
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/506/-Jcx8rP0Gv20W-OXaTXFw_ELBLw.roa
File: -Jcx8rP0Gv20W-OXaTXFw_ELBLw.roa (raw, json)
Hash identifier: R8iODMDANf6tIiDP2ObSlIHJbhSAidG9P+QF0RtNIG4=
Subject key identifier: F8:97:31:F2:B3:F4:1A:FD:B4:5B:E3:97:69:35:C5:C3:F1:0B:04:BC
Certificate issuer: /CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
Certificate serial: 7F
Authority key identifier: 4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/-Jcx8rP0Gv20W-OXaTXFw_ELBLw.roa
Signing time: Tue 31 Mar 2026 07:30:58 +0000
ROA not before: Tue 31 Mar 2026 07:30:58 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 38636
IP address blocks: 27.131.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127 (0x7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
Validity
Not Before: Mar 31 07:30:58 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=F89731F2B3F41AFDB45BE3976935C5C3F10B04BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3d:7b:f6:9f:07:bb:2a:7c:b0:af:23:5d:24:
7b:92:f4:fd:fe:b2:87:33:7f:d4:64:19:e9:80:51:
24:82:63:3f:f1:a3:96:57:e5:c2:e5:b3:23:47:6b:
17:51:21:94:f9:a9:16:ab:b3:eb:71:14:7b:dc:0a:
a3:1a:39:3a:8d:b9:4c:4d:77:1a:df:9f:00:a3:9e:
8a:dc:3a:1e:3b:99:6a:f3:82:a7:94:f8:12:4a:5d:
4d:a7:01:f5:e2:a0:cf:21:01:6e:98:26:c7:b0:d7:
12:ae:71:b8:56:6a:97:42:ab:06:6f:28:b1:7e:f4:
16:c8:e1:06:78:48:88:d0:2e:a7:ab:83:cc:4e:41:
a2:d3:9c:db:4a:58:9c:74:73:d7:8f:a9:fe:14:d3:
8e:b4:81:26:d1:fc:a0:a3:8c:17:1c:50:11:0b:3e:
2b:60:ed:cb:33:ab:5a:2c:2d:f3:a9:0f:e6:af:65:
bf:f0:64:67:66:83:29:e1:ab:b0:90:34:12:54:2f:
28:cd:e1:87:ec:b7:1b:3f:04:45:d5:9e:ae:41:ef:
07:ca:6c:f6:73:a0:7b:37:74:2c:f2:b3:3c:f0:07:
d7:f8:f9:37:fd:59:61:43:e0:29:67:7c:d9:54:7c:
e0:1f:b9:9f:b8:2a:57:e5:ed:5b:cb:b6:d5:65:98:
95:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:97:31:F2:B3:F4:1A:FD:B4:5B:E3:97:69:35:C5:C3:F1:0B:04:BC
X509v3 Authority Key Identifier:
keyid:4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/-Jcx8rP0Gv20W-OXaTXFw_ELBLw.roa
sbgp-ipAddrBlock: critical
IPv4:
27.131.8.0/24
Signature Algorithm: sha256WithRSAEncryption
06:b6:b9:9e:3e:05:75:59:55:9a:04:0a:c8:ea:01:73:0c:c6:
81:e2:6e:98:91:9d:24:39:99:b9:ab:88:67:c0:f4:4e:b3:97:
16:36:3b:30:77:9d:a9:1a:ef:e9:20:ab:36:c2:3e:9a:9e:4e:
b4:23:cb:77:b8:6d:08:c2:95:53:a6:eb:98:1d:d4:87:9c:ae:
77:a5:5f:eb:b9:ee:3a:a7:09:93:36:48:3d:38:02:f5:61:87:
3a:1f:74:10:3a:a2:d6:38:bb:cb:ee:35:b0:98:30:c1:ae:b6:
40:df:93:b0:c0:84:f0:af:30:06:8b:68:5b:39:4a:ab:8d:a7:
d9:09:34:36:27:61:3f:eb:68:ed:c3:ba:5f:ec:be:84:56:6d:
ad:47:3c:16:fd:84:cf:d1:fd:63:4b:37:e3:da:80:17:6f:9f:
ae:2a:1a:08:7a:12:89:db:e6:a6:ab:03:bb:ee:8f:3e:86:3c:
fa:51:17:26:a8:07:19:47:f6:de:05:63:b3:8e:b2:41:0a:6d:
0f:bf:02:a4:5b:7b:4d:04:81:65:cd:8b:12:0a:58:96:d4:fe:
0b:5f:cd:2f:87:47:30:8e:35:30:ee:3a:6d:ed:74:10:47:68:
a8:b9:7f:42:43:c6:37:86:c8:cd:18:da:15:e4:be:78:6a:c8:
b2:28:da:5f
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBfzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0QkVB
NkJEOEE5Qzc4NDg4MjkxNDE5OTlBMDE2QTBDOUQxOTkxMkFGMB4XDTI2MDMzMTA3
MzA1OFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRjg5NzMxRjJCM0Y0MUFG
REI0NUJFMzk3NjkzNUM1QzNGMTBCMDRCQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKA9e/afB7sqfLCvI10ke5L0/f6yhzN/1GQZ6YBRJIJjP/Gjllfl
wuWzI0drF1EhlPmpFquz63EUe9wKoxo5Oo25TE13Gt+fAKOeitw6HjuZavOCp5T4
EkpdTacB9eKgzyEBbpgmx7DXEq5xuFZql0KrBm8osX70FsjhBnhIiNAup6uDzE5B
otOc20pYnHRz14+p/hTTjrSBJtH8oKOMFxxQEQs+K2DtyzOrWiwt86kP5q9lv/Bk
Z2aDKeGrsJA0ElQvKM3hh+y3Gz8ERdWerkHvB8ps9nOgezd0LPKzPPAH1/j5N/1Z
YUPgKWd82VR84B+5n7gqV+XtW8u21WWYlQECAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBT4lzHys/Qa/bRb45dpNcXD8QsEvDAfBgNVHSMEGDAWgBRL6mvYqceEiCkUGZmg
FqDJ0ZkSrzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTA2L1MtcHIyS25IaElncEZCbVpvQmFneWRHWkVxOC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1MtcHIyS25IaElncEZCbVpvQmFneWRH
WkVxOC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC81MDYvLUpjeDhyUDBHdjIwVy1PWGFUWEZ3X0VMQkx3LnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABuDCDANBgkqhkiG9w0BAQsFAAOCAQEA
Bra5nj4FdVlVmgQKyOoBcwzGgeJumJGdJDmZuauIZ8D0TrOXFjY7MHedqRrv6SCr
NsI+mp5OtCPLd7htCMKVU6brmB3Uh5yud6Vf67nuOqcJkzZIPTgC9WGHOh90EDqi
1ji7y+41sJgwwa62QN+TsMCE8K8wBotoWzlKq42n2Qk0NidhP+to7cO6X+y+hFZt
rUc8Fv2Ez9H9Y0s349qAF2+frioaCHoSidvmpqsDu+6PPoY8+lEXJqgHGUf23gVj
s46yQQptD78CpFt7TQSBZc2LEgpYltT+C1/NL4dHMI41MO46be10EEdoqLl/QkPG
N4bIzRjaFeS+eGrIsijaXw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:28:34 2026 by rpki-client