
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20028/RbpZYJM8DC7AtCzNNOUk-UxHWz4.roa
File: RbpZYJM8DC7AtCzNNOUk-UxHWz4.roa (raw, json)
Hash identifier: OX2jF9MN1wOWhbV7qw2XgXuDAiAbXkaZ2qjcZwvJ6G0=
Subject key identifier: 45:BA:59:60:93:3C:0C:2E:C0:B4:2C:CD:34:E5:24:F9:4C:47:5B:3E
Certificate issuer: /CN=D76CABBF06D33FBC002EE07B000140BC3B612B16
Certificate serial: 19
Authority key identifier: D7:6C:AB:BF:06:D3:3F:BC:00:2E:E0:7B:00:01:40:BC:3B:61:2B:16
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12yrvwbTP7wALuB7AAFAvDthKxY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20028/RbpZYJM8DC7AtCzNNOUk-UxHWz4.roa
Signing time: Tue 31 Mar 2026 08:46:04 +0000
ROA not before: Tue 31 Mar 2026 08:46:04 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 131915
IP address blocks: 133.186.16.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20028/12yrvwbTP7wALuB7AAFAvDthKxY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20028/12yrvwbTP7wALuB7AAFAvDthKxY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12yrvwbTP7wALuB7AAFAvDthKxY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D76CABBF06D33FBC002EE07B000140BC3B612B16
Validity
Not Before: Mar 31 08:46:04 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=45BA5960933C0C2EC0B42CCD34E524F94C475B3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a0:ef:83:0c:16:13:56:7f:20:13:3d:0c:85:
42:07:78:ce:a5:f2:33:f0:9a:a5:40:65:f5:22:76:
95:71:ee:55:c1:23:f1:3c:bb:7d:de:11:86:f7:18:
32:04:38:84:3d:a1:ca:15:bb:91:a7:a8:e4:a1:4b:
85:ec:ea:f2:57:12:13:eb:7c:22:79:ee:41:dd:9b:
06:8e:65:a0:ea:21:69:66:99:61:15:77:11:7e:a3:
6c:bd:76:84:9f:91:13:c7:02:f6:24:e2:61:fc:25:
cf:d0:bf:12:cd:8a:54:9c:15:31:be:e7:3f:18:24:
ec:42:f3:8f:16:b3:67:4e:92:44:d4:42:a1:d7:53:
0d:78:f5:64:2d:b1:fd:bb:c4:a7:00:bc:3b:f0:e0:
97:03:db:c1:c5:91:3b:c9:21:3b:5a:62:5b:84:69:
65:37:3a:7b:a9:6a:38:ee:10:bb:9b:5b:76:34:ab:
9c:84:56:b4:6e:29:8e:db:dd:ef:64:c5:c1:c2:c2:
20:91:bb:1f:f0:e6:bd:5d:59:a8:ae:26:77:c8:cc:
a1:e2:2d:92:32:ca:38:60:e0:ae:32:65:7c:73:16:
0a:e5:57:db:01:14:53:b2:8c:3b:9e:02:9d:8f:82:
d4:b3:94:d3:8d:20:71:cf:9f:c0:d0:c2:0f:23:9c:
98:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:BA:59:60:93:3C:0C:2E:C0:B4:2C:CD:34:E5:24:F9:4C:47:5B:3E
X509v3 Authority Key Identifier:
keyid:D7:6C:AB:BF:06:D3:3F:BC:00:2E:E0:7B:00:01:40:BC:3B:61:2B:16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20028/12yrvwbTP7wALuB7AAFAvDthKxY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12yrvwbTP7wALuB7AAFAvDthKxY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20028/RbpZYJM8DC7AtCzNNOUk-UxHWz4.roa
sbgp-ipAddrBlock: critical
IPv4:
133.186.16.0/20
Signature Algorithm: sha256WithRSAEncryption
cb:02:d9:4a:79:bb:84:85:1e:63:51:ad:8c:63:4e:dd:b9:81:
80:fc:d5:9e:eb:4a:2d:96:13:32:35:07:84:52:e9:b6:21:1e:
89:56:be:b2:11:ca:5a:67:35:4f:c6:90:50:8d:cf:f0:c4:c1:
13:87:e5:93:f9:0b:55:34:d3:a3:c7:4b:09:53:18:d8:72:e2:
05:7a:40:0b:64:9c:15:39:12:d8:dd:51:0b:fc:7f:73:44:85:
35:d8:59:82:fa:7a:d0:f6:03:db:af:70:80:96:25:9d:53:18:
b1:be:23:19:d0:7e:2d:0b:63:c4:fb:8b:f2:ab:02:b1:1a:16:
c5:41:39:d8:17:5f:18:4d:25:37:7d:e7:d1:8a:24:12:08:f9:
48:12:71:07:e8:27:fa:78:b6:fd:9d:f4:6b:c3:94:0c:48:e1:
cc:d6:d2:2b:34:de:31:9a:f7:cf:11:10:3a:10:0a:0a:a5:30:
e7:b6:59:5c:2d:44:d0:52:07:31:ad:1a:f4:01:c9:60:9b:ab:
1a:eb:6f:9f:46:14:db:e4:fa:6e:d3:09:8a:0a:ec:cb:92:87:
25:95:53:3d:9a:cb:0c:ff:69:6f:a3:31:c2:fa:61:40:93:f2:
c7:a6:3b:2a:f4:da:b7:a9:fc:ab:08:61:0a:ee:f9:13:d8:db:
d4:d1:0f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:37 2026 by rpki-client