
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/9DBZmaknDqGEp_MBKkTvp9mZ7vY.roa
File: 9DBZmaknDqGEp_MBKkTvp9mZ7vY.roa (raw, json)
Hash identifier: tHXC6Ml887+XyTx42vxX+RDK0qxg1E/QV5YkfhKHn+o=
Subject key identifier: F4:30:59:99:A9:27:0E:A1:84:A7:F3:01:2A:44:EF:A7:D9:99:EE:F6
Certificate issuer: /CN=913A79485AE6D4CB5B97AF8BAA52B59656A2224A
Certificate serial: 59
Authority key identifier: 91:3A:79:48:5A:E6:D4:CB:5B:97:AF:8B:AA:52:B5:96:56:A2:22:4A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kTp5SFrm1Mtbl6-LqlK1llaiIko.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/9DBZmaknDqGEp_MBKkTvp9mZ7vY.roa
Signing time: Tue 31 Mar 2026 07:33:01 +0000
ROA not before: Tue 31 Mar 2026 07:33:01 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 18260
IP address blocks: 24.53.192.0/19 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kTp5SFrm1Mtbl6-LqlK1llaiIko.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kTp5SFrm1Mtbl6-LqlK1llaiIko.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kTp5SFrm1Mtbl6-LqlK1llaiIko.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913A79485AE6D4CB5B97AF8BAA52B59656A2224A
Validity
Not Before: Mar 31 07:33:01 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=F4305999A9270EA184A7F3012A44EFA7D999EEF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f6:45:b4:e9:4f:d5:bb:aa:24:82:5d:9a:e1:
d0:e9:2b:4e:be:f4:c0:27:ed:b6:61:03:9d:5f:2d:
87:ee:99:cd:34:e7:71:28:07:dc:fe:14:7c:cb:f9:
90:5a:84:e5:3f:1e:cf:bf:8b:fb:03:f6:84:a8:ec:
7c:b5:34:0f:15:8c:9d:b3:5e:60:35:6a:d0:96:35:
1b:c4:aa:09:a6:a6:89:31:fd:d3:fd:77:6c:4f:5b:
4e:5e:a2:74:af:33:cf:a8:8b:03:86:b9:36:7c:70:
c8:9f:8f:e0:93:f5:77:31:08:97:e9:c2:54:ab:55:
f7:6e:b7:ea:3a:da:b5:90:a3:ce:11:ec:88:37:73:
cb:20:25:21:23:ee:ce:e5:7a:8e:54:1c:95:73:3d:
30:7c:a3:b4:dd:4c:6c:99:f1:be:1e:a8:d4:fc:aa:
c7:88:97:a9:dd:6b:8e:e6:65:7e:69:35:23:f3:48:
9c:c2:58:76:0d:18:e0:37:48:5a:0f:01:15:1f:a5:
01:e4:6e:e0:f1:d7:16:b6:9a:6a:53:f0:02:5b:0f:
b1:89:cd:32:8f:61:83:3f:b3:dd:a6:e8:09:d3:9a:
ca:77:3a:bb:69:87:fe:5b:c3:5e:2a:0b:3f:cb:e9:
69:16:07:8d:38:a7:52:6a:ba:d3:53:8f:01:93:ae:
59:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:30:59:99:A9:27:0E:A1:84:A7:F3:01:2A:44:EF:A7:D9:99:EE:F6
X509v3 Authority Key Identifier:
keyid:91:3A:79:48:5A:E6:D4:CB:5B:97:AF:8B:AA:52:B5:96:56:A2:22:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kTp5SFrm1Mtbl6-LqlK1llaiIko.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kTp5SFrm1Mtbl6-LqlK1llaiIko.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/9DBZmaknDqGEp_MBKkTvp9mZ7vY.roa
sbgp-ipAddrBlock: critical
IPv4:
24.53.192.0/19
Signature Algorithm: sha256WithRSAEncryption
05:ac:b2:70:d3:7b:33:23:20:5d:a9:6e:7e:b2:a9:57:2e:5c:
3a:5e:06:f7:56:d4:67:b6:c9:b1:16:be:0e:6a:0d:3c:64:60:
2a:50:e9:da:ff:b2:fa:21:61:36:64:81:66:5c:7d:3c:67:2c:
78:cd:02:e7:a1:3d:21:ba:27:cb:18:e6:d0:54:c9:fd:39:49:
99:08:fd:e0:d0:9c:76:76:5b:04:a0:7b:bc:7b:a3:e7:2e:c5:
ee:8c:24:dd:ff:c5:a6:40:96:6a:55:17:85:3a:36:a6:42:24:
68:7c:de:b6:43:a2:fb:32:cf:47:52:af:cb:d8:e2:57:f0:3b:
1b:8f:f3:2a:3b:e9:ca:f2:7b:84:30:71:75:cf:b2:1b:96:fa:
e0:b0:b5:8a:36:32:84:6f:79:aa:a9:f6:e7:6e:ec:f6:0a:4c:
db:ef:0c:ab:35:74:e2:2d:2c:a2:66:0f:01:84:b2:41:ea:fb:
45:2f:8e:3f:0a:71:9a:1b:1b:81:23:6c:4e:14:c9:79:9b:f8:
49:b6:53:b5:9f:c4:4f:2a:8a:e0:4d:a4:7c:7e:01:f6:83:ec:
19:f4:75:9e:c2:f8:49:a7:53:d8:bb:4f:9a:e1:bf:1c:3f:8c:
95:7a:1e:1a:54:03:4e:76:2c:96:58:46:f6:7f:15:be:94:44:
9e:0b:47:a6
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBWTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5MTNB
Nzk0ODVBRTZENENCNUI5N0FGOEJBQTUyQjU5NjU2QTIyMjRBMB4XDTI2MDMzMTA3
MzMwMVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRjQzMDU5OTlBOTI3MEVB
MTg0QTdGMzAxMkE0NEVGQTdEOTk5RUVGNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAML2RbTpT9W7qiSCXZrh0OkrTr70wCfttmEDnV8th+6ZzTTncSgH
3P4UfMv5kFqE5T8ez7+L+wP2hKjsfLU0DxWMnbNeYDVq0JY1G8SqCaamiTH90/13
bE9bTl6idK8zz6iLA4a5NnxwyJ+P4JP1dzEIl+nCVKtV92636jratZCjzhHsiDdz
yyAlISPuzuV6jlQclXM9MHyjtN1MbJnxvh6o1Pyqx4iXqd1rjuZlfmk1I/NInMJY
dg0Y4DdIWg8BFR+lAeRu4PHXFraaalPwAlsPsYnNMo9hgz+z3aboCdOaync6u2mH
/lvDXioLP8vpaRYHjTinUmq601OPAZOuWdkCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBT0MFmZqScOoYSn8wEqRO+n2Znu9jAfBgNVHSMEGDAWgBSROnlIWubUy1uXr4uq
UrWWVqIiSjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNzMxL2tUcDVTRnJtMU10Ymw2LUxxbEsxbGxhaUlrby5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2tUcDVTRnJtMU10Ymw2LUxxbEsxbGxh
aUlrby5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC83MzEvOURCWm1ha25EcUdFcF9NQktrVHZwOW1aN3ZZLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBRg1wDANBgkqhkiG9w0BAQsFAAOCAQEA
BayycNN7MyMgXalufrKpVy5cOl4G91bUZ7bJsRa+DmoNPGRgKlDp2v+y+iFhNmSB
Zlx9PGcseM0C56E9Ibonyxjm0FTJ/TlJmQj94NCcdnZbBKB7vHuj5y7F7owk3f/F
pkCWalUXhTo2pkIkaHzetkOi+zLPR1Kvy9jiV/A7G4/zKjvpyvJ7hDBxdc+yG5b6
4LC1ijYyhG95qqn2527s9gpM2+8MqzV04i0somYPAYSyQer7RS+OPwpxmhsbgSNs
ThTJeZv4SbZTtZ/ETyqK4E2kfH4B9oPsGfR1nsL4SadT2LtPmuG/HD+MlXoeGlQD
TnYsllhG9n8VvpREngtHpg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:08 2026 by rpki-client