
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/RTOwU7Imd3AesfhB3UhvlRjzGLY.roa
File: RTOwU7Imd3AesfhB3UhvlRjzGLY.roa (raw, json)
Hash identifier: gWDDmhl8ZacRMnBoYXivsJLEWPJHDi2DbEVHwI1jHJM=
Subject key identifier: 45:33:B0:53:B2:26:77:70:1E:B1:F8:41:DD:48:6F:95:18:F3:18:B6
Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial: C7
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/RTOwU7Imd3AesfhB3UhvlRjzGLY.roa
Signing time: Tue 31 Mar 2026 07:39:42 +0000
ROA not before: Tue 31 Mar 2026 07:39:42 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2527
IP address blocks: 152.117.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199 (0xc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Validity
Not Before: Mar 31 07:39:42 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=4533B053B22677701EB1F841DD486F9518F318B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6a:40:d0:b8:3e:30:56:f7:f1:54:d8:b9:67:
6f:c6:36:84:44:09:1c:61:1b:6f:cf:1d:fe:96:52:
85:98:2d:ed:75:28:1e:1d:d0:7f:32:e4:d6:40:a1:
b5:30:d6:8a:85:3a:b2:6e:1f:a5:67:5b:07:ab:dd:
5e:75:71:ba:cf:1a:2a:d8:af:02:0e:44:d1:dc:f9:
7d:3c:26:9a:f7:66:8d:9d:9d:ff:a3:36:eb:27:57:
c6:6b:6a:60:c7:7e:96:b2:b4:69:6f:39:82:f1:f7:
22:cb:e6:c1:fa:9e:93:f3:37:a5:cf:a2:4e:54:e7:
78:96:81:9f:d0:50:bc:27:5c:74:29:be:0e:ce:12:
25:f5:11:8f:40:2f:ba:37:72:65:22:4d:9f:72:d7:
90:b8:9c:c4:59:e4:15:e5:cb:0c:9a:b3:16:22:d4:
6b:ae:fe:7d:73:da:78:6b:b4:d1:49:05:c4:37:39:
42:8c:9a:c1:d9:3f:59:8e:ee:75:79:29:29:e4:9b:
13:bc:ca:7c:c9:c0:3b:0b:54:5f:db:86:b7:3b:9b:
a1:44:b9:c8:79:8a:a7:f2:61:e0:7b:07:43:4b:f1:
17:e8:c7:ea:17:a6:cc:78:90:78:76:a2:bf:ba:c9:
b2:59:39:35:63:e2:e6:b1:a2:8e:1f:e1:73:ea:c5:
79:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:33:B0:53:B2:26:77:70:1E:B1:F8:41:DD:48:6F:95:18:F3:18:B6
X509v3 Authority Key Identifier:
keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/RTOwU7Imd3AesfhB3UhvlRjzGLY.roa
sbgp-ipAddrBlock: critical
IPv4:
152.117.128.0/17
Signature Algorithm: sha256WithRSAEncryption
1a:84:2e:53:06:be:ef:fd:ab:08:6a:c3:9e:51:55:52:c8:df:
c2:3c:76:6a:be:cd:5f:be:cb:eb:1f:28:f4:52:81:9a:db:59:
0b:c4:6d:38:52:ef:fa:fc:82:15:cc:28:43:b0:00:38:67:ae:
10:9b:d1:7a:2e:b1:bc:4f:26:5e:30:34:66:f2:7f:e2:e1:0d:
88:65:7d:70:18:e5:97:8f:54:d3:5b:28:2c:f2:11:fe:42:35:
c2:38:7e:a3:b3:6f:e1:14:76:d7:77:90:40:88:cc:74:55:2d:
70:59:fd:fb:28:13:59:bc:a8:cb:a7:8f:de:a2:33:7b:65:c2:
36:86:c9:c7:19:6a:2b:14:58:7e:0a:38:de:44:ec:d1:b5:c2:
5c:99:8e:ce:fc:1e:79:90:62:6b:e5:7c:e4:f0:52:80:ec:f2:
89:bc:98:f2:b4:79:6e:51:36:ec:9a:91:30:ca:73:2d:d5:5a:
73:96:ed:22:1f:2e:21:2e:b6:1b:2a:8d:93:ed:b4:aa:d1:60:
0c:e1:08:33:a1:62:bd:75:59:91:2e:a5:11:c7:77:04:23:dd:
17:f3:39:86:cf:f2:92:e2:71:92:66:bb:29:54:5e:30:97:31:
f7:3d:ab:d4:92:d8:84:98:1f:62:4d:86:3a:31:b4:af:7c:4f:
0d:fc:d0:8e
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDRD
QTdGMzVBRjFBOEY1MjU3NUE5RkVGRkYyMUM0QTQ3MDgwRERGQTAeFw0yNjAzMzEw
NzM5NDJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQ1MzNCMDUzQjIyNjc3
NzAxRUIxRjg0MURENDg2Rjk1MThGMzE4QjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+akDQuD4wVvfxVNi5Z2/GNoRECRxhG2/PHf6WUoWYLe11KB4d
0H8y5NZAobUw1oqFOrJuH6VnWwer3V51cbrPGirYrwIORNHc+X08Jpr3Zo2dnf+j
NusnV8ZramDHfpaytGlvOYLx9yLL5sH6npPzN6XPok5U53iWgZ/QULwnXHQpvg7O
EiX1EY9AL7o3cmUiTZ9y15C4nMRZ5BXlywyasxYi1Guu/n1z2nhrtNFJBcQ3OUKM
msHZP1mO7nV5KSnkmxO8ynzJwDsLVF/bhrc7m6FEuch5iqfyYeB7B0NL8Rfox+oX
psx4kHh2or+6ybJZOTVj4uaxoo4f4XPqxXk/AgMBAAGjggHXMIIB0zAdBgNVHQ4E
FgQURTOwU7Imd3AesfhB3UhvlRjzGLYwHwYDVR0jBBgwFoAUBMp/Na8aj1JXWp/v
/yHEpHCA3fowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0JNcF9OYThhajFKWFdwX3ZfeUhFcEhDQTNmby5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0JNcF9OYThhajFKWFdwX3ZfeUhFcEhD
QTNmby5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF
BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80My9SVE93VTdJbWQzQWVzZmhCM1VodmxSanpHTFkucm9hMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHmHWAMA0GCSqGSIb3DQEBCwUAA4IBAQAa
hC5TBr7v/asIasOeUVVSyN/CPHZqvs1fvsvrHyj0UoGa21kLxG04Uu/6/IIVzChD
sAA4Z64Qm9F6LrG8TyZeMDRm8n/i4Q2IZX1wGOWXj1TTWygs8hH+QjXCOH6js2/h
FHbXd5BAiMx0VS1wWf37KBNZvKjLp4/eojN7ZcI2hsnHGWorFFh+CjjeROzRtcJc
mY7O/B55kGJr5Xzk8FKA7PKJvJjytHluUTbsmpEwynMt1Vpzlu0iHy4hLrYbKo2T
7bSq0WAM4QgzoWK9dVmRLqURx3cEI90X8zmGz/KS4nGSZrspVF4wlzH3PavUktiE
mB9iTYY6MbSvfE8N/NCO
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:26:02 2026 by rpki-client