
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/0uJg9WbO-rkZ1T9vPMR9asQ9Dss.roa
File: 0uJg9WbO-rkZ1T9vPMR9asQ9Dss.roa (raw, json)
Hash identifier: LLjoRMw70FSP30iRvzgkCBcuDnkOAfyP1Vu9txwVZtM=
Subject key identifier: D2:E2:60:F5:66:CE:FA:B9:19:D5:3F:6F:3C:C4:7D:6A:C4:3D:0E:CB
Certificate issuer: /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial: 0117
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/0uJg9WbO-rkZ1T9vPMR9asQ9Dss.roa
Signing time: Tue 31 Mar 2026 08:30:18 +0000
ROA not before: Tue 31 Mar 2026 08:30:18 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4685
IP address blocks: 220.157.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 14:45:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 279 (0x117)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Validity
Not Before: Mar 31 08:30:18 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=D2E260F566CEFAB919D53F6F3CC47D6AC43D0ECB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a9:69:13:d7:07:29:8e:ad:b1:be:65:bf:e0:
58:48:5c:e9:ab:fd:6f:ad:cc:8d:92:d5:b1:2a:3e:
f4:33:df:5d:5f:a3:4c:35:4a:ad:78:08:34:2a:9d:
2a:06:8d:8c:b5:22:48:dd:97:f7:27:a6:b1:1c:18:
0b:c8:6e:3c:e1:81:e5:92:d3:96:eb:aa:c7:36:79:
9d:6f:00:45:a3:b6:c9:24:81:73:ce:92:66:b0:3a:
da:34:0f:68:fc:5c:ea:f2:e1:9b:6f:60:aa:d8:e1:
28:45:5d:1a:76:01:2a:73:25:67:0f:eb:bd:f3:b9:
b0:37:c8:8c:02:7d:d4:93:43:a6:83:df:32:f1:15:
73:f0:98:ff:6f:5b:b5:ad:1e:ed:5b:c4:75:1a:eb:
58:02:71:34:6b:35:0c:e8:75:93:12:f3:11:e7:bf:
52:4b:f3:86:22:5f:72:a5:77:4d:b8:ca:1c:53:f3:
2c:2e:87:a8:fe:c5:1a:6e:3e:57:06:54:07:4b:4c:
68:09:1e:bd:e1:52:30:39:82:62:fa:78:04:35:5e:
84:96:ff:03:a1:2b:5a:03:1e:4b:ee:67:aa:7a:18:
7e:fa:57:9f:16:93:8d:ec:8e:10:09:91:c7:ce:d5:
79:b8:33:df:ca:d6:02:d9:e0:14:c2:1b:2e:5c:64:
de:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E2:60:F5:66:CE:FA:B9:19:D5:3F:6F:3C:C4:7D:6A:C4:3D:0E:CB
X509v3 Authority Key Identifier:
keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/0uJg9WbO-rkZ1T9vPMR9asQ9Dss.roa
sbgp-ipAddrBlock: critical
IPv4:
220.157.128.0/17
Signature Algorithm: sha256WithRSAEncryption
04:e0:37:e8:6c:d3:f0:c5:39:4b:e7:b0:72:df:60:93:00:2a:
45:ea:84:77:99:ef:d2:d5:f9:08:d5:51:3d:af:e2:75:34:d1:
5c:47:b1:49:08:50:60:50:50:a0:d6:ae:0e:63:fa:00:04:cd:
ed:da:90:94:03:f0:4b:e4:53:af:24:26:4f:06:c5:c1:0f:15:
fe:42:b7:d6:e4:d6:20:da:75:d7:06:24:0f:e1:7e:9a:f0:78:
35:37:a0:01:6a:3d:f3:42:8a:09:15:fa:fa:c5:64:1b:d3:bd:
08:fc:2e:11:94:32:1c:4c:6a:20:23:14:44:b7:13:e1:28:21:
bb:c8:d7:fd:f4:89:bf:67:62:10:f7:ba:21:c0:11:31:d4:95:
e6:32:2f:cb:97:34:80:7a:69:30:9f:ad:34:f4:c8:db:17:fd:
a0:b1:72:78:99:52:bb:ab:32:d4:60:7d:7a:30:cd:fe:5f:57:
99:6f:58:08:83:d5:66:1f:85:1f:e7:5b:98:01:90:d1:8d:78:
07:cb:b4:66:de:12:6a:40:3f:f9:02:c3:1f:4a:66:97:26:34:
7f:b3:02:81:af:e6:d2:1d:38:d2:b0:b0:a0:dd:05:6d:40:e8:
e7:48:17:81:62:b8:ce:bc:6c:56:54:0f:20:98:3e:9f:4f:59:
0a:7a:34:0c
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgICARcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUJF
M0FCMEY4REIyNjVBQkIyMjg3RTc1MTUxRTdGNUE5M0IyQzczNjAeFw0yNjAzMzEw
ODMwMThaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQyRTI2MEY1NjZDRUZB
QjkxOUQ1M0Y2RjNDQzQ3RDZBQzQzRDBFQ0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDaqWkT1wcpjq2xvmW/4FhIXOmr/W+tzI2S1bEqPvQz311fo0w1
Sq14CDQqnSoGjYy1Ikjdl/cnprEcGAvIbjzhgeWS05brqsc2eZ1vAEWjtskkgXPO
kmawOto0D2j8XOry4ZtvYKrY4ShFXRp2ASpzJWcP673zubA3yIwCfdSTQ6aD3zLx
FXPwmP9vW7WtHu1bxHUa61gCcTRrNQzodZMS8xHnv1JL84YiX3Kld024yhxT8ywu
h6j+xRpuPlcGVAdLTGgJHr3hUjA5gmL6eAQ1XoSW/wOhK1oDHkvuZ6p6GH76V58W
k43sjhAJkcfO1Xm4M9/K1gLZ4BTCGy5cZN61AgMBAAGjggHXMIIB0zAdBgNVHQ4E
FgQU0uJg9WbO+rkZ1T9vPMR9asQ9DsswHwYDVR0jBBgwFoAUG+OrD42yZauyKH51
FR5/WpOyxzYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzUwL0ctT3JENDJ5WmF1eUtINTFGUjVfV3BPeXh6WS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ctT3JENDJ5WmF1eUtINTFGUjVfV3BP
eXh6WS5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF
BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC81MC8wdUpnOVdiTy1ya1oxVDl2UE1SOWFzUTlEc3Mucm9hMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH3J2AMA0GCSqGSIb3DQEBCwUAA4IBAQAE
4DfobNPwxTlL57By32CTACpF6oR3me/S1fkI1VE9r+J1NNFcR7FJCFBgUFCg1q4O
Y/oABM3t2pCUA/BL5FOvJCZPBsXBDxX+QrfW5NYg2nXXBiQP4X6a8Hg1N6ABaj3z
QooJFfr6xWQb070I/C4RlDIcTGogIxREtxPhKCG7yNf99Im/Z2IQ97ohwBEx1JXm
Mi/LlzSAemkwn6009MjbF/2gsXJ4mVK7qzLUYH16MM3+X1eZb1gIg9VmH4Uf51uY
AZDRjXgHy7Rm3hJqQD/5AsMfSmaXJjR/swKBr+bSHTjSsLCg3QVtQOjnSBeBYrjO
vGxWVA8gmD6fT1kKejQM
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:12:44 2026 by rpki-client