
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/484/4LyPolT4nGp49KawMTrWfr-PGYA.roa
File: 4LyPolT4nGp49KawMTrWfr-PGYA.roa (raw, json)
Hash identifier: TeypRZ+zC9yHAq5WqQksiwyU3mu/Z3LQMyqPea4InIo=
Subject key identifier: E0:BC:8F:A2:54:F8:9C:6A:78:F4:A6:B0:31:3A:D6:7E:BF:8F:19:80
Certificate issuer: /CN=511E1CE89B3A407E5ACCEED8A55B2EF374FDF29C
Certificate serial: 1B
Authority key identifier: 51:1E:1C:E8:9B:3A:40:7E:5A:CC:EE:D8:A5:5B:2E:F3:74:FD:F2:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UR4c6Js6QH5azO7YpVsu83T98pw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/4LyPolT4nGp49KawMTrWfr-PGYA.roa
Signing time: Tue 31 Mar 2026 08:43:30 +0000
ROA not before: Tue 31 Mar 2026 08:43:30 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9354
IP address blocks: 157.5.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/UR4c6Js6QH5azO7YpVsu83T98pw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/UR4c6Js6QH5azO7YpVsu83T98pw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UR4c6Js6QH5azO7YpVsu83T98pw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=511E1CE89B3A407E5ACCEED8A55B2EF374FDF29C
Validity
Not Before: Mar 31 08:43:30 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=E0BC8FA254F89C6A78F4A6B0313AD67EBF8F1980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:53:c4:5b:df:45:84:a0:96:04:5a:30:2c:5c:
ae:b3:87:f6:db:15:0c:62:3c:04:ae:93:ce:e1:dd:
b9:dc:ec:e6:b7:eb:74:6d:97:1c:96:2f:44:77:39:
dc:ce:93:a3:28:d3:8d:57:a7:a2:ba:d7:a6:d8:b3:
26:d8:34:37:ba:ce:d9:f1:0d:19:92:b6:04:9a:ac:
87:27:70:ca:0a:4e:b9:a8:e2:10:f0:b0:e4:15:24:
b4:1d:ee:af:cd:08:c6:56:fb:00:9f:58:b5:40:e0:
0e:de:ac:e9:e1:f7:58:49:a9:fb:1d:02:95:af:f8:
15:53:30:68:9f:f3:30:ed:fe:56:40:36:cd:49:af:
53:b4:41:f3:b3:d1:07:3f:91:5e:e5:d3:95:1c:9a:
d3:bf:32:77:8a:55:32:11:52:8e:78:85:e8:83:cd:
3e:84:8e:a1:e0:b8:5e:bf:58:3e:86:0c:61:ff:20:
6d:b7:56:42:59:86:57:8a:41:6b:18:d1:32:4b:97:
f7:84:82:07:95:67:4f:a8:87:25:e8:14:a4:6c:aa:
be:08:d5:7c:b4:b1:f2:17:98:2f:c5:58:c2:27:18:
a5:ee:f4:bf:d7:dd:58:a0:79:65:15:9d:1a:d4:d4:
94:31:ff:46:d9:7a:4a:ba:65:87:f0:e7:bd:17:7c:
d7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BC:8F:A2:54:F8:9C:6A:78:F4:A6:B0:31:3A:D6:7E:BF:8F:19:80
X509v3 Authority Key Identifier:
keyid:51:1E:1C:E8:9B:3A:40:7E:5A:CC:EE:D8:A5:5B:2E:F3:74:FD:F2:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/UR4c6Js6QH5azO7YpVsu83T98pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UR4c6Js6QH5azO7YpVsu83T98pw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/4LyPolT4nGp49KawMTrWfr-PGYA.roa
sbgp-ipAddrBlock: critical
IPv4:
157.5.0.0/19
Signature Algorithm: sha256WithRSAEncryption
a4:f3:90:8e:95:69:cd:e8:ea:35:41:3c:1a:13:39:9b:81:68:
d2:ae:4b:7c:34:fe:6e:83:d6:b1:57:5e:a2:e1:d5:29:31:81:
27:12:e3:cf:ad:69:90:56:f8:46:f3:47:96:9a:b0:2e:e4:4c:
aa:52:08:2e:7f:de:a8:36:16:92:60:37:d3:f8:c5:48:e8:15:
a3:54:3c:97:10:35:bd:5a:3f:f4:66:c0:a8:ea:d6:18:57:86:
be:ad:7c:f8:c2:82:68:0a:49:08:46:af:1d:26:0a:38:d1:0c:
a2:68:58:bf:b8:99:73:67:ef:cc:c4:79:33:cd:ed:c1:5a:25:
c4:8e:a4:54:f0:10:8e:86:4a:4f:6a:d5:54:82:aa:1c:8c:48:
52:9e:e1:d0:aa:cc:a5:c7:2c:7b:1c:0d:d7:6d:c7:ef:69:3c:
71:f9:c0:20:28:1e:a5:b9:9d:9e:52:55:6b:90:e5:37:8d:82:
49:19:4f:da:0b:a5:a0:00:6f:ac:cf:01:df:19:01:24:2b:c5:
3c:20:17:53:62:de:ca:fe:09:2f:f0:32:ea:6d:7f:9f:fa:13:
57:57:70:06:a7:38:a8:57:24:61:01:50:f1:c8:4d:47:1a:50:
74:ba:61:ea:7b:1f:70:e7:87:33:27:9d:7d:65:69:a1:49:37:
2f:c0:1f:09
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBGzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MTFF
MUNFODlCM0E0MDdFNUFDQ0VFRDhBNTVCMkVGMzc0RkRGMjlDMB4XDTI2MDMzMTA4
NDMzMFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRTBCQzhGQTI1NEY4OUM2
QTc4RjRBNkIwMzEzQUQ2N0VCRjhGMTk4MDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANhTxFvfRYSglgRaMCxcrrOH9tsVDGI8BK6TzuHdudzs5rfrdG2X
HJYvRHc53M6ToyjTjVenorrXptizJtg0N7rO2fENGZK2BJqshydwygpOuajiEPCw
5BUktB3ur80Ixlb7AJ9YtUDgDt6s6eH3WEmp+x0Cla/4FVMwaJ/zMO3+VkA2zUmv
U7RB87PRBz+RXuXTlRya078yd4pVMhFSjniF6IPNPoSOoeC4Xr9YPoYMYf8gbbdW
QlmGV4pBaxjRMkuX94SCB5VnT6iHJegUpGyqvgjVfLSx8heYL8VYwicYpe70v9fd
WKB5ZRWdGtTUlDH/Rtl6Srplh/DnvRd818ECAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBTgvI+iVPicanj0prAxOtZ+v48ZgDAfBgNVHSMEGDAWgBRRHhzomzpAflrM7til
Wy7zdP3ynDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDg0L1VSNGM2SnM2UUg1YXpPN1lwVnN1ODNUOThwdy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VSNGM2SnM2UUg1YXpPN1lwVnN1ODNU
OThwdy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80ODQvNEx5UG9sVDRuR3A0OUthd01Ucldmci1QR1lBLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBZ0FADANBgkqhkiG9w0BAQsFAAOCAQEA
pPOQjpVpzejqNUE8GhM5m4Fo0q5LfDT+boPWsVdeouHVKTGBJxLjz61pkFb4RvNH
lpqwLuRMqlIILn/eqDYWkmA30/jFSOgVo1Q8lxA1vVo/9GbAqOrWGFeGvq18+MKC
aApJCEavHSYKONEMomhYv7iZc2fvzMR5M83twVolxI6kVPAQjoZKT2rVVIKqHIxI
Up7h0KrMpccsexwN123H72k8cfnAICgepbmdnlJVa5DlN42CSRlP2guloABvrM8B
3xkBJCvFPCAXU2Leyv4JL/Ay6m1/n/oTV1dwBqc4qFckYQFQ8chNRxpQdLph6nsf
cOeHMyedfWVpoUk3L8AfCQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:27:59 2026 by rpki-client