:83:ac:54:cb:ba:
44:f9:36:a1
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBXjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2RDFF
RDE2RDhDNkQzQkE0MEJGNDJDQjNBMjk2NTJBREFCNzZEMDYxMB4XDTI2MDMzMTA4
MzU0OFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoOEFFRTdCN0ZDNkE5NTE1
NUI4RDU4NjI2RkI5RTdEMTg0RkEwQjNBRjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOPdhu1UjLqL60lpZqueNoDs5KItsnPgtdq9kokh39g/Dj41LVbQ
nfzk2kMCpSgR9woJDWVc0ICYaqT1eLy1ButWyNWDQGOtKMhZmpK8kJ7IBEv206s+
DoQXUyBwV0USsK8ntN0Ojiw/prke2l747SC2Z8N/oQ6Wa8ts8yLLGrGSc15Oag4I
0RrjQfGN0gj1j0Xu4juTJ/g4b2PNxwLLA5JK9DiuaNe2WFNHUdsBUUJkhwnBR/kg
lzga159z2eVoScafxxxlDH1rqw+kydi6RUaSzid+gZL7Sx5D/NikeyQuIGmWx1d9
JpVKzavulyQwMFlZUaJcB0Zr17Mcv1dkqmMCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBSK7nt/xqlRVbjVhib7nn0YT6CzrzAfBgNVHSMEGDAWgBRtHtFtjG07pAv0LLOi
llKtq3bQYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA3L2JSN1JiWXh0TzZRTDlDeXpvcFpTcmF0MjBHRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2JSN1JiWXh0TzZRTDlDeXpvcFpTcmF0
MjBHRS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8zMDcvaXU1N2Y4YXBVVlc0MVlZbS01NTlHRS1nczY4LnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBD0LsDANBgkqhkiG9w0BAQsFAAOCAQEA
2T2sHcooVceH5JYKkd3yYht2tRBr+CTmbkfuoEGSQd5eSCKBK5ZqJLJHMIfJeZq+
nRKeff6+WdOdHausSS2LLvnVIDT3nzB0GZG2gPN1Ruymwi2xUsJInMXK5y3ZZX0B
TfliX4m8JaHk2VsGAev6SwpXdiuckveQxUQrbzcyLaRPZjs9o/LNGnfSe9G5l8dZ
FLIRjCpbtrHZetPmx2emjDU457G0uBCwmWeJ34KVAczZmcTynEwsEjmaZWpzaPY+
0xVNTEE19s0Xf0LyHeGdpfDrBCdja9viWzPKeJXTF8LFy+iuW8hVG7PIfdDcN9OZ
3+wBQjgF/4OsVMu6RPk2oQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:48 2026 by rpki-client