
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/-QHpm76J_0YS37F6Xn4D035wVOc.roa
File: -QHpm76J_0YS37F6Xn4D035wVOc.roa (raw, json)
Hash identifier: CGfo3jvybmJ11wFWILNpx81ekGGU70XKHr1G1I8OFyM=
Subject key identifier: F9:01:E9:9B:BE:89:FF:46:12:DF:B1:7A:5E:7E:03:D3:7E:70:54:E7
Certificate issuer: /CN=677198612266777D83A2DB4A1E9E147C72A5D76D
Certificate serial: 16
Authority key identifier: 67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/-QHpm76J_0YS37F6Xn4D035wVOc.roa
Signing time: Wed 25 Mar 2026 05:53:42 +0000
ROA not before: Wed 25 Mar 2026 05:53:42 +0000
ROA not after: Wed 24 Mar 2027 01:46:06 +0000
asID: 17511
IP address blocks: 122.100.24.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677198612266777D83A2DB4A1E9E147C72A5D76D
Validity
Not Before: Mar 25 05:53:42 2026 GMT
Not After : Mar 24 01:46:06 2027 GMT
Subject: CN=F901E99BBE89FF4612DFB17A5E7E03D37E7054E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:99:41:58:f7:ae:a9:84:42:9f:54:06:9b:6e:
33:b6:aa:05:8c:8d:c8:12:14:52:ab:f6:94:e6:b9:
06:5d:85:be:ed:db:e6:76:7e:7e:92:41:e3:6c:33:
b4:a1:d3:f8:bc:de:aa:7c:68:c2:07:7d:5b:3b:43:
03:fe:25:d6:13:9a:1f:5e:a8:1b:e6:f2:7f:3b:34:
e4:14:9a:d0:77:2b:ce:3f:ff:8c:a6:9c:9f:88:62:
2d:be:da:db:a9:e0:0e:42:da:54:8d:c7:bb:ec:f5:
d1:36:0c:46:a7:b4:94:db:68:68:4b:58:1f:c1:e3:
f1:89:c1:c2:58:b2:a5:09:b7:59:4a:90:1f:0d:fa:
a2:4e:8d:21:58:f1:90:a5:40:ab:9f:95:bd:d2:9e:
cc:62:5a:ba:41:61:32:28:46:12:1e:14:0c:73:ef:
3f:28:97:68:12:8d:ef:15:56:5a:7c:c2:54:88:ac:
bd:b6:38:67:6e:5e:69:0b:5c:47:6a:0e:71:56:e4:
8a:eb:6e:39:b9:e4:a0:35:77:7d:91:2d:f8:8f:62:
bc:ff:6b:e4:6b:19:9a:c6:43:3b:90:81:88:45:5c:
10:b7:c6:a1:36:e3:48:31:e2:50:97:ff:7d:f1:a1:
61:f4:b2:61:48:c8:e1:5c:a9:04:f3:2e:1c:23:ef:
25:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:01:E9:9B:BE:89:FF:46:12:DF:B1:7A:5E:7E:03:D3:7E:70:54:E7
X509v3 Authority Key Identifier:
keyid:67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/-QHpm76J_0YS37F6Xn4D035wVOc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.24.0/21
Signature Algorithm: sha256WithRSAEncryption
60:a2:fe:b1:28:38:7e:53:d8:84:a5:27:53:e5:6e:4f:07:58:
4e:88:7c:b0:bf:8b:ec:24:c9:8d:5a:ae:b8:e9:3e:b7:30:f9:
0b:2f:fe:51:ef:8f:84:49:d4:38:c0:35:c9:80:c3:8e:4c:14:
d7:ec:83:cd:f3:e6:5f:24:0f:91:e5:4e:62:d7:50:65:f4:eb:
cf:93:84:eb:7c:24:38:fb:75:40:97:d3:e8:a2:93:9a:67:da:
b2:d6:7f:90:3d:f2:9d:68:2f:b7:39:ac:ee:f1:54:c6:12:d8:
cf:e9:79:5f:c5:8d:0f:d2:e3:a1:db:6e:d0:e4:43:40:ca:0c:
f8:60:de:6d:35:9e:f6:7c:71:ed:27:63:1f:8e:fd:2f:bc:fb:
9f:ed:d5:ce:a0:0d:5e:3b:d4:89:a0:1e:3a:63:ea:fa:43:e8:
b8:cb:31:ad:e6:15:0a:aa:20:a0:d4:3c:5a:59:5c:6b:c5:87:
13:a8:1b:7b:4b:05:1f:69:71:b7:f9:c4:a1:9f:e3:84:38:3b:
d9:cd:16:3a:98:a2:ed:0a:57:c5:07:9f:77:c8:6c:ac:1d:2f:
53:df:d9:34:3e:05:cd:c2:49:64:8d:d6:47:f1:a7:d6:f2:ca:
1b:f0:2d:95:e3:09:d7:ce:b6:70:4e:05:c0:d6:20:ae:eb:34:
86:d7:3c:bd
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBFjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2Nzcx
OTg2MTIyNjY3NzdEODNBMkRCNEExRTlFMTQ3QzcyQTVENzZEMB4XDTI2MDMyNTA1
NTM0MloXDTI3MDMyNDAxNDYwNlowMzExMC8GA1UEAxMoRjkwMUU5OUJCRTg5RkY0
NjEyREZCMTdBNUU3RTAzRDM3RTcwNTRFNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMOZQVj3rqmEQp9UBptuM7aqBYyNyBIUUqv2lOa5Bl2Fvu3b5nZ+
fpJB42wztKHT+Lzeqnxowgd9WztDA/4l1hOaH16oG+byfzs05BSa0Hcrzj//jKac
n4hiLb7a26ngDkLaVI3Hu+z10TYMRqe0lNtoaEtYH8Hj8YnBwliypQm3WUqQHw36
ok6NIVjxkKVAq5+VvdKezGJaukFhMihGEh4UDHPvPyiXaBKN7xVWWnzCVIisvbY4
Z25eaQtcR2oOcVbkiutuObnkoDV3fZEt+I9ivP9r5GsZmsZDO5CBiEVcELfGoTbj
SDHiUJf/ffGhYfSyYUjI4VypBPMuHCPvJTkCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBT5Aembvon/RhLfsXpefgPTfnBU5zAfBgNVHSMEGDAWgBRncZhhImZ3fYOi20oe
nhR8cqXXbTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDkzL1ozR1lZU0ptZDMyRG90dEtIcDRVZkhLbDEyMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1ozR1lZU0ptZDMyRG90dEtIcDRVZkhL
bDEyMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80OTMvLVFIcG03NkpfMFlTMzdGNlhuNEQwMzV3Vk9jLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA3pkGDANBgkqhkiG9w0BAQsFAAOCAQEAYKL+sSg4flPYhKUnU+VuTwdYToh8
sL+L7CTJjVquuOk+tzD5Cy/+Ue+PhEnUOMA1yYDDjkwU1+yDzfPmXyQPkeVOYtdQ
ZfTrz5OE63wkOPt1QJfT6KKTmmfastZ/kD3ynWgvtzms7vFUxhLYz+l5X8WND9Lj
odtu0ORDQMoM+GDebTWe9nxx7SdjH479L7z7n+3VzqANXjvUiaAeOmPq+kPouMsx
reYVCqogoNQ8Wllca8WHE6gbe0sFH2lxt/nEoZ/jhDg72c0WOpii7QpXxQefd8hs
rB0vU9/ZND4FzcJJZI3WR/Gn1vLKG/AtleMJ1862cE4FwNYgrus0htc8vQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:56:01 2026 by rpki-client