
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/rQ97Kd7ht7Rm0ATPfRl-wuTcrSg.roa
File: rQ97Kd7ht7Rm0ATPfRl-wuTcrSg.roa (raw, json)
Hash identifier: 2b+nNABpk7fVRAsM0dZSYe6fWZJnLeo2hroguhQumNU=
Subject key identifier: AD:0F:7B:29:DE:E1:B7:B4:66:D0:04:CF:7D:19:7E:C2:E4:DC:AD:28
Certificate issuer: /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial: 91
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/rQ97Kd7ht7Rm0ATPfRl-wuTcrSg.roa
Signing time: Tue 31 Mar 2026 08:37:42 +0000
ROA not before: Tue 31 Mar 2026 08:37:42 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 17698
IP address blocks: 203.223.180.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145 (0x91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Validity
Not Before: Mar 31 08:37:42 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=AD0F7B29DEE1B7B466D004CF7D197EC2E4DCAD28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d7:51:be:2e:05:d2:d3:07:b2:0b:d4:14:0f:
ed:77:52:22:08:ed:31:58:9c:f3:80:e2:a5:50:9b:
3c:5a:86:69:79:45:45:a0:29:93:79:7d:0c:7b:6a:
37:b0:8e:0f:e5:81:99:58:79:fb:ca:98:2b:0b:01:
4d:e0:ce:a0:8f:82:f4:db:f7:1d:22:a8:5d:5f:56:
77:4b:92:7b:14:c4:9e:7e:f9:d0:a7:ef:54:56:0f:
3a:dd:9c:d4:ef:f8:ab:72:59:0a:86:1c:eb:81:1f:
8d:64:85:2e:57:21:03:a8:80:5e:d2:f7:bb:38:3e:
76:34:06:21:50:73:a7:47:07:37:c7:40:fe:41:a5:
0f:8c:71:cb:41:aa:65:01:dd:cc:92:9a:72:ab:de:
e1:2a:b5:91:8d:b1:64:2f:1d:44:e8:3a:60:24:55:
14:be:25:63:9c:30:c3:1c:89:96:c7:90:00:17:2c:
59:3a:8f:21:ca:41:78:33:9e:1e:e3:5c:33:3a:3e:
a5:99:ca:3a:8b:71:e8:69:4b:4b:20:d7:fa:02:a6:
2b:51:f6:58:1f:28:95:6b:40:43:9b:26:e9:a7:6a:
d8:bc:8b:90:3c:43:56:e1:c9:03:49:4a:e0:31:b4:
33:54:fb:dc:2e:f9:ca:3f:09:4a:c9:2c:8f:01:3c:
b9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0F:7B:29:DE:E1:B7:B4:66:D0:04:CF:7D:19:7E:C2:E4:DC:AD:28
X509v3 Authority Key Identifier:
keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/rQ97Kd7ht7Rm0ATPfRl-wuTcrSg.roa
sbgp-ipAddrBlock: critical
IPv4:
203.223.180.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:96:40:2f:31:90:d2:9e:85:87:10:06:8f:f0:89:68:ba:42:
4b:c6:ee:dd:9a:e8:0a:de:89:a3:08:b0:79:e8:f4:9b:a3:a1:
0f:0d:07:35:57:76:5e:fd:0d:f1:62:76:43:df:97:75:8b:6a:
52:e9:91:10:40:ea:b7:fb:32:d9:bd:58:94:cc:4a:91:37:fb:
7b:1f:2a:74:60:35:42:e3:48:f4:9f:e5:1d:c7:0f:b7:f6:ee:
c4:24:ef:6f:72:df:4b:87:27:cb:21:fc:04:22:99:b7:62:e9:
2d:e5:59:df:77:bd:5f:40:8f:bc:52:4d:56:84:94:6b:90:46:
26:ba:24:4f:f5:ef:3c:5d:0f:83:82:29:f6:8a:b5:b0:17:9b:
a0:83:09:23:1d:29:0c:95:d3:8a:aa:3c:8a:02:27:10:ac:8c:
2f:2b:bf:a6:30:a3:9f:de:3a:8f:d5:08:fa:cc:78:2a:6c:d8:
00:f4:75:8b:9b:c3:19:32:cf:42:aa:d1:1d:4a:ff:79:33:a2:
93:2d:76:4a:5e:cd:00:f2:1c:f7:bb:de:50:ab:8c:7a:64:d1:
8c:55:b6:f9:90:71:e3:bf:6c:1b:39:3c:57:e0:0d:7e:bd:aa:
07:b1:f4:a0:fa:59:a9:9f:ef:d2:dd:c3:58:3d:28:de:2b:74:
24:28:9a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:53 2026 by rpki-client