
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/554/E-DtW-aPRw5t2IjLtTR_VOtxyNQ.roa
File: E-DtW-aPRw5t2IjLtTR_VOtxyNQ.roa (raw, json)
Hash identifier: SJrmTL8hxpUjnj2xOgv33WSrnAIm5r0OY0ryShxobls=
Subject key identifier: 13:E0:ED:5B:E6:8F:47:0E:6D:D8:88:CB:B5:34:7F:54:EB:71:C8:D4
Certificate issuer: /CN=96D92CE24CF3FCC753285CEBAF3FEC1D72581A81
Certificate serial: 61
Authority key identifier: 96:D9:2C:E2:4C:F3:FC:C7:53:28:5C:EB:AF:3F:EC:1D:72:58:1A:81
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ltks4kzz_MdTKFzrrz_sHXJYGoE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/E-DtW-aPRw5t2IjLtTR_VOtxyNQ.roa
Signing time: Tue 31 Mar 2026 07:52:09 +0000
ROA not before: Tue 31 Mar 2026 07:52:09 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 131921
IP address blocks: 153.123.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/ltks4kzz_MdTKFzrrz_sHXJYGoE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/ltks4kzz_MdTKFzrrz_sHXJYGoE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ltks4kzz_MdTKFzrrz_sHXJYGoE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97 (0x61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96D92CE24CF3FCC753285CEBAF3FEC1D72581A81
Validity
Not Before: Mar 31 07:52:09 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=13E0ED5BE68F470E6DD888CBB5347F54EB71C8D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f7:81:68:39:50:99:b8:ca:fa:36:d5:e0:93:
68:9f:9e:fb:c2:8e:2f:ec:98:49:0c:8e:5d:85:bf:
9d:07:e8:84:c9:ce:26:80:9f:d4:39:9d:34:03:13:
9e:79:f4:bb:fb:2c:5d:35:2d:60:27:90:87:f1:28:
44:53:aa:c7:bb:ab:eb:b2:50:40:c3:57:c8:71:b9:
40:ea:0f:ba:36:be:2d:8c:83:78:ee:57:6d:e7:bb:
ac:39:06:47:10:d5:e0:87:b5:0e:c9:97:96:42:47:
b4:56:72:32:f9:ef:05:c7:49:ca:04:a5:5c:64:f5:
7f:7a:f6:2a:ed:65:d3:f8:5f:01:12:f5:37:5a:d2:
2e:0c:48:d8:8d:c6:9c:ad:b5:0c:f7:72:e9:27:6e:
74:a1:e7:b4:8b:dc:ae:05:0e:00:c5:6b:66:56:18:
ce:c3:51:41:08:50:5a:9a:73:10:aa:51:29:3a:c1:
fc:61:cf:84:ae:7a:cb:d9:86:ec:72:c9:bd:53:88:
3e:99:b0:32:e0:c4:c6:ff:7f:66:48:9b:14:33:21:
ef:90:a5:2d:be:0a:ce:c1:6e:4a:93:92:b5:ab:3b:
04:2d:2d:af:3b:69:6b:50:f5:06:d9:84:10:90:b4:
21:31:6c:a6:54:9f:70:89:d3:8c:e4:0c:06:fb:f3:
bd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E0:ED:5B:E6:8F:47:0E:6D:D8:88:CB:B5:34:7F:54:EB:71:C8:D4
X509v3 Authority Key Identifier:
keyid:96:D9:2C:E2:4C:F3:FC:C7:53:28:5C:EB:AF:3F:EC:1D:72:58:1A:81
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/ltks4kzz_MdTKFzrrz_sHXJYGoE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ltks4kzz_MdTKFzrrz_sHXJYGoE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/E-DtW-aPRw5t2IjLtTR_VOtxyNQ.roa
sbgp-ipAddrBlock: critical
IPv4:
153.123.0.0/20
Signature Algorithm: sha256WithRSAEncryption
ac:c7:32:2e:57:e6:b1:82:0f:c4:20:1c:fc:d9:d6:05:81:f1:
f8:e7:e4:9b:c8:26:ad:cd:52:de:e6:c0:22:f8:4b:15:6c:0c:
09:41:f2:69:10:90:9a:7c:29:a7:00:cc:98:76:29:a3:5c:69:
51:ca:5b:ba:b6:96:9f:4f:e5:24:b3:6a:d3:39:07:7f:94:97:
6c:4c:3f:ed:d2:47:57:df:fd:f8:da:07:35:d6:5e:cc:36:28:
30:ed:38:1b:f2:bd:49:4d:07:5c:54:70:33:85:54:0f:ea:fc:
11:a3:a5:9b:d0:f2:57:26:30:d0:f0:10:90:04:44:02:1a:8b:
2d:c0:31:32:0e:bf:c9:ea:5c:f0:9f:d7:f0:8f:5a:a4:2f:a8:
71:31:0b:84:59:ee:74:5d:d0:73:40:30:f5:2b:f0:aa:24:a6:
bc:bc:89:be:d9:88:fd:b4:2c:ec:19:3b:13:5a:9b:a3:a0:ef:
dd:29:f7:8a:4e:23:c4:a5:90:31:20:33:80:3c:b9:ca:60:db:
72:d0:24:f2:8c:41:6f:73:d8:49:fb:e0:f1:5c:0f:30:da:d2:
7b:c0:a0:af:ad:de:3e:e0:f5:c1:ff:07:28:af:db:19:7e:c1:
61:9f:84:11:ab:f7:ea:7e:11:5b:6c:b7:cd:3e:61:36:94:3c:
78:86:85:d0
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBYTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NkQ5
MkNFMjRDRjNGQ0M3NTMyODVDRUJBRjNGRUMxRDcyNTgxQTgxMB4XDTI2MDMzMTA3
NTIwOVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMTNFMEVENUJFNjhGNDcw
RTZERDg4OENCQjUzNDdGNTRFQjcxQzhENDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALH3gWg5UJm4yvo21eCTaJ+e+8KOL+yYSQyOXYW/nQfohMnOJoCf
1DmdNAMTnnn0u/ssXTUtYCeQh/EoRFOqx7ur67JQQMNXyHG5QOoPuja+LYyDeO5X
bee7rDkGRxDV4Ie1DsmXlkJHtFZyMvnvBcdJygSlXGT1f3r2Ku1l0/hfARL1N1rS
LgxI2I3GnK21DPdy6SdudKHntIvcrgUOAMVrZlYYzsNRQQhQWppzEKpRKTrB/GHP
hK56y9mG7HLJvVOIPpmwMuDExv9/ZkibFDMh75ClLb4KzsFuSpOStas7BC0trztp
a1D1BtmEEJC0ITFsplSfcInTjOQMBvvzvUsCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBQT4O1b5o9HDm3YiMu1NH9U63HI1DAfBgNVHSMEGDAWgBSW2SziTPP8x1MoXOuv
P+wdclgagTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTU0L2x0a3M0a3p6X01kVEtGenJyel9zSFhKWUdvRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2x0a3M0a3p6X01kVEtGenJyel9zSFhK
WUdvRS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC81NTQvRS1EdFctYVBSdzV0MklqTHRUUl9WT3R4eU5RLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBJl7ADANBgkqhkiG9w0BAQsFAAOCAQEA
rMcyLlfmsYIPxCAc/NnWBYHx+Ofkm8gmrc1S3ubAIvhLFWwMCUHyaRCQmnwppwDM
mHYpo1xpUcpburaWn0/lJLNq0zkHf5SXbEw/7dJHV9/9+NoHNdZezDYoMO04G/K9
SU0HXFRwM4VUD+r8EaOlm9DyVyYw0PAQkAREAhqLLcAxMg6/yepc8J/X8I9apC+o
cTELhFnudF3Qc0Aw9SvwqiSmvLyJvtmI/bQs7Bk7E1qbo6Dv3Sn3ik4jxKWQMSAz
gDy5ymDbctAk8oxBb3PYSfvg8VwPMNrSe8Cgr63ePuD1wf8HKK/bGX7BYZ+EEav3
6n4RW2y3zT5hNpQ8eIaF0A==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:15:51 2026 by rpki-client