
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/484/7bxfuuFUlnr4UWyxOR2_996KxvY.roa
File: 7bxfuuFUlnr4UWyxOR2_996KxvY.roa (raw, json)
Hash identifier: JazitHss5So9sJ1KMDqjQEvd2VDJH0P2rXR5f3t95qM=
Subject key identifier: ED:BC:5F:BA:E1:54:96:7A:F8:51:6C:B1:39:1D:BF:F7:DE:8A:C6:F6
Certificate issuer: /CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
Certificate serial: 3B
Authority key identifier: C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/7bxfuuFUlnr4UWyxOR2_996KxvY.roa
Signing time: Tue 31 Mar 2026 08:43:31 +0000
ROA not before: Tue 31 Mar 2026 08:43:31 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9354
IP address blocks: 223.252.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 16:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
Validity
Not Before: Mar 31 08:43:31 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=EDBC5FBAE154967AF8516CB1391DBFF7DE8AC6F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f4:f7:10:7c:24:c6:66:eb:bf:91:5f:06:6d:
40:e5:bf:0d:a4:86:97:bc:88:67:94:91:29:43:40:
60:72:3c:8d:53:5f:fe:37:48:65:52:69:d8:60:82:
5b:3b:f5:4f:f6:af:58:f4:8e:02:3e:9a:6b:72:58:
55:b4:e7:33:39:3c:9f:98:78:df:9a:9a:fb:19:cf:
94:c9:e5:59:a6:90:ee:65:af:68:33:b3:71:5d:39:
b2:c0:42:55:cc:1e:1c:ef:93:21:41:95:cc:85:95:
e2:71:cc:f6:2e:be:0f:bc:32:7f:3c:23:2c:03:9c:
b4:21:25:38:72:0a:06:57:d6:6e:21:93:d1:9c:bb:
d1:1b:f3:9f:d1:92:19:27:87:1c:bf:87:d2:57:91:
34:a9:d1:73:54:dc:52:1d:99:38:e1:ba:60:5b:94:
2e:03:e0:67:69:1f:83:9b:f5:64:58:9c:ce:67:1e:
c4:e6:0e:d2:8c:f5:51:da:b2:5e:44:dc:21:6d:a2:
89:31:62:ad:35:4d:58:80:0f:e3:7b:54:22:a0:7c:
42:cd:b2:f8:61:52:50:fd:90:7b:77:16:b2:ec:c1:
7d:94:eb:6f:e1:fd:fc:09:81:4c:04:a8:7a:76:b6:
57:97:b4:75:4c:67:b5:69:aa:85:7c:4c:1b:4f:90:
aa:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:BC:5F:BA:E1:54:96:7A:F8:51:6C:B1:39:1D:BF:F7:DE:8A:C6:F6
X509v3 Authority Key Identifier:
keyid:C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/7bxfuuFUlnr4UWyxOR2_996KxvY.roa
sbgp-ipAddrBlock: critical
IPv4:
223.252.64.0/20
Signature Algorithm: sha256WithRSAEncryption
c4:16:a5:3c:5b:ed:c7:79:04:b0:0d:cf:e4:3f:4d:8d:b0:9e:
6f:8e:10:79:50:70:96:31:5b:b9:cb:5f:aa:96:68:ef:b3:38:
9a:8f:12:0e:90:8e:90:f6:38:6c:b5:82:62:33:dc:3a:5f:bd:
44:a4:28:d4:ba:01:c2:a5:32:e4:c3:2a:f8:a2:01:c4:11:07:
b7:75:8a:c9:52:cc:a8:43:94:76:a0:82:5d:b1:49:e7:58:ea:
70:5c:63:83:78:ce:bf:56:12:89:ea:e3:b8:e6:03:4c:0b:68:
95:57:97:84:ac:09:a9:1d:db:88:72:e7:7a:cd:2c:e6:49:2f:
f4:03:47:6c:b8:e4:8f:93:8a:46:60:0b:4a:4a:39:8f:60:4e:
4b:8e:8a:54:a0:fb:cd:f3:a8:70:59:10:9a:8e:24:aa:a2:43:
f6:69:4b:3c:ef:28:72:43:3d:92:b9:09:e4:f8:4a:16:38:12:
ef:08:02:ec:f5:8c:ef:48:39:9b:8f:28:84:ed:d3:e9:a9:ad:
43:c7:e7:92:cd:11:2e:ca:a3:e9:ee:c3:9d:12:d4:75:59:08:
52:aa:f0:c2:00:7c:98:ac:f8:37:39:64:f3:49:c1:54:6f:7f:
1d:8d:c9:be:f0:df:ed:7f:55:df:b3:72:fd:50:0f:94:4d:b6:
a4:bc:eb:8b
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBOzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDMDk4
NkMwRjJEQjJENEZFNzA3NjcyQzIyNzkzN0JFQUE5RjVENzhBMB4XDTI2MDMzMTA4
NDMzMVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRURCQzVGQkFFMTU0OTY3
QUY4NTE2Q0IxMzkxREJGRjdERThBQzZGNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOL09xB8JMZm67+RXwZtQOW/DaSGl7yIZ5SRKUNAYHI8jVNf/jdI
ZVJp2GCCWzv1T/avWPSOAj6aa3JYVbTnMzk8n5h435qa+xnPlMnlWaaQ7mWvaDOz
cV05ssBCVcweHO+TIUGVzIWV4nHM9i6+D7wyfzwjLAOctCElOHIKBlfWbiGT0Zy7
0Rvzn9GSGSeHHL+H0leRNKnRc1TcUh2ZOOG6YFuULgPgZ2kfg5v1ZFiczmcexOYO
0oz1UdqyXkTcIW2iiTFirTVNWIAP43tUIqB8Qs2y+GFSUP2Qe3cWsuzBfZTrb+H9
/AmBTASoena2V5e0dUxntWmqhXxMG0+Qqt8CAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBTtvF+64VSWevhRbLE5Hb/33orG9jAfBgNVHSMEGDAWgBTAmGwPLbLU/nB2csIn
k3vqqfXXijAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDg0L3dKaHNEeTJ5MVA1d2RuTENKNU43NnFuMTE0by5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3dKaHNEeTJ5MVA1d2RuTENKNU43NnFu
MTE0by5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80ODQvN2J4ZnV1RlVsbnI0VVd5eE9SMl85OTZLeHZZLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBN/8QDANBgkqhkiG9w0BAQsFAAOCAQEA
xBalPFvtx3kEsA3P5D9NjbCeb44QeVBwljFbuctfqpZo77M4mo8SDpCOkPY4bLWC
YjPcOl+9RKQo1LoBwqUy5MMq+KIBxBEHt3WKyVLMqEOUdqCCXbFJ51jqcFxjg3jO
v1YSierjuOYDTAtolVeXhKwJqR3biHLnes0s5kkv9ANHbLjkj5OKRmALSko5j2BO
S46KVKD7zfOocFkQmo4kqqJD9mlLPO8ockM9krkJ5PhKFjgS7wgC7PWM70g5m48o
hO3T6amtQ8fnks0RLsqj6e7DnRLUdVkIUqrwwgB8mKz4Nzlk80nBVG9/HY3JvvDf
7X9V37Ny/VAPlE22pLzriw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:07:17 2026 by rpki-client