
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/881/u1vbxKXb4699o3kyD3tS3GpbdVs.roa
File: u1vbxKXb4699o3kyD3tS3GpbdVs.roa (raw, json)
Hash identifier: XYBzxJxR4X+m9ED00f2+K4X6neWgENp6h/k5bJJSSxk=
Subject key identifier: BB:5B:DB:C4:A5:DB:E3:AF:7D:A3:79:32:0F:7B:52:DC:6A:5B:75:5B
Certificate issuer: /CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0
Certificate serial: 70
Authority key identifier: D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/u1vbxKXb4699o3kyD3tS3GpbdVs.roa
Signing time: Mon 24 Aug 2026 05:22:53 +0000
ROA not before: Mon 24 Aug 2026 05:22:53 +0000
ROA not after: Sun 15 Aug 2027 01:30:02 +0000
asID: 23805
IP address blocks: 126.52.104.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 17:55:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112 (0x70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0
Validity
Not Before: Aug 24 05:22:53 2026 GMT
Not After : Aug 15 01:30:02 2027 GMT
Subject: CN=BB5BDBC4A5DBE3AF7DA379320F7B52DC6A5B755B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:e5:7b:0c:9e:ec:06:1b:05:6d:84:0b:be:6e:
36:7a:1e:60:ab:43:fa:7e:cc:03:01:bb:61:ff:9a:
17:44:83:f1:10:36:75:fc:61:5e:3e:04:6d:c4:31:
44:80:97:37:55:39:05:7d:e8:f1:d7:c0:bc:86:47:
03:74:08:e2:25:0a:02:b4:8b:6c:28:65:2f:d1:2f:
1d:62:97:ab:f5:92:d3:86:ef:a5:ce:f8:de:8b:5a:
42:cc:40:84:96:f0:d4:22:14:c0:6e:41:cb:d3:19:
d3:ab:30:77:55:a3:87:ba:d0:ef:67:22:4a:82:c0:
bc:59:33:76:5b:3b:49:23:33:d5:63:13:62:94:18:
da:ed:cf:87:7a:47:d9:aa:e3:d0:0c:1b:10:b9:da:
5a:6d:ee:c7:fc:80:e4:3c:41:30:64:22:b5:df:d0:
c2:24:68:c6:94:57:33:f3:39:93:17:5d:ec:c3:b0:
27:91:f1:c5:ad:b1:6b:cb:01:0e:7f:c2:f8:1c:85:
1a:4f:59:05:9b:92:2c:b0:c1:20:bf:ce:dc:1d:72:
fe:82:a8:33:3e:49:51:61:8e:9c:4b:d9:8f:bf:ea:
67:70:c7:61:ac:76:fa:cf:56:be:34:6c:97:e8:66:
09:9b:17:57:06:ce:63:59:d6:1b:3b:66:c2:63:78:
35:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5B:DB:C4:A5:DB:E3:AF:7D:A3:79:32:0F:7B:52:DC:6A:5B:75:5B
X509v3 Authority Key Identifier:
keyid:D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/u1vbxKXb4699o3kyD3tS3GpbdVs.roa
sbgp-ipAddrBlock: critical
IPv4:
126.52.104.0/21
Signature Algorithm: sha256WithRSAEncryption
c9:e0:32:f1:e4:23:91:0a:a1:ea:71:fb:20:6e:9c:d4:dd:95:
1b:99:15:2d:d4:d9:20:4a:bb:17:77:33:e1:92:ea:f7:da:de:
94:80:c0:be:c4:9a:21:f8:62:95:3e:7c:9e:13:f9:e1:da:36:
fa:88:b8:46:a6:85:26:22:d4:d4:7a:49:f9:d8:c1:9d:c1:5b:
34:ec:4a:81:30:cf:2f:19:e1:30:b2:3f:ec:10:5b:57:35:ea:
c0:92:a9:7c:b9:ca:0f:87:62:ce:58:11:a3:31:c5:83:5e:da:
28:fa:74:98:6d:6c:39:19:9c:8b:01:4a:b9:f5:e9:65:2a:3b:
44:dc:c0:03:b0:ca:8e:3a:c4:cc:ea:95:82:e5:1c:c2:52:1f:
4e:11:b5:37:c7:f5:cf:bd:63:ca:a5:c0:a7:85:37:07:a7:9a:
e7:59:37:11:51:f6:17:f4:11:e5:74:a9:65:9b:88:13:b9:01:
98:5e:03:39:93:9b:ae:96:86:ea:e7:7d:61:25:af:c7:7e:48:
f1:1b:c5:c7:bd:bf:4d:49:1e:2f:99:c3:25:6d:69:f5:74:a6:
85:c6:61:09:8f:2f:15:a2:c8:16:b7:56:40:ab:e8:2e:3d:c6:
6f:b8:ba:09:b4:99:4d:b8:58:68:4a:34:4a:3f:c3:84:34:80:
02:5c:bf:10
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBcDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMDBF
MDgzOTM2ODhCMDQ3Mzc4NzRFQ0Q2M0REOEJFNzhFNUVGMkQwMB4XDTI2MDgyNDA1
MjI1M1oXDTI3MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoQkI1QkRCQzRBNURCRTNB
RjdEQTM3OTMyMEY3QjUyREM2QTVCNzU1QjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPTlewye7AYbBW2EC75uNnoeYKtD+n7MAwG7Yf+aF0SD8RA2dfxh
Xj4EbcQxRICXN1U5BX3o8dfAvIZHA3QI4iUKArSLbChlL9EvHWKXq/WS04bvpc74
3otaQsxAhJbw1CIUwG5By9MZ06swd1Wjh7rQ72ciSoLAvFkzdls7SSMz1WMTYpQY
2u3Ph3pH2arj0AwbELnaWm3ux/yA5DxBMGQitd/QwiRoxpRXM/M5kxdd7MOwJ5Hx
xa2xa8sBDn/C+ByFGk9ZBZuSLLDBIL/O3B1y/oKoMz5JUWGOnEvZj7/qZ3DHYax2
+s9WvjRsl+hmCZsXVwbOY1nWGztmwmN4NQ8CAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBS7W9vEpdvjr32jeTIPe1Lcalt1WzAfBgNVHSMEGDAWgBTQDgg5NoiwRzeHTs1j
3Yvnjl7y0DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODgxLzBBNElPVGFJc0VjM2gwN05ZOTJMNTQ1ZTh0QS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBBNElPVGFJc0VjM2gwN05ZOTJMNTQ1
ZTh0QS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC84ODEvdTF2YnhLWGI0Njk5bzNreUQzdFMzR3BiZFZzLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA340aDANBgkqhkiG9w0BAQsFAAOCAQEA
yeAy8eQjkQqh6nH7IG6c1N2VG5kVLdTZIEq7F3cz4ZLq99relIDAvsSaIfhilT58
nhP54do2+oi4RqaFJiLU1HpJ+djBncFbNOxKgTDPLxnhMLI/7BBbVzXqwJKpfLnK
D4dizlgRozHFg17aKPp0mG1sORmciwFKufXpZSo7RNzAA7DKjjrEzOqVguUcwlIf
ThG1N8f1z71jyqXAp4U3B6ea51k3EVH2F/QR5XSpZZuIE7kBmF4DOZObrpaG6ud9
YSWvx35I8RvFx72/TUkeL5nDJW1p9XSmhcZhCY8vFaLIFrdWQKvoLj3Gb7i6CbSZ
TbhYaEo0Sj/DhDSAAly/EA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 22:14:26 2026 by rpki-client