
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/stQNEJz4qeK2KkOUxI5hSmHVwLQ.roa
File: stQNEJz4qeK2KkOUxI5hSmHVwLQ.roa (raw, json)
Hash identifier: GzspYBH62WarK+5u8CsvJ7wn4Aeh9VAI5e6CfhXJBUI=
Subject key identifier: B2:D4:0D:10:9C:F8:A9:E2:B6:2A:43:94:C4:8E:61:4A:61:D5:C0:B4
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 0644
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/stQNEJz4qeK2KkOUxI5hSmHVwLQ.roa
Signing time: Tue 31 Mar 2026 07:27:29 +0000
ROA not before: Tue 31 Mar 2026 07:27:29 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 10010
IP address blocks: 42.125.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:41:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1604 (0x644)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: Mar 31 07:27:29 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=B2D40D109CF8A9E2B62A4394C48E614A61D5C0B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d6:5e:52:bd:81:70:b7:9d:8d:f6:99:c3:79:
49:9b:bd:92:ce:10:e8:2b:eb:8d:3c:4a:18:91:f9:
7b:f1:a5:7b:ad:49:d3:4a:75:fe:c6:2a:59:b1:08:
f4:12:ed:b7:cd:ab:74:c1:57:94:c8:f8:b7:1e:22:
cd:b4:89:85:22:39:9b:9a:84:f4:f8:85:34:a8:1e:
a6:a2:11:e0:66:36:94:41:c0:96:c1:63:39:d0:89:
b5:74:48:71:ef:9a:13:b7:2a:93:23:9e:4c:33:0d:
c0:36:90:3c:ce:a0:5d:02:09:f5:ab:98:74:3f:1e:
a3:61:42:1a:f2:22:ea:8e:c7:d4:a4:87:d7:bd:56:
fd:3d:cb:bb:5a:75:0e:d9:74:8b:05:47:a6:10:2b:
fd:15:b4:5b:1e:ae:b8:08:2a:65:28:a1:ca:bf:0d:
42:ae:6b:f9:8f:41:43:fd:98:86:97:f1:6b:a2:25:
68:98:05:00:c2:69:e6:6b:17:93:78:02:e2:39:f8:
35:6a:53:30:da:5f:7b:02:76:b3:36:9f:13:e0:43:
7a:e5:91:fb:59:7d:0b:40:ab:e7:b9:a0:45:3d:95:
05:38:32:1f:b9:3d:1f:37:b7:82:a9:b0:4d:32:72:
45:15:f4:5a:6d:42:4d:e3:99:f7:47:87:12:0c:79:
ee:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D4:0D:10:9C:F8:A9:E2:B6:2A:43:94:C4:8E:61:4A:61:D5:C0:B4
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/stQNEJz4qeK2KkOUxI5hSmHVwLQ.roa
sbgp-ipAddrBlock: critical
IPv4:
42.125.243.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:39:2b:66:4f:79:e6:1f:27:f6:88:b4:e6:10:d8:18:9a:0d:
5d:24:06:c6:9b:8c:dd:4c:1b:9b:2b:0b:70:82:f9:56:54:3a:
81:fe:f9:ce:05:5b:af:5a:82:10:1a:9a:ac:52:79:7d:49:7e:
66:35:0b:bb:5e:48:0a:61:66:a2:45:22:bb:a8:a2:fe:80:6f:
3b:f0:c4:12:f2:c8:b7:15:26:4c:29:ea:20:ad:de:a5:c1:9e:
35:98:15:1f:f6:8b:9e:e6:5a:29:7f:35:f1:fb:23:67:97:ba:
7c:05:83:a3:24:02:ca:29:b8:5f:8f:21:cb:0f:f9:91:9c:89:
b5:ac:04:5b:8c:69:9e:09:b3:79:a7:10:83:20:db:60:6c:93:
bc:70:d9:55:73:6a:ee:8a:27:ef:4f:b6:c9:4a:e4:09:fe:5a:
45:2a:66:fb:1a:47:94:7e:da:4d:e4:c9:66:4b:10:88:55:13:
56:8f:1b:ab:ed:24:ce:bd:3d:ba:b8:68:e1:30:d2:85:8f:d4:
99:53:48:22:c1:ca:15:67:51:2e:b0:dc:0d:b1:20:bc:bd:03:
a1:87:15:99:c2:f5:a0:f8:5d:a6:65:e2:77:ed:7f:51:3b:3d:
70:3c:0b:77:cd:ef:4c:96:ae:ec:8c:d8:be:fa:c8:cf:41:1e:
c2:e3:c5:bf
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBkQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNjAzMzEw
NzI3MjlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEIyRDQwRDEwOUNGOEE5
RTJCNjJBNDM5NEM0OEU2MTRBNjFENUMwQjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/1l5SvYFwt52N9pnDeUmbvZLOEOgr6408ShiR+XvxpXutSdNK
df7GKlmxCPQS7bfNq3TBV5TI+LceIs20iYUiOZuahPT4hTSoHqaiEeBmNpRBwJbB
YznQibV0SHHvmhO3KpMjnkwzDcA2kDzOoF0CCfWrmHQ/HqNhQhryIuqOx9Skh9e9
Vv09y7tadQ7ZdIsFR6YQK/0VtFserrgIKmUoocq/DUKua/mPQUP9mIaX8WuiJWiY
BQDCaeZrF5N4AuI5+DVqUzDaX3sCdrM2nxPgQ3rlkftZfQtAq+e5oEU9lQU4Mh+5
PR83t4KpsE0yckUV9FptQk3jmfdHhxIMee6xAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUstQNEJz4qeK2KkOUxI5hSmHVwLQwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNTQ1L3N0UU5FSno0cWVLMktrT1V4STVoU21IVndMUS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAqffMwDQYJKoZIhvcNAQELBQADggEB
AI85K2ZPeeYfJ/aItOYQ2BiaDV0kBsabjN1MG5srC3CC+VZUOoH++c4FW69aghAa
mqxSeX1JfmY1C7teSAphZqJFIruoov6AbzvwxBLyyLcVJkwp6iCt3qXBnjWYFR/2
i57mWil/NfH7I2eXunwFg6MkAsopuF+PIcsP+ZGcibWsBFuMaZ4Js3mnEIMg22Bs
k7xw2VVzau6KJ+9PtslK5An+WkUqZvsaR5R+2k3kyWZLEIhVE1aPG6vtJM69Pbq4
aOEw0oWP1JlTSCLByhVnUS6w3A2xILy9A6GHFZnC9aD4XaZl4nftf1E7PXA8C3fN
70yWruyM2L76yM9BHsLjxb8=
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:34:19 2026 by rpki-client