
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/qiizDLHMUFb09Vlv9YqHrCulwfE.roa
File: qiizDLHMUFb09Vlv9YqHrCulwfE.roa (raw, json)
Hash identifier: zfX0cGQVpgdEsJyGyxUwqK4556GHwMiJYbtiMplFeBM=
Subject key identifier: AA:28:B3:0C:B1:CC:50:56:F4:F5:59:6F:F5:8A:87:AC:2B:A5:C1:F1
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 0207
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/qiizDLHMUFb09Vlv9YqHrCulwfE.roa
Signing time: Tue 31 Mar 2026 07:40:14 +0000
ROA not before: Tue 31 Mar 2026 07:40:14 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2527
IP address blocks: 133.165.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 519 (0x207)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Mar 31 07:40:14 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=AA28B30CB1CC5056F4F5596FF58A87AC2BA5C1F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:88:b2:a9:f9:6a:a6:f3:fb:de:20:e4:95:4b:
b3:8e:1c:0d:d0:b2:8b:0c:fd:f3:ba:22:d9:2f:4f:
79:07:6e:58:58:3e:42:83:ba:32:d7:29:5c:b5:25:
a9:d3:06:28:48:c8:46:ac:63:9d:83:2a:28:60:1c:
34:a7:f0:ad:28:9e:28:46:e6:28:21:77:2a:94:b0:
b0:8e:d7:ad:1f:29:fd:97:b8:38:11:9a:ac:38:5b:
94:5b:33:c3:69:f6:c3:b6:57:85:05:73:33:0f:23:
4e:c9:a9:7e:5b:49:cb:b5:58:c2:6a:21:4f:e1:a2:
68:bb:ce:27:97:c4:e7:c9:ce:f8:55:70:b7:5c:4b:
1e:e0:ff:ff:f1:cf:82:2d:fa:a0:9d:5b:9c:48:e1:
9b:90:f2:50:37:f8:9c:aa:6c:b9:53:d7:3b:61:7b:
90:42:06:1a:b4:9c:cc:13:25:cb:26:d7:45:2c:04:
e0:13:fa:28:8b:4d:29:a1:78:c2:98:7a:ec:5c:ac:
61:3e:c7:5c:30:81:14:90:ce:8e:a1:bd:00:b5:08:
3a:ca:09:cc:74:e0:95:c6:51:8d:19:93:70:9b:40:
24:ac:92:53:c7:39:82:42:32:e7:94:9e:52:d7:42:
44:c0:bc:26:5f:9c:c4:e7:0b:d3:ee:54:d6:9f:4b:
a6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:28:B3:0C:B1:CC:50:56:F4:F5:59:6F:F5:8A:87:AC:2B:A5:C1:F1
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/qiizDLHMUFb09Vlv9YqHrCulwfE.roa
sbgp-ipAddrBlock: critical
IPv4:
133.165.128.0/18
Signature Algorithm: sha256WithRSAEncryption
59:6c:7c:7d:05:96:03:33:f2:21:ba:6b:cc:9a:0e:29:77:9a:
fb:b8:df:9b:b9:78:5f:3e:2f:9c:c0:bb:0b:c2:7d:21:73:13:
73:90:32:a7:ea:5a:43:f3:12:6d:0d:6d:04:f7:3f:84:fe:ca:
70:ab:69:fb:e4:eb:9b:8d:c9:66:cd:09:73:86:ea:82:46:86:
4f:37:82:1c:a9:79:13:b0:20:85:fa:40:fe:72:bf:e6:14:0c:
f5:ae:bb:14:f3:79:77:63:b4:0f:cd:5b:b0:77:be:38:b8:7e:
1c:b6:0f:42:01:66:a5:92:4f:0c:2e:01:fb:d4:cd:fb:c0:5a:
e9:80:4d:e7:c7:5c:9a:d3:c7:46:34:17:8d:66:c4:cc:74:4b:
8f:04:3b:45:c4:f4:e4:4d:3d:9e:46:2f:2e:3d:c4:47:ca:01:
51:c2:5d:a4:50:ba:52:7e:6e:61:3d:02:aa:39:a2:75:5b:1b:
03:b5:d0:cd:76:87:a6:18:f3:2b:63:25:53:43:9f:c5:98:7c:
9e:15:72:24:57:c4:24:fb:d2:e9:39:7a:58:83:5f:67:33:9b:
b1:43:20:db:08:bc:4b:65:f7:ba:b0:de:6a:98:e0:67:f8:86:
2d:bb:53:ef:b5:8e:5e:4a:4c:79:b6:d6:43:ec:db:a8:67:d7:
a3:8c:ef:d7
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgICAgcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1
QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yNjAzMzEw
NzQwMTRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFBMjhCMzBDQjFDQzUw
NTZGNEY1NTk2RkY1OEE4N0FDMkJBNUMxRjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0iLKp+Wqm8/veIOSVS7OOHA3QsosM/fO6ItkvT3kHblhYPkKD
ujLXKVy1JanTBihIyEasY52DKihgHDSn8K0onihG5ighdyqUsLCO160fKf2XuDgR
mqw4W5RbM8Np9sO2V4UFczMPI07JqX5bScu1WMJqIU/homi7zieXxOfJzvhVcLdc
Sx7g///xz4It+qCdW5xI4ZuQ8lA3+JyqbLlT1zthe5BCBhq0nMwTJcsm10UsBOAT
+iiLTSmheMKYeuxcrGE+x1wwgRSQzo6hvQC1CDrKCcx04JXGUY0Zk3CbQCSsklPH
OYJCMueUnlLXQkTAvCZfnMTnC9PuVNafS6aHAgMBAAGjggHXMIIB0zAdBgNVHQ4E
FgQUqiizDLHMUFb09Vlv9YqHrCulwfEwHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo
3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1
ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF
BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80My9xaWl6RExITVVGYjA5Vmx2OVlxSHJDdWx3ZkUucm9hMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGhaWAMA0GCSqGSIb3DQEBCwUAA4IBAQBZ
bHx9BZYDM/IhumvMmg4pd5r7uN+buXhfPi+cwLsLwn0hcxNzkDKn6lpD8xJtDW0E
9z+E/spwq2n75OubjclmzQlzhuqCRoZPN4IcqXkTsCCF+kD+cr/mFAz1rrsU83l3
Y7QPzVuwd744uH4ctg9CAWalkk8MLgH71M37wFrpgE3nx1ya08dGNBeNZsTMdEuP
BDtFxPTkTT2eRi8uPcRHygFRwl2kULpSfm5hPQKqOaJ1WxsDtdDNdoemGPMrYyVT
Q5/FmHyeFXIkV8Qk+9LpOXpYg19nM5uxQyDbCLxLZfe6sN5qmOBn+IYtu1PvtY5e
Skx5ttZD7NuoZ9ejjO/X
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:04:37 2026 by rpki-client