
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/905/24elPBV5YwWdwjmAjolPtShQoSA.roa
File: 24elPBV5YwWdwjmAjolPtShQoSA.roa (raw, json)
Hash identifier: AHHYwEcdD2GUewxScBizLNCs5LvW4UyaTOWFtf/ZFdU=
Subject key identifier: DB:87:A5:3C:15:79:63:05:9D:C2:39:80:8E:89:4F:B5:28:50:A1:20
Certificate issuer: /CN=FAEF57FF144D25094E460E0FD38C80379334ED6D
Certificate serial: 38
Authority key identifier: FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/24elPBV5YwWdwjmAjolPtShQoSA.roa
Signing time: Tue 31 Mar 2026 08:34:58 +0000
ROA not before: Tue 31 Mar 2026 08:34:58 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 24255
IP address blocks: 103.198.212.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 16:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FAEF57FF144D25094E460E0FD38C80379334ED6D
Validity
Not Before: Mar 31 08:34:58 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=DB87A53C157963059DC239808E894FB52850A120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:86:a6:b5:8d:eb:70:4a:90:eb:2d:ce:ca:0c:
a4:c9:07:6d:e8:5d:f0:a1:1e:fe:09:54:b5:b9:b0:
11:ab:24:7e:2e:a3:73:19:ab:94:d5:45:51:0f:57:
63:4a:0a:fd:27:c5:35:c8:21:8e:24:5c:5d:97:1a:
e8:cc:b8:4f:15:07:bb:5f:48:e0:25:7b:9d:86:b3:
32:43:66:a6:f6:bb:57:3e:83:5a:26:45:ef:36:47:
db:fe:96:67:8b:b7:a7:50:67:62:be:5c:f3:5e:cb:
29:65:8f:2d:ff:84:51:9c:dd:b8:13:00:0d:44:62:
60:e1:44:81:45:a4:3f:58:c7:5e:f8:87:4a:b1:44:
4e:75:34:a0:37:2b:8f:02:cd:73:57:fb:0a:4d:41:
39:43:ca:f8:8b:b3:e6:f0:ae:0d:ce:ad:9e:42:25:
10:bb:0f:1e:db:da:dc:41:21:93:36:64:63:7b:f5:
0b:71:93:bd:69:b2:ab:c8:8c:2e:b9:81:2e:c4:a8:
e5:ab:6b:4c:61:ec:4e:45:47:b2:f7:2b:0d:65:d9:
7c:41:cd:bb:b4:d8:39:b1:f6:ee:2e:ee:d2:ec:e8:
43:89:fe:7a:e2:6c:28:ee:ec:b9:54:0a:a4:8b:fc:
62:67:a0:71:01:b4:4e:b4:74:a1:84:02:df:15:ea:
2e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:87:A5:3C:15:79:63:05:9D:C2:39:80:8E:89:4F:B5:28:50:A1:20
X509v3 Authority Key Identifier:
keyid:FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/24elPBV5YwWdwjmAjolPtShQoSA.roa
sbgp-ipAddrBlock: critical
IPv4:
103.198.212.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:f2:60:de:9c:ca:43:8c:ce:c0:68:b3:37:a3:44:46:f8:36:
df:c0:e5:1e:56:9a:49:3d:63:c2:dd:3a:13:19:a6:c4:09:39:
f7:fb:5e:29:4c:91:b0:b6:7d:22:aa:ba:7e:04:f7:1b:54:63:
6a:95:2d:b9:e0:e6:99:b6:b2:9d:d8:17:47:a7:fb:0a:2a:15:
e9:32:56:49:39:43:63:1d:23:f6:5b:58:b5:16:ea:e4:28:d5:
0a:11:6c:32:b2:cc:e1:d5:f5:6a:76:a4:69:28:5b:26:67:2a:
c0:9e:69:fc:b1:e1:99:43:35:2f:23:e3:93:d6:74:2a:1c:93:
5a:64:81:18:63:e8:f6:a9:d8:01:f7:4d:f4:79:8c:a2:7b:58:
ba:d6:48:de:7d:05:b5:9d:b1:4e:ca:2b:db:d7:09:40:d8:b6:
99:49:2f:04:35:b6:6a:86:41:fc:4f:5a:49:84:38:e2:3e:b6:
fd:39:53:3f:3b:a8:57:6c:23:32:fc:79:b4:c2:2f:6d:2c:db:
10:de:53:19:0f:e3:05:b7:39:20:aa:f8:44:d5:8f:ee:72:84:
84:4f:c2:cf:a9:f3:fd:4d:33:eb:51:09:44:d8:39:3f:2c:b6:
ce:eb:57:e7:c8:7a:85:ca:8d:29:10:3f:db:a2:9a:0b:00:9b:
79:08:91:d1
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBODANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQUVG
NTdGRjE0NEQyNTA5NEU0NjBFMEZEMzhDODAzNzkzMzRFRDZEMB4XDTI2MDMzMTA4
MzQ1OFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoREI4N0E1M0MxNTc5NjMw
NTlEQzIzOTgwOEU4OTRGQjUyODUwQTEyMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALeGprWN63BKkOstzsoMpMkHbehd8KEe/glUtbmwEaskfi6jcxmr
lNVFUQ9XY0oK/SfFNcghjiRcXZca6My4TxUHu19I4CV7nYazMkNmpva7Vz6DWiZF
7zZH2/6WZ4u3p1BnYr5c817LKWWPLf+EUZzduBMADURiYOFEgUWkP1jHXviHSrFE
TnU0oDcrjwLNc1f7Ck1BOUPK+Iuz5vCuDc6tnkIlELsPHtva3EEhkzZkY3v1C3GT
vWmyq8iMLrmBLsSo5atrTGHsTkVHsvcrDWXZfEHNu7TYObH27i7u0uzoQ4n+euJs
KO7suVQKpIv8YmegcQG0TrR0oYQC3xXqLrkCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBTbh6U8FXljBZ3COYCOiU+1KFChIDAfBgNVHSMEGDAWgBT671f/FE0lCU5GDg/T
jIA3kzTtbTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTA1Ly11OVhfeFJOSlFsT1JnNFAwNHlBTjVNMDdXMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy11OVhfeFJOSlFsT1JnNFAwNHlBTjVN
MDdXMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85MDUvMjRlbFBCVjVZd1dkd2ptQWpvbFB0U2hRb1NBLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmfG1DANBgkqhkiG9w0BAQsFAAOCAQEA
bvJg3pzKQ4zOwGizN6NERvg238DlHlaaST1jwt06ExmmxAk59/teKUyRsLZ9Iqq6
fgT3G1RjapUtueDmmbayndgXR6f7CioV6TJWSTlDYx0j9ltYtRbq5CjVChFsMrLM
4dX1anakaShbJmcqwJ5p/LHhmUM1LyPjk9Z0KhyTWmSBGGPo9qnYAfdN9HmMontY
utZI3n0FtZ2xTsor29cJQNi2mUkvBDW2aoZB/E9aSYQ44j62/TlTPzuoV2wjMvx5
tMIvbSzbEN5TGQ/jBbc5IKr4RNWP7nKEhE/Cz6nz/U0z61EJRNg5Pyy2zutX58h6
hcqNKRA/26KaCwCbeQiR0Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:19:41 2026 by rpki-client