
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/YhIiYA7I-WDrcWUJ1aolnuOWMss.roa
File: YhIiYA7I-WDrcWUJ1aolnuOWMss.roa (raw, json)
Hash identifier: cDY54dP1qCaWFENGC0FfIPwK4gqohLRHZgMeGE+OcEw=
Subject key identifier: 62:12:22:60:0E:C8:F9:60:EB:71:65:09:D5:AA:25:9E:E3:96:32:CB
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 05FD
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/YhIiYA7I-WDrcWUJ1aolnuOWMss.roa
Signing time: Tue 31 Mar 2026 08:21:17 +0000
ROA not before: Tue 31 Mar 2026 08:21:17 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 10013
IP address blocks: 61.192.192.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:25:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1533 (0x5fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Mar 31 08:21:17 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=621222600EC8F960EB716509D5AA259EE39632CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3a:db:d7:50:fc:67:b3:d1:4f:03:f7:c9:9f:
48:4c:42:df:b1:cd:68:95:65:46:e0:05:bb:e4:8b:
5b:f6:1c:83:9a:f1:a2:fe:c8:b3:5f:c4:e6:97:68:
25:8c:14:4b:89:0b:4a:a8:dd:1a:fa:6a:6c:36:6e:
42:61:51:cd:96:a7:6a:f6:36:f7:cc:ef:34:99:6b:
4b:0d:86:fb:6c:e0:ec:d0:0f:78:ef:ba:a5:89:54:
37:ec:89:d2:dd:eb:c6:68:21:e3:78:3f:2c:19:9e:
59:34:71:74:51:e4:17:4b:9f:1e:2d:89:f3:d2:87:
0c:4f:c1:54:6f:d9:b1:a4:3c:6b:05:d2:ab:21:02:
24:01:bc:2e:4e:35:a1:f7:9b:cb:41:09:e1:18:c4:
51:85:38:a4:41:a6:fc:10:86:00:c7:d7:f9:05:41:
45:8e:6d:39:f0:e1:da:54:fb:b8:0d:01:1e:a7:1a:
72:b2:11:d6:8a:e6:81:b2:c2:3e:dc:7b:42:de:cd:
63:09:ea:0c:6d:17:2c:29:95:e5:b6:38:ce:8e:5d:
49:c6:3c:04:b2:a2:1c:0f:f2:09:d0:a7:72:30:02:
b5:a2:45:ae:89:e7:6a:c0:aa:7f:1e:b8:32:e8:ed:
ac:d7:f5:23:73:c4:10:a4:bb:79:91:42:84:3a:f8:
2f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:12:22:60:0E:C8:F9:60:EB:71:65:09:D5:AA:25:9E:E3:96:32:CB
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/YhIiYA7I-WDrcWUJ1aolnuOWMss.roa
sbgp-ipAddrBlock: critical
IPv4:
61.192.192.0/20
Signature Algorithm: sha256WithRSAEncryption
9a:10:c6:9f:28:d0:0b:6c:13:3c:34:c5:e2:7c:af:e9:80:11:
67:84:9c:24:a5:cd:3e:f8:95:9a:af:d5:2d:c7:9d:27:b9:e7:
91:f9:97:3f:3a:87:dd:cd:74:13:2d:4c:cf:a4:d7:cb:ba:dc:
e6:44:60:17:7e:c2:98:7b:53:26:5d:c2:91:30:74:fe:cd:e5:
20:ae:f5:d2:dd:f9:4d:ba:7f:54:be:70:1c:3c:d8:cc:8e:12:
f6:92:9f:e5:43:3b:e8:7e:55:c3:be:39:02:46:1f:a8:fe:65:
5e:a7:96:a8:e8:18:53:0c:48:82:43:ce:80:00:b5:26:dc:7e:
99:9e:93:e2:e1:d0:f3:e3:15:25:20:64:24:9d:9c:3d:a4:89:
99:1e:db:b7:ff:54:00:a9:b3:97:a6:fb:f5:f7:3d:49:a8:d5:
ad:d6:42:43:a5:89:2e:18:c3:75:6e:a6:83:db:d4:9c:6b:47:
22:3d:29:2b:4f:77:1d:8e:2a:59:c1:4d:84:7a:77:70:1c:79:
bd:01:d4:2c:af:be:33:90:10:cf:b6:95:f8:20:10:12:39:22:
26:8f:23:66:1f:a9:c9:c1:2e:2a:53:fa:5b:5c:d2:3c:28:26:
3f:19:e7:cd:3e:d3:cd:f5:75:47:22:37:e1:9d:aa:7d:1d:8b:
fb:b2:01:ea
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBf0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw
ODIxMTdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDYyMTIyMjYwMEVDOEY5
NjBFQjcxNjUwOUQ1QUEyNTlFRTM5NjMyQ0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDgOtvXUPxns9FPA/fJn0hMQt+xzWiVZUbgBbvki1v2HIOa8aL+
yLNfxOaXaCWMFEuJC0qo3Rr6amw2bkJhUc2Wp2r2NvfM7zSZa0sNhvts4OzQD3jv
uqWJVDfsidLd68ZoIeN4PywZnlk0cXRR5BdLnx4tifPShwxPwVRv2bGkPGsF0qsh
AiQBvC5ONaH3m8tBCeEYxFGFOKRBpvwQhgDH1/kFQUWObTnw4dpU+7gNAR6nGnKy
EdaK5oGywj7ce0LezWMJ6gxtFywpleW2OM6OXUnGPASyohwP8gnQp3IwArWiRa6J
52rAqn8euDLo7azX9SNzxBCku3mRQoQ6+C9tAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUYhIiYA7I+WDrcWUJ1aolnuOWMsswHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzk0L1loSWlZQTdJLVdEcmNXVUoxYW9sbnVPV01zcy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ9wMAwDQYJKoZIhvcNAQELBQADggEB
AJoQxp8o0AtsEzw0xeJ8r+mAEWeEnCSlzT74lZqv1S3HnSe555H5lz86h93NdBMt
TM+k18u63OZEYBd+wph7UyZdwpEwdP7N5SCu9dLd+U26f1S+cBw82MyOEvaSn+VD
O+h+VcO+OQJGH6j+ZV6nlqjoGFMMSIJDzoAAtSbcfpmek+Lh0PPjFSUgZCSdnD2k
iZke27f/VACps5em+/X3PUmo1a3WQkOliS4Yw3VupoPb1JxrRyI9KStPdx2OKlnB
TYR6d3Aceb0B1CyvvjOQEM+2lfggEBI5IiaPI2YfqcnBLipT+ltc0jwoJj8Z580+
0831dUciN+Gdqn0di/uyAeo=
-----END CERTIFICATE-----
Generated at Fri Apr 17 02:19:26 2026 by rpki-client