
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/699/ha5BJHZVpMxhpr39drZjS5CVEkU.roa
File: ha5BJHZVpMxhpr39drZjS5CVEkU.roa (raw, json)
Hash identifier: KeE5RUituVJHg8mboThShPgguosyHQr3u3+VrAA8CpY=
Subject key identifier: 85:AE:41:24:76:55:A4:CC:61:A6:BD:FD:76:B6:63:4B:90:95:12:45
Certificate issuer: /CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130
Certificate serial: 3261
Authority key identifier: 65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ha5BJHZVpMxhpr39drZjS5CVEkU.roa
Signing time: Tue 31 Mar 2026 07:30:48 +0000
ROA not before: Tue 31 Mar 2026 07:30:48 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 7671
IP address blocks: 125.252.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:41:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12897 (0x3261)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130
Validity
Not Before: Mar 31 07:30:48 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=85AE41247655A4CC61A6BDFD76B6634B90951245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f2:3f:de:f1:b8:da:c5:fb:e0:04:e1:b1:d9:
53:a8:02:24:b7:98:51:93:73:63:db:ae:4d:bf:fc:
73:f4:6f:b6:61:88:c7:21:34:6a:55:a9:1d:92:75:
dc:e8:73:a9:02:64:87:62:62:76:0b:f9:dc:5f:cd:
bb:0a:3e:33:25:81:2c:49:30:ac:4e:4c:66:a4:99:
68:ba:34:58:da:f5:82:41:76:13:00:34:96:62:dd:
cf:d4:a3:83:a2:2e:30:f4:c8:a4:d4:2f:ef:43:2a:
72:7f:55:8c:e9:5b:3d:5f:62:c4:c6:62:7d:f5:83:
89:ac:00:ba:4c:24:e1:6d:5a:5c:76:65:ee:97:49:
ba:8e:2f:82:3b:8d:7b:81:a0:6a:65:6f:02:bc:e9:
d5:a9:2b:35:a2:29:42:fa:08:49:11:1f:2a:5d:28:
d4:ba:fe:82:87:d6:7e:57:e9:ab:53:5b:a0:08:76:
4a:91:f5:7b:38:9c:a9:59:09:40:1e:05:0a:c4:7e:
da:b2:6b:74:d6:8f:cf:76:76:81:11:c3:00:68:ba:
57:3b:b6:09:9e:50:ca:69:38:5a:1d:bd:cc:af:85:
8f:53:bf:3c:50:ce:a8:dc:ec:06:36:78:0d:17:1f:
8f:fe:4c:e0:5a:79:ac:6e:c5:cb:f7:7e:d1:fd:3f:
f4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AE:41:24:76:55:A4:CC:61:A6:BD:FD:76:B6:63:4B:90:95:12:45
X509v3 Authority Key Identifier:
keyid:65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ha5BJHZVpMxhpr39drZjS5CVEkU.roa
sbgp-ipAddrBlock: critical
IPv4:
125.252.128.0/18
Signature Algorithm: sha256WithRSAEncryption
32:52:06:84:ec:2d:7c:db:c2:f4:61:de:97:b7:90:20:3c:99:
46:35:98:f4:1a:88:91:f3:be:89:27:7d:c3:91:32:1a:26:fa:
45:3c:40:90:38:20:7d:3c:49:46:0e:d0:ea:52:d3:9a:94:aa:
f6:fa:02:e4:6c:cf:69:84:7c:cf:7c:5c:46:3a:64:89:76:8c:
7c:04:63:21:0b:c3:49:b2:38:68:8f:5e:ea:8a:ee:c5:90:8a:
18:23:39:8e:37:8d:25:bc:12:60:53:0b:e6:92:0a:cc:8c:0b:
10:95:7a:30:1c:73:50:a3:4c:e3:c9:3c:58:66:29:3e:a4:60:
1d:53:33:cf:b5:f9:42:cf:b8:e7:b5:dd:68:0e:21:e8:18:2a:
8b:6e:03:e7:53:d2:a9:3c:b5:c4:fd:e5:bc:56:be:74:37:65:
17:d2:e4:d9:74:f6:50:d7:22:d4:c0:d3:b2:1d:b8:5f:67:01:
e3:6a:24:42:14:77:b6:09:16:f1:72:02:f9:46:75:00:bf:23:
ff:1c:61:fd:41:79:81:a7:6c:41:65:6d:4e:93:5d:b7:8b:b2:
4d:44:18:12:ae:58:28:f5:4d:b4:b8:00:f9:df:e7:bd:60:45:
1f:8d:b2:c8:e8:e2:45:67:66:93:d0:48:53:08:7e:d5:ec:00:
2e:1c:de:80
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICMmEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjUy
MkUyQzNFRjREOTNGMTNFNzU4QTgwN0E0MEE4RTFCRjlBQjEzMDAeFw0yNjAzMzEw
NzMwNDhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg1QUU0MTI0NzY1NUE0
Q0M2MUE2QkRGRDc2QjY2MzRCOTA5NTEyNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDk8j/e8bjaxfvgBOGx2VOoAiS3mFGTc2Pbrk2//HP0b7ZhiMch
NGpVqR2Sddzoc6kCZIdiYnYL+dxfzbsKPjMlgSxJMKxOTGakmWi6NFja9YJBdhMA
NJZi3c/Uo4OiLjD0yKTUL+9DKnJ/VYzpWz1fYsTGYn31g4msALpMJOFtWlx2Ze6X
SbqOL4I7jXuBoGplbwK86dWpKzWiKUL6CEkRHypdKNS6/oKH1n5X6atTW6AIdkqR
9Xs4nKlZCUAeBQrEftqya3TWj892doERwwBoulc7tgmeUMppOFodvcyvhY9TvzxQ
zqjc7AY2eA0XH4/+TOBaeaxuxcv3ftH9P/QDAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUha5BJHZVpMxhpr39drZjS5CVEkUwHwYDVR0jBBgwFoAUZSLiw+9Nk/E+dYqA
ekCo4b+asTAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY5OS9aU0xpdy05TmtfRS1kWXFBZWtDbzRiLWFzVEEuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9aU0xpdy05TmtfRS1kWXFBZWtDbzRi
LWFzVEEuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNjk5L2hhNUJKSFpWcE14aHByMzlkclpqUzVDVkVrVS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ9/IAwDQYJKoZIhvcNAQELBQADggEB
ADJSBoTsLXzbwvRh3pe3kCA8mUY1mPQaiJHzvoknfcORMhom+kU8QJA4IH08SUYO
0OpS05qUqvb6AuRsz2mEfM98XEY6ZIl2jHwEYyELw0myOGiPXuqK7sWQihgjOY43
jSW8EmBTC+aSCsyMCxCVejAcc1CjTOPJPFhmKT6kYB1TM8+1+ULPuOe13WgOIegY
KotuA+dT0qk8tcT95bxWvnQ3ZRfS5Nl09lDXItTA07IduF9nAeNqJEIUd7YJFvFy
AvlGdQC/I/8cYf1BeYGnbEFlbU6TXbeLsk1EGBKuWCj1TbS4APnf571gRR+Nssjo
4kVnZpPQSFMIftXsAC4c3oA=
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:35:31 2026 by rpki-client