
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/597/P8ysW_kh4jwQeksNPDm_kkrAnpc.roa
File: P8ysW_kh4jwQeksNPDm_kkrAnpc.roa (raw, json)
Hash identifier: XU4ZefGi4joK7nncke3c6I/C0x6+1BmpTJtFP5eB1w4=
Subject key identifier: 3F:CC:AC:5B:F9:21:E2:3C:10:7A:4B:0D:3C:39:BF:92:4A:C0:9E:97
Certificate issuer: /CN=71F76FA07735F685991FC882C885E21EFBB161BC
Certificate serial: 8F
Authority key identifier: 71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/P8ysW_kh4jwQeksNPDm_kkrAnpc.roa
Signing time: Wed 18 Mar 2026 09:45:44 +0000
ROA not before: Wed 18 Mar 2026 09:45:44 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2915
IP address blocks: 126.209.224.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 05:36:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143 (0x8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71F76FA07735F685991FC882C885E21EFBB161BC
Validity
Not Before: Mar 18 09:45:44 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=3FCCAC5BF921E23C107A4B0D3C39BF924AC09E97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8b:4b:77:6d:d9:c9:db:8f:4f:b3:2e:73:97:
59:8f:65:9c:27:4c:dd:8e:c6:58:f6:9c:ca:2f:b3:
64:4b:1d:8d:7d:66:6f:8b:43:3c:55:7a:c3:f4:8a:
3a:d1:d9:cb:4f:8d:de:1f:fe:d3:95:73:42:91:a1:
ca:1a:a7:ea:44:d0:0c:56:c8:3b:cc:36:c2:46:34:
4a:4f:55:c2:41:02:3e:ab:4b:33:22:d9:5c:3e:b3:
f1:8b:c7:ad:7d:e2:09:99:ec:5a:c8:fb:27:c6:ba:
dd:4c:4f:5d:fb:f9:8e:f7:24:6f:32:1e:56:ef:a0:
af:1b:8a:8e:06:53:31:55:66:7f:74:4c:7b:ef:bc:
88:55:7f:91:1a:84:0e:97:86:8a:59:57:1f:44:96:
0d:1e:e5:e1:f2:38:db:9d:6b:bf:b5:ff:dd:b8:66:
e8:bf:54:1b:92:a0:8e:28:42:6d:8f:9d:e8:64:7a:
af:cc:90:d6:a7:d3:a5:04:af:c1:13:e1:c6:09:b0:
a3:1f:e4:60:6b:ae:11:0c:68:c8:65:0b:4f:2a:d7:
e9:f5:1a:9a:21:96:e3:ad:56:0c:3b:cd:a2:39:cd:
a5:3d:14:e4:8e:f4:a1:b1:54:06:7a:02:bd:13:fc:
76:49:1e:0e:f8:71:a0:96:b0:75:bd:9b:88:81:c2:
bf:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CC:AC:5B:F9:21:E2:3C:10:7A:4B:0D:3C:39:BF:92:4A:C0:9E:97
X509v3 Authority Key Identifier:
keyid:71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/P8ysW_kh4jwQeksNPDm_kkrAnpc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
126.209.224.0/20
Signature Algorithm: sha256WithRSAEncryption
cb:a3:53:08:58:7c:b1:6e:3d:c3:1c:10:d2:7c:de:f6:9b:f5:
7a:8a:cf:c6:1e:57:45:aa:c1:5a:42:69:89:ef:19:0e:0e:39:
0f:60:41:52:5c:14:41:21:bf:f0:78:1e:fe:73:88:f3:7c:05:
67:44:5b:81:ca:21:53:71:7d:19:39:72:b0:43:d5:a0:ba:40:
d0:2e:6e:25:67:29:f3:43:8d:1f:7d:eb:e5:30:4f:33:56:66:
76:8c:d4:a6:ef:3f:16:a6:57:eb:65:db:cb:18:6b:4a:09:65:
54:f9:14:84:ea:ee:b5:64:93:20:f1:29:c7:e4:eb:d6:40:a5:
9b:ef:45:3f:a2:9d:4f:16:25:35:aa:8b:1f:fd:6a:ed:58:02:
87:61:65:90:b3:57:18:fd:de:fd:26:50:0c:55:c9:70:a8:6b:
3b:0f:10:3a:95:fb:71:4e:54:ea:e6:62:73:ba:44:cd:91:05:
8d:c0:ee:d7:2e:a5:9a:e0:36:91:5f:04:21:58:9a:1f:ed:66:
c1:fe:77:0f:0d:b7:2a:36:78:1f:86:05:e9:cc:f0:3c:9b:86:
98:82:9b:6e:75:90:0b:a5:a2:45:d4:35:f5:8e:3c:d4:f8:e4:
ae:60:c8:0d:58:63:c3:25:50:d6:f0:ed:07:20:33:d0:7e:01:
dd:75:ba:93
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFG
NzZGQTA3NzM1RjY4NTk5MUZDODgyQzg4NUUyMUVGQkIxNjFCQzAeFw0yNjAzMTgw
OTQ1NDRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNGQ0NBQzVCRjkyMUUy
M0MxMDdBNEIwRDNDMzlCRjkyNEFDMDlFOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDi0t3bdnJ249Psy5zl1mPZZwnTN2Oxlj2nMovs2RLHY19Zm+L
QzxVesP0ijrR2ctPjd4f/tOVc0KRocoap+pE0AxWyDvMNsJGNEpPVcJBAj6rSzMi
2Vw+s/GLx6194gmZ7FrI+yfGut1MT137+Y73JG8yHlbvoK8bio4GUzFVZn90THvv
vIhVf5EahA6XhopZVx9Elg0e5eHyONuda7+1/924Zui/VBuSoI4oQm2Pnehkeq/M
kNan06UEr8ET4cYJsKMf5GBrrhEMaMhlC08q1+n1GpohluOtVgw7zaI5zaU9FOSO
9KGxVAZ6Ar0T/HZJHg74caCWsHW9m4iBwr/FAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUP8ysW/kh4jwQeksNPDm/kkrAnpcwHwYDVR0jBBgwFoAUcfdvoHc19oWZH8iC
yIXiHvuxYbwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU5Ny9jZmR2b0hjMTlvV1pIOGlDeUlYaUh2dXhZYncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9jZmR2b0hjMTlvV1pIOGlDeUlYaUh2
dXhZYncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTk3L1A4eXNXX2toNGp3UWVrc05QRG1fa2tyQW5wYy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAR+0eAwDQYJKoZIhvcNAQELBQADggEBAMujUwhYfLFuPcMcENJ83vab9XqK
z8YeV0WqwVpCaYnvGQ4OOQ9gQVJcFEEhv/B4Hv5ziPN8BWdEW4HKIVNxfRk5crBD
1aC6QNAubiVnKfNDjR996+UwTzNWZnaM1KbvPxamV+tl28sYa0oJZVT5FITq7rVk
kyDxKcfk69ZApZvvRT+inU8WJTWqix/9au1YAodhZZCzVxj93v0mUAxVyXCoazsP
EDqV+3FOVOrmYnO6RM2RBY3A7tcupZrgNpFfBCFYmh/tZsH+dw8Ntyo2eB+GBenM
8DybhpiCm251kAulokXUNfWOPNT45K5gyA1YY8MlUNbw7QcgM9B+Ad11upM=
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:43:04 2026 by rpki-client