
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/311/mROrlao_cCGjKWRD0JRMYKOd7Iw.roa
File: mROrlao_cCGjKWRD0JRMYKOd7Iw.roa (raw, json)
Hash identifier: 6jLcirSWftzZPgdEWK/30khea5lpXHiNz/7UIIl2u4Q=
Subject key identifier: 99:13:AB:95:AA:3F:70:21:A3:29:64:43:D0:94:4C:60:A3:9D:EC:8C
Certificate issuer: /CN=A642E787390B6CE6CEE685B443F93AB3639F116C
Certificate serial: 33
Authority key identifier: A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/mROrlao_cCGjKWRD0JRMYKOd7Iw.roa
Signing time: Tue 31 Mar 2026 08:42:24 +0000
ROA not before: Tue 31 Mar 2026 08:42:24 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9354
IP address blocks: 221.118.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 14:45:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A642E787390B6CE6CEE685B443F93AB3639F116C
Validity
Not Before: Mar 31 08:42:24 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=9913AB95AA3F7021A3296443D0944C60A39DEC8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:61:74:a3:5e:59:99:6b:6f:da:5a:ab:7f:75:
05:b2:df:3d:a0:41:7e:9e:e2:9f:4e:c6:c8:15:03:
3c:ee:47:4f:fe:c4:2e:f2:bf:43:1d:02:55:1c:8f:
fc:c8:e3:75:e4:4b:3e:c1:e6:a9:96:71:b2:13:23:
ab:c0:e4:aa:cc:60:57:45:41:80:d8:14:ca:54:81:
60:70:7e:70:c8:03:84:75:97:4e:8e:37:19:c0:64:
ec:25:6b:86:90:ce:40:51:06:72:3c:9b:da:c9:3f:
c3:09:b5:45:e9:69:27:d5:b4:b2:33:1a:3c:ec:23:
86:52:d7:57:54:6f:05:60:76:53:3a:39:26:fc:53:
4f:5f:a4:5c:17:3d:8f:19:be:52:e1:b8:d1:03:07:
5e:12:b0:45:a8:4e:81:43:d3:55:5a:f8:b4:83:3a:
7b:99:f3:05:eb:ae:dd:6b:4f:c2:85:86:f4:02:fd:
38:21:1e:2e:95:af:e2:44:0b:75:dd:55:8a:c6:3a:
68:95:6d:58:7b:b2:10:13:6e:e0:dd:2c:10:03:ba:
30:05:f1:d3:71:3e:ef:93:95:3a:66:27:8e:ef:7e:
80:f1:45:26:bb:76:94:b4:7d:a9:dd:eb:da:b8:6a:
3a:21:72:7a:8c:45:d2:6e:b2:a1:31:8d:1b:10:88:
8c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:13:AB:95:AA:3F:70:21:A3:29:64:43:D0:94:4C:60:A3:9D:EC:8C
X509v3 Authority Key Identifier:
keyid:A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/mROrlao_cCGjKWRD0JRMYKOd7Iw.roa
sbgp-ipAddrBlock: critical
IPv4:
221.118.192.0/18
Signature Algorithm: sha256WithRSAEncryption
8b:81:a5:98:20:1b:b6:e6:8c:d3:03:0c:a2:56:ca:36:14:78:
8f:f2:bb:f8:2f:2c:2f:53:51:dd:c7:0c:2b:b6:c2:e8:21:32:
b2:8b:fb:fe:02:08:cc:21:79:46:58:45:47:9f:31:83:41:6d:
1c:9f:7a:9f:0a:d5:5b:1b:43:61:8f:fa:6b:82:9f:d3:b7:da:
21:39:31:04:9b:51:6c:c8:c1:f5:16:8d:2b:03:7c:37:dd:f1:
af:e9:3f:36:d0:5d:c4:71:2e:79:48:1b:d9:d5:f3:cb:5b:03:
2d:f8:7d:b4:46:85:cc:82:ef:ad:e0:48:a7:c4:ff:78:f5:13:
04:c7:03:35:7a:29:b9:70:18:e9:c4:5b:38:09:9f:83:7d:7f:
af:af:58:8a:b3:5a:87:71:2d:9b:e6:b1:02:3d:2b:e3:41:9d:
8e:b4:52:3f:cb:c5:cb:0c:b0:2a:4d:67:41:e5:4b:79:a6:fb:
2c:bf:3b:ad:85:05:eb:d7:af:8f:0c:10:f2:99:16:5c:0c:8b:
a1:2f:b5:45:00:86:a2:0e:bc:c6:5f:e1:da:46:a1:aa:6c:9d:
ec:d1:c6:25:4f:c1:11:9c:45:ea:71:bf:dc:cf:a7:f8:9e:c6:
f0:1d:67:dc:60:3b:6d:07:62:17:0a:22:c6:09:86:09:03:02:
fa:1a:87:4a
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBMzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBNjQy
RTc4NzM5MEI2Q0U2Q0VFNjg1QjQ0M0Y5M0FCMzYzOUYxMTZDMB4XDTI2MDMzMTA4
NDIyNFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoOTkxM0FCOTVBQTNGNzAy
MUEzMjk2NDQzRDA5NDRDNjBBMzlERUM4QzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANRhdKNeWZlrb9paq391BbLfPaBBfp7in07GyBUDPO5HT/7ELvK/
Qx0CVRyP/MjjdeRLPsHmqZZxshMjq8DkqsxgV0VBgNgUylSBYHB+cMgDhHWXTo43
GcBk7CVrhpDOQFEGcjyb2sk/wwm1RelpJ9W0sjMaPOwjhlLXV1RvBWB2Uzo5JvxT
T1+kXBc9jxm+UuG40QMHXhKwRahOgUPTVVr4tIM6e5nzBeuu3WtPwoWG9AL9OCEe
LpWv4kQLdd1VisY6aJVtWHuyEBNu4N0sEAO6MAXx03E+75OVOmYnju9+gPFFJrt2
lLR9qd3r2rhqOiFyeoxF0m6yoTGNGxCIjPMCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBSZE6uVqj9wIaMpZEPQlExgo53sjDAfBgNVHSMEGDAWgBSmQueHOQts5s7mhbRD
+TqzY58RbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzExL3BrTG5oemtMYk9iTzVvVzBRX2s2czJPZkVXdy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3BrTG5oemtMYk9iTzVvVzBRX2s2czJP
ZkVXdy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8zMTEvbVJPcmxhb19jQ0dqS1dSRDBKUk1ZS09kN0l3LnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBt12wDANBgkqhkiG9w0BAQsFAAOCAQEA
i4GlmCAbtuaM0wMMolbKNhR4j/K7+C8sL1NR3ccMK7bC6CEysov7/gIIzCF5RlhF
R58xg0FtHJ96nwrVWxtDYY/6a4Kf07faITkxBJtRbMjB9RaNKwN8N93xr+k/NtBd
xHEueUgb2dXzy1sDLfh9tEaFzILvreBIp8T/ePUTBMcDNXopuXAY6cRbOAmfg31/
r69YirNah3Etm+axAj0r40GdjrRSP8vFywywKk1nQeVLeab7LL87rYUF69evjwwQ
8pkWXAyLoS+1RQCGog68xl/h2kahqmyd7NHGJU/BEZxF6nG/3M+n+J7G8B1n3GA7
bQdiFwoixgmGCQMC+hqHSg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:26:52 2026 by rpki-client