
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/62XkW8eBJjeOipAR3irxhtIGa0E.roa
File: 62XkW8eBJjeOipAR3irxhtIGa0E.roa (raw, json)
Hash identifier: hPjEBXDeWIZUteE6TQbTzczx/o/3TnUvClmVvyFyMhs=
Subject key identifier: EB:65:E4:5B:C7:81:26:37:8E:8A:90:11:DE:2A:F1:86:D2:06:6B:41
Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial: C5
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/62XkW8eBJjeOipAR3irxhtIGa0E.roa
Signing time: Tue 31 Mar 2026 07:39:41 +0000
ROA not before: Tue 31 Mar 2026 07:39:41 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2527
IP address blocks: 159.28.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197 (0xc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Validity
Not Before: Mar 31 07:39:41 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=EB65E45BC78126378E8A9011DE2AF186D2066B41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3a:80:32:0b:a7:9b:b2:db:b2:a5:5d:8a:88:
7e:54:9f:1d:42:ae:c3:bc:50:ba:dc:d7:b7:d5:4a:
4d:a7:69:83:f4:43:4c:9a:98:da:56:24:19:b2:f3:
bf:f2:8e:e6:ac:62:30:2f:99:1f:6f:12:64:45:5b:
c4:22:e8:65:c9:d9:ab:59:54:ef:80:44:4b:54:8c:
6f:cd:18:83:3f:74:f5:f5:07:ad:44:2a:a2:be:e6:
e2:27:05:93:38:14:a5:d8:ed:d9:6a:4c:c0:ac:24:
cc:63:9f:7c:73:af:ed:9d:85:e6:da:bb:e8:e6:5f:
a0:b2:9d:5c:09:92:ee:98:ee:34:18:17:b0:4c:60:
2e:91:40:da:87:7f:95:4b:85:ec:d2:d7:20:0e:44:
90:8f:90:b4:3f:ac:22:be:da:3f:3a:b3:24:e3:d3:
80:86:b0:dd:6a:4d:a3:09:cc:ce:b4:a8:9f:6e:fe:
33:57:0b:1a:46:dc:ea:00:90:cd:45:30:5f:75:e4:
4e:df:86:88:84:bc:12:d4:0f:1f:31:69:c9:f7:32:
f2:fc:88:1d:2b:03:af:95:3c:17:07:d5:d4:75:32:
e5:51:3e:61:32:c5:4a:bd:f8:20:65:d9:e6:2b:e1:
4f:4b:92:14:d9:56:c4:8f:ab:c3:e1:86:0c:2c:f2:
0c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:65:E4:5B:C7:81:26:37:8E:8A:90:11:DE:2A:F1:86:D2:06:6B:41
X509v3 Authority Key Identifier:
keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/62XkW8eBJjeOipAR3irxhtIGa0E.roa
sbgp-ipAddrBlock: critical
IPv4:
159.28.128.0/17
Signature Algorithm: sha256WithRSAEncryption
0c:b7:9b:b8:31:2b:b5:cc:f3:02:80:ed:ce:f0:c1:bd:26:8e:
c1:3f:cd:2c:67:a9:6d:2b:ae:59:81:1c:35:f0:cf:2a:f5:a0:
0c:e7:31:f6:89:20:5e:c2:48:79:77:03:16:c6:48:7a:4e:d1:
6c:81:3d:c5:1a:6d:a3:72:2d:1f:3d:58:03:1b:62:1f:40:3c:
a9:44:33:7e:59:14:18:7c:de:f3:43:c5:31:70:1f:e6:52:c7:
e1:de:74:17:ce:72:a3:18:80:1a:20:76:87:0b:b7:f4:cc:5b:
ff:05:34:7d:62:9f:3c:e5:42:e8:11:49:8e:9f:a5:ce:21:91:
6e:0e:cb:a3:2b:be:b2:5f:25:1d:ba:98:32:c0:b8:b3:90:57:
01:44:ec:22:be:d2:90:41:81:d2:da:12:e3:d3:c9:f3:c3:00:
06:b8:1b:b5:df:18:04:10:e6:4d:13:0b:39:65:44:b3:11:91:
35:8e:a2:6f:f8:30:aa:8a:4c:1a:8a:c0:d5:dc:79:86:7f:29:
32:5e:1b:4e:e9:cb:81:f0:a6:47:c4:13:73:c4:d8:0f:02:47:
e1:c1:56:7e:18:0f:d7:77:c5:74:72:23:25:4d:fb:6b:f0:bb:
13:5f:e3:b3:75:be:5b:9b:ec:7a:ef:f8:29:94:ff:ce:9f:6d:
5e:89:5b:9b
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDRD
QTdGMzVBRjFBOEY1MjU3NUE5RkVGRkYyMUM0QTQ3MDgwRERGQTAeFw0yNjAzMzEw
NzM5NDFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEVCNjVFNDVCQzc4MTI2
Mzc4RThBOTAxMURFMkFGMTg2RDIwNjZCNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFOoAyC6ebstuypV2KiH5Unx1CrsO8ULrc17fVSk2naYP0Q0ya
mNpWJBmy87/yjuasYjAvmR9vEmRFW8Qi6GXJ2atZVO+AREtUjG/NGIM/dPX1B61E
KqK+5uInBZM4FKXY7dlqTMCsJMxjn3xzr+2dhebau+jmX6CynVwJku6Y7jQYF7BM
YC6RQNqHf5VLhezS1yAORJCPkLQ/rCK+2j86syTj04CGsN1qTaMJzM60qJ9u/jNX
CxpG3OoAkM1FMF915E7fhoiEvBLUDx8xacn3MvL8iB0rA6+VPBcH1dR1MuVRPmEy
xUq9+CBl2eYr4U9LkhTZVsSPq8Phhgws8gw3AgMBAAGjggHXMIIB0zAdBgNVHQ4E
FgQU62XkW8eBJjeOipAR3irxhtIGa0EwHwYDVR0jBBgwFoAUBMp/Na8aj1JXWp/v
/yHEpHCA3fowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0JNcF9OYThhajFKWFdwX3ZfeUhFcEhDQTNmby5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0JNcF9OYThhajFKWFdwX3ZfeUhFcEhD
QTNmby5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF
BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80My82MlhrVzhlQkpqZU9pcEFSM2lyeGh0SUdhMEUucm9hMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHnxyAMA0GCSqGSIb3DQEBCwUAA4IBAQAM
t5u4MSu1zPMCgO3O8MG9Jo7BP80sZ6ltK65ZgRw18M8q9aAM5zH2iSBewkh5dwMW
xkh6TtFsgT3FGm2jci0fPVgDG2IfQDypRDN+WRQYfN7zQ8UxcB/mUsfh3nQXznKj
GIAaIHaHC7f0zFv/BTR9Yp885ULoEUmOn6XOIZFuDsujK76yXyUdupgywLizkFcB
ROwivtKQQYHS2hLj08nzwwAGuBu13xgEEOZNEws5ZUSzEZE1jqJv+DCqikwaisDV
3HmGfykyXhtO6cuB8KZHxBNzxNgPAkfhwVZ+GA/Xd8V0ciMlTftr8LsTX+Ozdb5b
m+x67/gplP/On21eiVub
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:29:45 2026 by rpki-client