
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/WLkwYGvlt2m7hfullemzYpE0VFE.roa
File: WLkwYGvlt2m7hfullemzYpE0VFE.roa (raw, json)
Hash identifier: 1qDWbGfGj437qDHym3ELJLxwBGB36yJITe0pjdZWsNc=
Subject key identifier: 58:B9:30:60:6B:E5:B7:69:BB:85:FB:A5:95:E9:B3:62:91:34:54:51
Certificate issuer: /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial: 98
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/WLkwYGvlt2m7hfullemzYpE0VFE.roa
Signing time: Tue 31 Mar 2026 08:37:46 +0000
ROA not before: Tue 31 Mar 2026 08:37:46 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 17698
IP address blocks: 221.121.192.0/18 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152 (0x98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Validity
Not Before: Mar 31 08:37:46 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=58B930606BE5B769BB85FBA595E9B36291345451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:11:ad:80:ff:10:f7:09:e5:a1:f1:cf:0b:fe:
b9:4d:92:85:f3:ac:3e:19:1a:74:67:01:e4:7e:39:
94:67:07:fc:2a:0c:7b:20:45:7c:84:98:2e:08:00:
e3:83:bd:7c:95:30:e5:13:0d:20:b8:b4:3d:24:a4:
84:bb:88:a4:2b:02:12:13:dc:18:9d:66:0a:48:7a:
bb:38:e2:16:ac:61:77:d8:d0:b6:24:07:f6:1e:60:
85:a6:5b:1d:1e:a5:11:ff:b3:b9:27:5b:f3:e3:c6:
87:f1:23:e1:86:47:2b:83:78:2f:75:0f:90:25:f6:
11:0b:a6:83:de:86:4c:a0:08:5b:d5:f2:4b:c8:fe:
10:b9:08:fc:cd:c2:07:20:c3:07:ae:06:f2:ca:79:
8d:c6:a7:d4:a7:7b:05:50:f1:24:71:82:50:49:0c:
cc:d7:cf:fa:e2:5c:63:fc:96:8b:1c:4d:82:a7:7d:
85:db:c3:c2:fc:d9:29:37:c3:a7:ed:df:e2:8c:45:
b2:98:6e:7f:95:db:06:1d:e6:89:d8:10:86:65:cb:
2f:db:f7:ea:3a:8a:ba:3f:15:bf:61:02:68:17:24:
da:84:ef:a1:a1:26:1f:67:d6:5f:18:92:9f:51:90:
00:ea:e9:db:4a:b9:df:c0:3e:d5:3d:c0:58:17:4e:
35:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B9:30:60:6B:E5:B7:69:BB:85:FB:A5:95:E9:B3:62:91:34:54:51
X509v3 Authority Key Identifier:
keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/WLkwYGvlt2m7hfullemzYpE0VFE.roa
sbgp-ipAddrBlock: critical
IPv4:
221.121.192.0/18
Signature Algorithm: sha256WithRSAEncryption
8d:2e:7d:67:55:6c:7b:40:73:1e:82:b3:7c:35:9d:52:6c:a4:
4a:7f:18:2b:4f:c0:c8:56:d6:59:9d:7d:aa:16:88:21:4d:28:
99:51:33:f2:61:14:f7:37:e4:d8:1a:57:d9:0d:c8:90:d6:c9:
c9:66:64:87:d5:93:be:1d:ce:7d:a7:db:d2:35:52:69:85:aa:
75:b8:88:4a:9c:55:91:0d:8a:00:0b:ff:de:64:eb:7b:cf:ab:
d0:30:5a:3a:db:cf:7c:4a:43:77:4a:34:b4:4d:22:2f:c7:a9:
99:ae:7f:e0:67:f1:c0:05:93:58:5a:76:cd:ff:8b:0d:38:65:
75:a4:43:2d:74:7b:a2:1e:75:f8:c3:35:34:0e:da:d1:b5:cc:
60:c8:98:57:82:57:05:17:a6:e4:93:19:3b:c4:bf:ca:19:b0:
31:ec:18:05:e3:91:42:36:1d:04:81:07:20:26:92:c1:6d:0b:
2b:e7:95:3d:29:7d:f6:4e:e9:f6:d2:d4:91:b5:79:a7:bf:45:
19:29:66:30:54:2b:5e:4e:64:3a:84:07:3b:d4:9d:d5:e1:0f:
a6:70:2c:6b:eb:e5:2f:88:bd:a1:46:d6:21:3b:c2:9e:60:f9:
34:f4:99:f2:7c:f3:60:41:50:8c:6f:c7:82:0f:e4:3d:31:cf:
94:d8:a3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:27 2026 by rpki-client