
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/kP-JxiJWzxA42isNgwVnFdZ6WKo.roa
File: kP-JxiJWzxA42isNgwVnFdZ6WKo.roa (raw, json)
Hash identifier: ire0sKIeuk1qyxJdChaGx+enhorJHM0/8/Cz9Ft012s=
Subject key identifier: 90:FF:89:C6:22:56:CF:10:38:DA:2B:0D:83:05:67:15:D6:7A:58:AA
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 05F2
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/kP-JxiJWzxA42isNgwVnFdZ6WKo.roa
Signing time: Tue 31 Mar 2026 08:21:12 +0000
ROA not before: Tue 31 Mar 2026 08:21:12 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 10013
IP address blocks: 220.150.66.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:41:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1522 (0x5f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Mar 31 08:21:12 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=90FF89C62256CF1038DA2B0D83056715D67A58AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:43:b9:9f:75:54:9b:87:e7:3f:88:39:69:48:
6d:ae:8a:2f:fa:b3:fe:c3:9d:27:33:8d:17:d7:8a:
f4:70:45:81:47:0d:dd:6c:b5:49:7c:0d:1b:f9:bf:
05:9f:5f:b9:81:83:fb:42:7f:60:55:29:57:25:a2:
fa:db:7c:ba:25:13:97:ff:02:ef:ad:a8:fa:c0:ce:
38:8b:5c:80:b5:51:d1:0c:3e:7a:b2:e2:4e:18:b8:
1e:6a:f5:6f:f1:96:c8:ff:3d:b6:7e:9c:d8:eb:c1:
59:3e:28:be:00:fe:14:76:2a:f1:83:57:97:23:a4:
ee:9b:55:db:1a:19:0d:8d:1e:32:81:9a:2e:f6:9d:
44:83:7b:10:a5:4c:be:64:f2:de:34:0c:e7:f4:a2:
f7:b4:f4:6a:38:7b:10:cd:30:e8:92:13:5a:eb:a1:
da:aa:d9:60:60:47:c5:21:2a:b7:5a:6a:6f:2b:18:
2c:e4:e8:72:b8:16:d3:dc:94:4c:41:67:a9:c2:8a:
6d:03:d2:06:c6:66:2f:3b:c8:c8:12:95:fc:54:d7:
bd:55:8a:bb:86:89:84:78:1d:01:b8:c7:95:77:35:
a4:16:1f:cf:ec:ec:4a:ed:6c:01:1f:2d:e7:2e:82:
73:61:ff:1c:8a:e6:53:41:d3:cc:7f:93:fe:ed:7a:
25:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FF:89:C6:22:56:CF:10:38:DA:2B:0D:83:05:67:15:D6:7A:58:AA
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/kP-JxiJWzxA42isNgwVnFdZ6WKo.roa
sbgp-ipAddrBlock: critical
IPv4:
220.150.66.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:c7:40:2f:7f:00:6b:31:67:62:49:c0:07:cd:13:19:d5:ec:
96:78:66:eb:51:b0:95:b2:d8:27:e1:60:7c:6c:06:e5:10:25:
f3:89:48:06:d3:ef:6a:69:0a:ee:1f:ad:ab:ad:9f:6b:f5:1a:
71:29:e2:08:c4:1d:37:7f:6c:6a:fc:cc:0f:6e:e7:d2:8f:21:
50:55:9a:5c:7c:9c:9e:08:5d:90:55:ed:dc:26:aa:2e:24:c5:
58:9d:9f:40:96:18:56:d8:92:a3:c3:64:59:6a:c4:d4:04:e3:
ab:be:57:d5:80:61:b7:41:06:30:a6:6f:23:2d:84:ee:14:7e:
0f:4c:75:6f:b3:25:9b:fb:17:2d:d8:22:a1:c9:f3:19:45:b1:
96:0c:1c:44:94:0c:c0:ed:02:ce:d6:68:0a:9a:70:bc:40:4b:
9c:1c:4a:6d:4c:86:4f:ee:01:0a:38:37:f7:5e:ec:1b:50:d0:
2a:dd:19:e6:b6:5f:d0:65:9b:af:69:83:dc:16:ad:4e:35:9f:
93:6b:d3:0c:52:ac:6b:21:a7:c2:cc:7b:0f:11:bb:0f:23:5f:
54:d9:fd:be:ca:48:d3:a1:5c:30:78:ca:a7:8f:47:7f:04:8c:
7d:74:7f:8f:44:30:93:5f:8c:7a:3c:ea:4f:5c:24:e3:80:a7:
a9:5b:ed:45
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBfIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw
ODIxMTJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDkwRkY4OUM2MjI1NkNG
MTAzOERBMkIwRDgzMDU2NzE1RDY3QTU4QUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCfQ7mfdVSbh+c/iDlpSG2uii/6s/7DnSczjRfXivRwRYFHDd1s
tUl8DRv5vwWfX7mBg/tCf2BVKVclovrbfLolE5f/Au+tqPrAzjiLXIC1UdEMPnqy
4k4YuB5q9W/xlsj/PbZ+nNjrwVk+KL4A/hR2KvGDV5cjpO6bVdsaGQ2NHjKBmi72
nUSDexClTL5k8t40DOf0ove09Go4exDNMOiSE1rrodqq2WBgR8UhKrdaam8rGCzk
6HK4FtPclExBZ6nCim0D0gbGZi87yMgSlfxU171ViruGiYR4HQG4x5V3NaQWH8/s
7ErtbAEfLecugnNh/xyK5lNB08x/k/7teiVHAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUkP+JxiJWzxA42isNgwVnFdZ6WKowHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzk0L2tQLUp4aUpXenhBNDJpc05nd1ZuRmRaNldLby5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHclkIwDQYJKoZIhvcNAQELBQADggEB
AI3HQC9/AGsxZ2JJwAfNExnV7JZ4ZutRsJWy2CfhYHxsBuUQJfOJSAbT72ppCu4f
rautn2v1GnEp4gjEHTd/bGr8zA9u59KPIVBVmlx8nJ4IXZBV7dwmqi4kxVidn0CW
GFbYkqPDZFlqxNQE46u+V9WAYbdBBjCmbyMthO4Ufg9MdW+zJZv7Fy3YIqHJ8xlF
sZYMHESUDMDtAs7WaAqacLxAS5wcSm1Mhk/uAQo4N/de7BtQ0CrdGea2X9Blm69p
g9wWrU41n5Nr0wxSrGshp8LMew8Ruw8jX1TZ/b7KSNOhXDB4yqePR38EjH10f49E
MJNfjHo86k9cJOOAp6lb7UU=
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:22:50 2026 by rpki-client