
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/MIFVg6fELlUhLjb8kPFlnRLxD5A.roa
File: MIFVg6fELlUhLjb8kPFlnRLxD5A.roa (raw, json)
Hash identifier: ljtN5J+1mhmpsNj8uSrY+jDxizNRvVQrkxGmfNYpZSs=
Subject key identifier: 30:81:55:83:A7:C4:2E:55:21:2E:36:FC:90:F1:65:9D:12:F1:0F:90
Certificate issuer: /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial: 97
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/MIFVg6fELlUhLjb8kPFlnRLxD5A.roa
Signing time: Tue 31 Mar 2026 08:37:45 +0000
ROA not before: Tue 31 Mar 2026 08:37:45 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 17698
IP address blocks: 220.213.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151 (0x97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Validity
Not Before: Mar 31 08:37:45 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=30815583A7C42E55212E36FC90F1659D12F10F90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:77:de:52:18:ea:37:02:34:4b:e8:e2:19:03:
ac:de:e8:59:d1:9b:08:04:0a:1e:91:2c:89:5a:ad:
1b:c8:e2:63:71:b8:3f:b0:de:43:81:5b:41:80:66:
9e:a8:eb:09:27:b1:cb:ba:ff:42:98:54:d9:fd:f9:
03:6d:38:80:d1:42:a9:bd:1a:da:d3:86:f0:99:29:
49:e0:bf:d8:98:0a:c9:82:e5:d0:28:34:ae:9e:d8:
4e:a2:a2:f0:88:ef:fb:0b:ab:32:7a:0f:4e:75:fe:
38:c0:a7:6b:b0:3f:a6:07:59:c0:9a:55:82:0c:74:
ff:31:69:bd:14:7f:d0:0b:8d:2b:ff:30:63:9a:7c:
2a:b6:e3:49:25:a0:c5:db:a6:a9:de:e9:89:77:80:
cc:29:42:7b:f0:3d:64:e5:58:c3:8b:eb:16:1c:36:
d4:a5:33:17:31:3c:f9:ed:cf:96:fe:c7:8d:72:75:
2b:8a:36:e5:77:c8:71:48:b0:13:2b:e1:82:fd:11:
ea:a8:57:9f:3c:4c:79:cd:e1:64:15:db:7a:92:50:
4d:c5:b6:09:f3:e1:60:74:b5:6b:97:08:c3:8f:25:
8f:90:e5:5b:a8:9b:f5:f1:06:d0:97:e7:44:22:f4:
39:e2:ac:3a:69:6d:07:a0:4c:4f:fe:8f:f6:fa:8c:
eb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:81:55:83:A7:C4:2E:55:21:2E:36:FC:90:F1:65:9D:12:F1:0F:90
X509v3 Authority Key Identifier:
keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/MIFVg6fELlUhLjb8kPFlnRLxD5A.roa
sbgp-ipAddrBlock: critical
IPv4:
220.213.192.0/19
Signature Algorithm: sha256WithRSAEncryption
c6:ea:f2:aa:10:09:7e:b7:37:3b:f7:df:9c:b8:1b:e8:41:60:
41:5f:54:2d:1d:68:9a:1d:88:4f:8d:1c:b1:ef:26:8d:92:47:
55:9e:aa:ca:bd:ef:fd:df:a3:b7:52:9f:27:ee:38:c0:b6:cc:
84:92:74:e7:ef:cc:6a:0a:d7:96:1a:9f:03:9c:61:3d:fa:05:
56:0d:25:4d:90:1a:bf:62:82:d5:e7:b6:99:8c:af:80:b5:53:
6d:30:00:19:bc:66:34:20:f0:85:39:d7:78:ef:d0:7d:e7:18:
d7:9f:60:b3:e2:30:e6:56:fd:4a:01:72:5d:22:fd:a1:73:b0:
44:c2:75:57:c9:30:42:4b:8e:56:e7:e5:fb:35:9a:c2:07:65:
2a:fa:59:9f:40:6d:b8:cc:99:bd:32:c5:6b:08:10:1f:be:c0:
ef:4a:6e:a7:53:82:e5:93:73:f1:88:26:14:47:e2:c7:45:42:
fa:1c:03:cc:fa:8f:13:a5:88:b2:d8:59:c3:47:b5:c3:39:63:
8b:17:0c:1b:c8:d9:bd:6d:b9:6d:60:7e:d2:97:03:e1:92:45:
62:be:d0:c8:c2:25:2d:e7:f2:d3:96:f8:37:15:46:a0:4a:fa:
a0:96:cc:62:1f:83:ce:3e:37:98:55:e8:01:a9:d8:ac:9b:e4:
37:c0:91:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:20 2026 by rpki-client