
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/PNLGn1BkEJOtBg5n9L15uKN8EG4.roa
File: PNLGn1BkEJOtBg5n9L15uKN8EG4.roa (raw, json)
Hash identifier: ritUCGzH7F0o2oOlBMh83jYiqYPC7VfW8oBAoimV8ZM=
Subject key identifier: 3C:D2:C6:9F:50:64:10:93:AD:06:0E:67:F4:BD:79:B8:A3:7C:10:6E
Certificate issuer: /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial: 92
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/PNLGn1BkEJOtBg5n9L15uKN8EG4.roa
Signing time: Tue 31 Mar 2026 08:37:42 +0000
ROA not before: Tue 31 Mar 2026 08:37:42 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 17698
IP address blocks: 218.216.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146 (0x92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Validity
Not Before: Mar 31 08:37:42 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=3CD2C69F50641093AD060E67F4BD79B8A37C106E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:af:97:70:99:87:51:e7:0f:95:19:32:41:7e:
46:5c:0f:12:f8:5c:e9:1b:5f:df:53:0a:d8:77:c6:
1f:70:ce:0e:45:ba:f6:8a:1b:5c:1b:81:f7:2f:39:
71:80:df:a4:69:42:aa:f4:71:53:57:3a:36:b2:60:
34:0b:33:6c:32:1b:99:61:5e:74:ae:88:85:f2:ea:
16:35:f8:b8:c1:2f:c1:23:9c:9f:d5:96:0f:11:9d:
a6:04:48:d0:68:1c:e8:8d:d5:30:b9:f5:f4:78:76:
e6:ce:26:51:f5:71:7e:30:fe:9d:3a:19:3d:1f:e9:
33:00:93:ac:98:a0:8a:7a:84:ef:72:fd:df:e7:0a:
3e:5d:9c:1c:a0:92:3f:b1:30:84:b1:ae:f3:d6:26:
88:3c:f2:9f:84:18:27:8e:04:ca:d9:57:2e:39:f2:
73:9b:d4:ec:63:02:8f:a3:46:70:b0:ae:a3:5f:9a:
93:14:27:c1:08:6c:81:74:e7:d8:d1:f1:1d:ba:ab:
40:1e:65:00:91:e2:a9:5c:0e:20:29:51:22:59:1b:
95:aa:d5:af:8e:c2:51:55:7c:58:05:47:7c:f7:89:
aa:a0:31:e8:f9:c9:9d:57:da:07:92:e5:38:82:e6:
71:cd:d1:5d:97:bb:ff:84:fb:08:06:75:1b:24:d4:
ac:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D2:C6:9F:50:64:10:93:AD:06:0E:67:F4:BD:79:B8:A3:7C:10:6E
X509v3 Authority Key Identifier:
keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/PNLGn1BkEJOtBg5n9L15uKN8EG4.roa
sbgp-ipAddrBlock: critical
IPv4:
218.216.192.0/18
Signature Algorithm: sha256WithRSAEncryption
4c:28:e9:7b:1e:b0:a3:a1:d3:57:2f:11:67:3c:e9:06:52:09:
11:95:87:33:a1:6b:67:13:92:ce:84:54:bc:ed:50:f5:b4:88:
85:5e:92:40:e5:28:94:f3:c3:d9:d7:de:7a:6b:07:d2:8c:f0:
b8:ba:7e:45:aa:8a:64:84:7e:88:09:a9:97:92:98:92:c6:7c:
c9:63:3f:b8:58:4f:b8:49:6e:96:e0:d3:17:f8:40:43:90:d4:
ad:e2:5e:68:fb:0f:4c:2d:7d:f3:64:a5:6a:67:b0:98:67:70:
b0:d6:55:55:24:c2:02:20:c5:e1:fa:6d:41:8d:b6:ea:79:94:
9b:4a:aa:11:8d:2c:79:68:1f:1f:fa:e5:50:2d:05:cb:3b:fe:
ca:dd:50:d9:8d:84:68:12:7f:de:8c:11:3e:a7:78:d1:63:b8:
a4:16:1f:ac:fa:93:c8:43:db:40:43:05:39:d3:2c:d0:f4:fe:
67:e7:a6:4d:27:3f:8c:c8:94:1d:7d:96:b7:8f:22:0e:3c:86:
68:15:e3:1f:e1:4e:42:57:2c:9a:20:3c:bf:ec:33:06:b9:c9:
bb:44:7e:31:29:46:bd:fd:d6:30:6f:2c:5b:36:78:46:c8:66:
35:c6:78:a5:08:95:99:a8:d9:68:ff:12:e7:e8:dd:dc:b8:c2:
31:55:57:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:37 2026 by rpki-client