
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/920/zb4CyGtlgUvvhd2kRs-IAFIyyUQ.roa
File: zb4CyGtlgUvvhd2kRs-IAFIyyUQ.roa (raw, json)
Hash identifier: rV2OeaKnFwvfIvzbSem/CzYtO4mxReAwD8Ueum0Cmz4=
Subject key identifier: CD:BE:02:C8:6B:65:81:4B:EF:85:DD:A4:46:CF:88:00:52:32:C9:44
Certificate issuer: /CN=C8930155500B58FF73A8A0882185C66AC6A0D3A0
Certificate serial: 32
Authority key identifier: C8:93:01:55:50:0B:58:FF:73:A8:A0:88:21:85:C6:6A:C6:A0:D3:A0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yJMBVVALWP9zqKCIIYXGasag06A.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/zb4CyGtlgUvvhd2kRs-IAFIyyUQ.roa
Signing time: Tue 31 Mar 2026 08:40:39 +0000
ROA not before: Tue 31 Mar 2026 08:40:39 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 24279
IP address blocks: 202.162.80.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/yJMBVVALWP9zqKCIIYXGasag06A.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/yJMBVVALWP9zqKCIIYXGasag06A.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yJMBVVALWP9zqKCIIYXGasag06A.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8930155500B58FF73A8A0882185C66AC6A0D3A0
Validity
Not Before: Mar 31 08:40:39 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=CDBE02C86B65814BEF85DDA446CF88005232C944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8c:ed:4c:7c:f7:54:b3:0a:98:29:6a:63:64:
fa:e1:27:b7:4c:8f:c4:55:a2:0a:1a:24:0b:5f:71:
d4:d4:27:66:cc:83:16:ff:a7:2b:94:48:c7:43:ad:
a1:bd:77:a0:71:a0:ae:c0:c3:45:43:cb:9d:08:37:
9d:9c:60:ec:08:34:f1:a2:f2:55:01:ae:db:d7:f2:
69:cc:e4:84:43:2e:09:ed:d2:a2:f2:fb:3a:8b:55:
fa:c3:5c:14:f6:e0:1b:fe:23:99:05:70:9f:10:c3:
6b:b7:9f:ad:b4:9d:84:cd:bb:48:f9:36:b3:ab:fb:
3d:51:f2:96:83:d8:88:28:ee:31:36:3a:2b:8c:73:
5f:e9:a0:ab:b7:1d:0f:b3:71:5e:70:8d:d2:b0:8e:
8f:8a:ea:72:65:23:4d:c0:f4:ab:6e:33:2d:c6:41:
d0:3a:18:c2:8d:89:69:51:5d:de:ca:17:e1:e6:f9:
c0:30:e5:a5:58:19:46:51:11:3c:2d:d3:83:73:91:
11:71:28:18:b6:89:e1:d1:0b:4e:3a:90:28:01:64:
38:1e:35:be:af:c9:e8:98:72:58:a4:36:46:d9:f2:
51:7a:8c:84:32:ae:69:c6:41:40:a6:a5:25:70:c8:
bd:96:e7:c6:e6:b9:23:e3:a3:20:b6:70:37:a9:c0:
b7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:BE:02:C8:6B:65:81:4B:EF:85:DD:A4:46:CF:88:00:52:32:C9:44
X509v3 Authority Key Identifier:
keyid:C8:93:01:55:50:0B:58:FF:73:A8:A0:88:21:85:C6:6A:C6:A0:D3:A0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/yJMBVVALWP9zqKCIIYXGasag06A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yJMBVVALWP9zqKCIIYXGasag06A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/zb4CyGtlgUvvhd2kRs-IAFIyyUQ.roa
sbgp-ipAddrBlock: critical
IPv4:
202.162.80.0/20
Signature Algorithm: sha256WithRSAEncryption
59:16:64:64:64:97:f3:0f:02:94:0f:25:f5:6c:06:fc:5c:80:
40:de:4f:8d:7d:fc:5c:9f:75:b3:76:81:2f:fa:35:53:14:dd:
02:32:ed:33:94:68:5b:28:2e:49:21:fe:d0:84:f0:ab:df:4b:
f0:18:a7:8a:11:a7:5c:0d:80:3c:ac:bc:4f:7f:ef:ef:c8:e6:
00:0a:86:f9:ba:3c:57:7e:bf:dc:b3:74:67:5a:55:1a:8a:d4:
69:02:bb:c6:e4:2a:b7:10:f1:a4:e7:12:d5:6a:78:84:4b:ac:
2e:43:8f:81:1f:0e:04:ae:f3:11:de:9e:ed:d3:fc:82:7a:c7:
1d:8e:37:76:3d:f9:06:ee:83:3f:9b:f4:e5:51:d8:71:5b:13:
0e:9a:49:3b:a2:3c:b0:19:0c:15:08:f7:e4:50:fe:57:20:77:
14:1e:49:9b:18:2e:16:9d:01:e2:bf:ae:5c:b1:c7:2b:1b:82:
4f:66:f1:0b:53:92:57:e9:2f:5c:c1:f5:62:5a:ab:66:1d:08:
83:6b:a9:99:9d:2c:e8:d9:0d:3b:ff:82:26:99:76:f5:e4:80:
f6:0d:37:94:e0:7a:f3:52:56:32:d4:4c:2b:d7:c6:25:bc:6a:
73:91:3b:60:d4:d1:cf:12:7e:be:36:e6:2b:01:09:dc:f8:50:
df:c7:48:92
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBMjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDODkz
MDE1NTUwMEI1OEZGNzNBOEEwODgyMTg1QzY2QUM2QTBEM0EwMB4XDTI2MDMzMTA4
NDAzOVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQ0RCRTAyQzg2QjY1ODE0
QkVGODVEREE0NDZDRjg4MDA1MjMyQzk0NDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKGM7Ux891SzCpgpamNk+uEnt0yPxFWiChokC19x1NQnZsyDFv+n
K5RIx0Otob13oHGgrsDDRUPLnQg3nZxg7Ag08aLyVQGu29fyaczkhEMuCe3SovL7
OotV+sNcFPbgG/4jmQVwnxDDa7efrbSdhM27SPk2s6v7PVHyloPYiCjuMTY6K4xz
X+mgq7cdD7NxXnCN0rCOj4rqcmUjTcD0q24zLcZB0DoYwo2JaVFd3soX4eb5wDDl
pVgZRlERPC3Tg3OREXEoGLaJ4dELTjqQKAFkOB41vq/J6JhyWKQ2RtnyUXqMhDKu
acZBQKalJXDIvZbnxua5I+OjILZwN6nAt2UCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBTNvgLIa2WBS++F3aRGz4gAUjLJRDAfBgNVHSMEGDAWgBTIkwFVUAtY/3OooIgh
hcZqxqDToDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTIwL3lKTUJWVkFMV1A5enFLQ0lJWVhHYXNhZzA2QS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3lKTUJWVkFMV1A5enFLQ0lJWVhHYXNh
ZzA2QS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85MjAvemI0Q3lHdGxnVXZ2aGQya1JzLUlBRkl5eVVRLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMqiUDANBgkqhkiG9w0BAQsFAAOCAQEA
WRZkZGSX8w8ClA8l9WwG/FyAQN5PjX38XJ91s3aBL/o1UxTdAjLtM5RoWyguSSH+
0ITwq99L8BinihGnXA2APKy8T3/v78jmAAqG+bo8V36/3LN0Z1pVGorUaQK7xuQq
txDxpOcS1Wp4hEusLkOPgR8OBK7zEd6e7dP8gnrHHY43dj35Bu6DP5v05VHYcVsT
DppJO6I8sBkMFQj35FD+VyB3FB5JmxguFp0B4r+uXLHHKxuCT2bxC1OSV+kvXMH1
YlqrZh0Ig2upmZ0s6NkNO/+CJpl29eSA9g03lOB681JWMtRMK9fGJbxqc5E7YNTR
zxJ+vjbmKwEJ3PhQ38dIkg==
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:24:16 2026 by rpki-client