
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cGPWz2d8u4-oVr8RY1YFMoNftQM.roa
File: cGPWz2d8u4-oVr8RY1YFMoNftQM.roa (raw, json)
Hash identifier: UlJgMPrQuwmI6mLay4rKEjXFUgG9UBQGpvUR6cdZdfw=
Subject key identifier: 70:63:D6:CF:67:7C:BB:8F:A8:56:BF:11:63:56:05:32:83:5F:B5:03
Certificate issuer: /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial: 66
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cGPWz2d8u4-oVr8RY1YFMoNftQM.roa
Signing time: Tue 31 Mar 2026 08:36:45 +0000
ROA not before: Tue 31 Mar 2026 08:36:45 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 18071
IP address blocks: 133.183.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Validity
Not Before: Mar 31 08:36:45 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=7063D6CF677CBB8FA856BF1163560532835FB503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c0:33:74:93:fb:cf:c2:7c:56:bc:e1:c9:01:
e1:03:04:b2:07:3f:73:d9:7c:75:87:0f:4f:fa:a7:
93:24:7f:ec:ab:26:df:f3:80:6e:4e:55:2b:58:e4:
fb:9a:70:0f:94:b8:7f:df:b4:f4:92:a0:78:c4:d3:
78:61:d3:bf:37:a4:64:d0:e3:e0:92:0b:bb:bd:66:
d6:cc:dd:9c:d7:21:55:49:38:48:9d:5f:39:09:2d:
6b:e0:19:80:72:e6:9c:c9:22:46:ff:8e:f0:08:4c:
4f:48:db:31:c6:4f:51:51:8a:ba:46:54:d3:f2:b9:
1e:01:c6:1d:49:33:f0:2b:35:46:b0:72:c4:26:96:
af:a3:b0:a2:06:1c:a9:2f:68:bc:3c:92:7c:56:10:
d6:42:55:29:23:44:3e:bb:c2:bc:56:d3:31:03:3c:
55:4e:8b:10:ee:89:30:c7:a0:4b:e5:3c:8a:c9:cc:
da:7a:8d:87:af:1c:0e:ee:f3:ce:69:b0:8b:b2:ee:
da:2c:df:ee:3c:85:c4:1a:35:8a:e0:ce:35:6b:61:
0e:6c:9a:f0:bb:a6:01:90:d3:ff:19:21:8e:a7:71:
18:b3:f0:aa:ef:98:c7:8a:b9:a3:88:89:5a:c9:fa:
b2:33:71:f8:ee:2d:16:cf:8c:5a:d8:07:a0:b2:24:
f8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:63:D6:CF:67:7C:BB:8F:A8:56:BF:11:63:56:05:32:83:5F:B5:03
X509v3 Authority Key Identifier:
keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cGPWz2d8u4-oVr8RY1YFMoNftQM.roa
sbgp-ipAddrBlock: critical
IPv4:
133.183.192.0/18
Signature Algorithm: sha256WithRSAEncryption
8a:5b:b6:87:4a:2f:cd:cf:2d:64:59:1b:15:3b:7c:ca:2f:0a:
53:fe:e0:ce:59:f4:2b:4d:03:a7:a0:14:13:a8:2d:dc:14:a3:
d4:cf:32:d3:cc:4e:28:25:dd:d3:f3:07:9c:5d:6a:3b:f0:47:
2d:96:e5:15:3a:aa:8a:68:16:b4:ea:dd:be:52:bb:b8:01:7b:
30:ba:e0:0e:fa:de:f1:3f:0c:8c:08:0a:50:5d:a5:6a:39:2e:
e0:93:54:fc:61:19:95:36:e6:d7:14:13:0f:16:a0:6c:8a:12:
77:86:01:3b:73:a9:cc:52:d8:3f:47:ad:26:5c:11:f7:e6:f7:
f4:e7:89:fa:9f:53:20:1f:37:25:15:4d:ed:a7:08:a9:7c:12:
4b:30:05:53:04:9b:05:7c:fb:0f:eb:7e:5f:44:0b:06:e4:51:
e6:86:96:63:36:c7:aa:ca:bf:ae:4b:9f:fb:fb:c8:3b:62:b2:
9d:e5:46:00:ed:0d:9a:43:d3:95:d3:40:02:b6:2b:07:17:5c:
d5:9b:33:5d:2a:fe:d6:ab:b7:17:88:08:ed:15:a9:13:df:36:
9a:d3:9c:46:72:cf:5b:ec:5b:a2:4a:21:fd:9e:d0:10:a8:8c:
76:ad:98:87:7f:a3:c0:7d:e9:a4:b1:1a:8c:92:e8:29:ab:22:
ca:8b:4f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:03 2026 by rpki-client