
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10762/CSTnGfj-WRow27cT-kp3Qvc9sUo.roa
File: CSTnGfj-WRow27cT-kp3Qvc9sUo.roa (raw, json)
Hash identifier: NHjEqSvBJgQZvsjr/tLNWwx4QtK0eW9OBeG0RGwUc14=
Subject key identifier: 09:24:E7:19:F8:FE:59:1A:30:DB:B7:13:FA:4A:77:42:F7:3D:B1:4A
Certificate issuer: /CN=28393FAE129B501824696BAE24B64734A203C376
Certificate serial: 96
Authority key identifier: 28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/CSTnGfj-WRow27cT-kp3Qvc9sUo.roa
Signing time: Tue 31 Mar 2026 07:40:57 +0000
ROA not before: Tue 31 Mar 2026 07:40:57 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 7514
IP address blocks: 210.198.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150 (0x96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28393FAE129B501824696BAE24B64734A203C376
Validity
Not Before: Mar 31 07:40:57 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=0924E719F8FE591A30DBB713FA4A7742F73DB14A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9f:f3:30:94:8a:e1:07:6d:d4:cd:c3:b2:14:
47:02:68:67:31:ff:96:1e:56:87:7c:fa:9c:f3:df:
d1:85:74:9c:24:d8:f5:60:51:8a:b3:9b:b7:1f:c9:
aa:0d:e4:9c:12:2d:16:9d:ba:45:53:01:1c:e0:d7:
ec:f7:77:7c:cc:3d:b0:7d:20:61:0d:0c:03:de:fb:
a0:c4:cd:5f:bc:fc:32:2a:27:56:1c:66:b2:5c:ca:
03:dc:fa:6f:8d:51:9f:36:e1:3b:23:3c:27:8d:c8:
70:f1:d5:78:ba:fb:82:00:e5:01:3b:72:b3:55:5a:
f4:d2:1b:93:63:42:0a:0d:23:10:c5:ea:89:22:ca:
e1:db:75:ef:06:cd:c9:5d:96:06:c5:a8:f8:81:3a:
86:7c:9f:f5:4e:b8:4a:13:8e:21:f2:d0:44:f7:32:
00:72:ea:2e:26:43:bb:62:e1:1c:6c:15:97:65:50:
dc:86:0e:4a:7b:6a:30:68:42:6a:ef:1c:47:ca:1f:
55:86:35:d2:9f:5d:70:83:db:94:94:0d:8e:a5:92:
62:17:b0:62:b0:96:47:ff:b7:fc:67:94:be:e7:89:
a6:64:9d:bb:46:2b:56:33:d8:de:03:f2:a7:fe:c5:
f3:8c:86:0a:e5:96:65:6f:c7:62:55:f0:a1:e7:03:
b7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:24:E7:19:F8:FE:59:1A:30:DB:B7:13:FA:4A:77:42:F7:3D:B1:4A
X509v3 Authority Key Identifier:
keyid:28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/CSTnGfj-WRow27cT-kp3Qvc9sUo.roa
sbgp-ipAddrBlock: critical
IPv4:
210.198.0.0/19
Signature Algorithm: sha256WithRSAEncryption
8f:dc:8c:7b:88:81:e9:a4:53:6f:67:75:51:8c:ea:cd:78:d4:
b2:a7:f0:85:2b:48:38:9f:0b:a2:e4:2f:98:96:ac:e7:5c:81:
e6:e5:dd:82:28:97:47:99:b4:fd:90:a9:98:0b:ec:cf:2a:0a:
6a:85:5e:66:39:c0:f4:a4:3b:b1:9d:d4:98:21:65:cd:7e:ec:
08:87:bf:05:48:45:80:10:11:67:fb:e7:23:8d:00:8c:50:0c:
23:e5:d4:86:49:0d:31:eb:b7:33:85:7e:bb:65:e9:fb:4f:7a:
5b:85:9a:e4:9e:ab:1b:4d:56:92:93:47:33:0d:55:7d:58:e1:
7d:09:d9:36:74:54:ec:64:51:6b:b8:c2:f1:7c:ff:ba:a1:63:
d5:47:d4:f9:c5:d2:f2:e6:34:d1:22:59:64:9f:13:01:db:9f:
aa:d5:a1:0f:8c:6d:18:15:21:bd:e9:09:c9:99:d9:55:40:fc:
a7:de:ec:6a:64:10:d0:32:ff:ed:7e:56:89:65:bf:60:77:50:
03:c2:b7:a7:a4:5a:ab:b2:6c:4a:d3:e5:6d:33:82:b6:dc:f2:
61:28:ea:41:cf:c1:48:b1:12:59:87:31:44:43:27:ad:e1:85:
00:63:52:6d:3f:9f:4c:76:e0:a4:f9:b6:f0:7c:33:27:99:c7:
4f:e7:67:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:48 2026 by rpki-client