
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/713/8qFkll6FOXCV04OT8vEs5GqkNZw.roa
File: 8qFkll6FOXCV04OT8vEs5GqkNZw.roa (raw, json)
Hash identifier: lyXGLw4RH7hpQHci5LoUbv7r91SVyJOwvDO7QAIrSYA=
Subject key identifier: F2:A1:64:96:5E:85:39:70:95:D3:83:93:F2:F1:2C:E4:6A:A4:35:9C
Certificate issuer: /CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
Certificate serial: 48
Authority key identifier: 1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/8qFkll6FOXCV04OT8vEs5GqkNZw.roa
Signing time: Tue 31 Mar 2026 08:34:38 +0000
ROA not before: Tue 31 Mar 2026 08:34:38 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 18121
IP address blocks: 202.88.48.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72 (0x48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
Validity
Not Before: Mar 31 08:34:38 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=F2A164965E85397095D38393F2F12CE46AA4359C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b1:e6:f6:7b:cb:59:88:45:73:1a:d4:8a:50:
7b:0e:d9:da:80:f6:fe:4b:c3:90:7d:0d:c0:50:ca:
0b:07:bd:f2:41:52:9f:0e:53:a8:4c:7e:e3:ab:a3:
80:09:1a:2e:0d:cb:af:83:46:72:d2:40:92:28:27:
36:c4:68:3f:7a:ba:b9:ca:e4:d9:77:e7:60:b4:4a:
bd:d1:5a:64:ca:fd:0d:b4:ec:04:4c:75:7c:5d:ab:
d7:e4:69:53:ed:25:df:49:76:8d:50:02:b7:bb:0e:
f1:b2:c0:a0:0b:93:ad:ab:a6:41:bf:c8:28:33:80:
e2:c1:66:9f:3e:c9:74:f3:da:e0:0b:a8:31:53:b0:
fe:ef:25:dd:9b:b8:3d:7e:b1:14:ac:57:1f:2c:85:
f7:cf:17:39:a6:e7:4f:31:a2:35:0b:e9:aa:3b:a2:
8d:43:1c:92:f3:c1:da:f1:0f:c2:4a:c9:04:e1:90:
3c:69:25:c3:ac:d5:c2:1b:ba:9a:26:4f:99:61:fb:
20:ad:9a:01:81:ca:da:42:fe:0e:9b:28:4b:11:f4:
27:c6:a9:6b:c1:02:e2:36:b6:e5:d9:3f:90:24:74:
0b:15:8e:2f:47:5f:92:63:e3:83:91:21:00:2b:00:
ba:a8:a7:c1:d1:56:7a:c2:a9:1f:70:d5:f3:92:f2:
b6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A1:64:96:5E:85:39:70:95:D3:83:93:F2:F1:2C:E4:6A:A4:35:9C
X509v3 Authority Key Identifier:
keyid:1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/8qFkll6FOXCV04OT8vEs5GqkNZw.roa
sbgp-ipAddrBlock: critical
IPv4:
202.88.48.0/20
Signature Algorithm: sha256WithRSAEncryption
5f:8f:f7:3d:62:ce:1b:74:17:77:0d:d1:9b:94:ec:08:19:6e:
b5:4c:bf:40:88:02:ea:b4:01:95:62:61:f9:84:a0:95:0d:52:
01:d6:50:c3:a2:6b:24:13:b8:91:06:a1:48:83:3d:54:4b:ee:
2b:f5:9b:92:db:d3:b8:1e:6d:25:85:7d:4f:8e:c4:9c:5c:c2:
84:7d:52:1f:2a:06:63:07:74:b8:db:0f:0e:91:bd:04:8c:2a:
a6:87:88:4c:04:e2:15:c1:6c:45:6a:04:7d:2c:77:2a:56:02:
e9:3d:bc:6e:69:3c:3e:16:e9:83:19:e1:64:62:3d:e6:a6:42:
6d:10:2d:66:f5:b6:98:8b:5a:8c:fb:45:87:44:9c:cb:ec:70:
68:a7:c7:6d:a0:cf:64:8c:69:7f:ee:e0:15:0f:d9:ce:ae:22:
4f:85:e7:34:73:d1:b6:78:23:3c:7f:e8:b8:a8:3a:c0:3a:fb:
da:d3:f9:39:ef:95:1a:61:f5:e6:8c:30:a7:87:ae:ef:0f:0a:
66:7f:9b:cb:2c:db:b3:f1:67:9a:08:af:2e:dc:ff:b9:36:97:
69:0b:34:d4:00:3f:96:9f:67:a8:bc:f8:d0:27:9b:f7:84:91:
07:dd:a9:77:05:54:76:ce:dc:fc:5b:b1:1f:80:df:ea:bf:5b:
8f:49:ec:3c
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBSDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxRjI4
OEEyMjg1MDI0RTE0OEEyN0U0NUZFNUFDOTBEMjhCMzAzRDRCMB4XDTI2MDMzMTA4
MzQzOFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRjJBMTY0OTY1RTg1Mzk3
MDk1RDM4MzkzRjJGMTJDRTQ2QUE0MzU5QzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANCx5vZ7y1mIRXMa1IpQew7Z2oD2/kvDkH0NwFDKCwe98kFSnw5T
qEx+46ujgAkaLg3Lr4NGctJAkignNsRoP3q6ucrk2XfnYLRKvdFaZMr9DbTsBEx1
fF2r1+RpU+0l30l2jVACt7sO8bLAoAuTraumQb/IKDOA4sFmnz7JdPPa4AuoMVOw
/u8l3Zu4PX6xFKxXHyyF988XOabnTzGiNQvpqjuijUMckvPB2vEPwkrJBOGQPGkl
w6zVwhu6miZPmWH7IK2aAYHK2kL+DpsoSxH0J8apa8EC4ja25dk/kCR0CxWOL0df
kmPjg5EhACsAuqinwdFWesKpH3DV85LytjMCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBTyoWSWXoU5cJXTg5Py8SzkaqQ1nDAfBgNVHSMEGDAWgBQfKIoihQJOFIon5F/l
rJDSizA9SzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNzEzL0h5aUtJb1VDVGhTS0otUmY1YXlRMG9zd1BVcy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0h5aUtJb1VDVGhTS0otUmY1YXlRMG9z
d1BVcy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC83MTMvOHFGa2xsNkZPWENWMDRPVDh2RXM1R3FrTlp3LnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMpYMDANBgkqhkiG9w0BAQsFAAOCAQEA
X4/3PWLOG3QXdw3Rm5TsCBlutUy/QIgC6rQBlWJh+YSglQ1SAdZQw6JrJBO4kQah
SIM9VEvuK/WbktvTuB5tJYV9T47EnFzChH1SHyoGYwd0uNsPDpG9BIwqpoeITATi
FcFsRWoEfSx3KlYC6T28bmk8PhbpgxnhZGI95qZCbRAtZvW2mItajPtFh0Scy+xw
aKfHbaDPZIxpf+7gFQ/Zzq4iT4XnNHPRtngjPH/ouKg6wDr72tP5Oe+VGmH15oww
p4eu7w8KZn+byyzbs/FnmgivLtz/uTaXaQs01AA/lp9nqLz40Ceb94SRB92pdwVU
ds7c/FuxH4Df6r9bj0nsPA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:10:31 2026 by rpki-client