
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20034/J20Tz2ja0u_EvchPMPho8NsVDU4.roa
File: J20Tz2ja0u_EvchPMPho8NsVDU4.roa (raw, json)
Hash identifier: BjI5vgRWiPepPiyRC6ZASTXNnga+GGcSCYN5w4oJ4kE=
Subject key identifier: 27:6D:13:CF:68:DA:D2:EF:C4:BD:C8:4F:30:F8:68:F0:DB:15:0D:4E
Certificate issuer: /CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
Certificate serial: 60
Authority key identifier: 8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/J20Tz2ja0u_EvchPMPho8NsVDU4.roa
Signing time: Tue 31 Mar 2026 08:31:08 +0000
ROA not before: Tue 31 Mar 2026 08:31:08 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 131923
IP address blocks: 219.100.156.0/22 maxlen: 25
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96 (0x60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
Validity
Not Before: Mar 31 08:31:08 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=276D13CF68DAD2EFC4BDC84F30F868F0DB150D4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a7:68:32:4a:8c:5b:e1:88:0f:e1:51:3b:03:
87:86:3a:9f:27:3b:03:53:5f:9b:20:f7:bd:fe:40:
a0:4d:34:f9:42:5c:28:6a:18:b3:a5:dd:10:a9:0b:
2b:e1:f5:3d:b3:4a:ea:3b:e8:7f:43:d6:20:7f:3a:
c7:03:72:03:c2:dd:70:65:a0:f0:a7:7e:7b:28:fd:
6d:c9:0a:ba:f9:b4:66:36:2b:2e:43:60:e7:32:52:
df:7c:3b:b1:5a:c6:6a:2b:cf:6f:da:a1:69:cf:16:
fc:a7:31:68:63:5c:8c:ed:e4:45:f6:c8:da:01:8f:
c2:24:22:cc:db:e3:f2:00:9c:45:01:c0:b9:69:62:
dd:1f:3c:db:28:ad:82:f5:99:0c:eb:06:3f:30:2d:
85:d3:a4:be:a6:b9:4d:2e:e5:de:c4:7c:f7:81:72:
41:85:c2:0f:fd:ee:8d:0b:bc:31:4f:cd:a8:ad:da:
f5:f3:30:99:28:bb:aa:92:9b:c5:5d:69:65:f3:20:
25:ff:9e:2b:6c:06:e8:fe:04:56:7e:e4:3d:5a:b9:
af:ae:73:b8:a3:06:34:c9:4f:91:c7:d2:f4:e3:ae:
c0:01:2c:d0:50:86:8e:5b:2f:a9:aa:09:6a:6e:ee:
b0:6b:81:25:ff:e9:4a:ba:ee:74:73:a4:3e:42:a1:
5c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6D:13:CF:68:DA:D2:EF:C4:BD:C8:4F:30:F8:68:F0:DB:15:0D:4E
X509v3 Authority Key Identifier:
keyid:8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/J20Tz2ja0u_EvchPMPho8NsVDU4.roa
sbgp-ipAddrBlock: critical
IPv4:
219.100.156.0/22
Signature Algorithm: sha256WithRSAEncryption
52:75:b4:53:cb:ba:8d:91:21:ea:49:4b:f0:ab:60:c8:c1:5c:
c4:6b:0e:df:fe:04:35:d0:ad:91:d0:03:db:c6:c4:be:f3:a8:
76:cc:04:18:07:c9:1f:fc:ae:83:21:4d:e9:55:a1:a7:9b:e7:
8d:06:92:b6:df:4f:2f:26:b1:2d:e9:7d:70:fa:9b:b2:28:ab:
8d:59:8e:79:3a:9c:74:c5:01:16:78:d4:0f:a1:20:c3:0b:3c:
f2:79:d3:4c:2b:8b:60:67:0e:50:dd:d9:3b:a5:fd:cf:6e:54:
d7:8b:c1:03:fe:7e:6b:13:ba:47:fd:7d:75:2a:a8:7c:e6:ec:
84:52:8d:a6:07:59:d0:3e:74:c8:db:bb:b1:c9:8f:4e:d9:e9:
e4:93:6f:10:d1:4b:cc:86:46:30:54:c3:c8:31:0d:86:44:77:
af:b5:69:e4:52:41:7b:0a:4c:e8:d1:0b:a8:e1:ac:39:98:be:
1d:b5:4d:18:52:6b:b1:70:93:66:0d:44:3f:c0:a3:0e:d1:07:
44:78:95:65:b2:39:bf:6e:12:a3:51:48:08:79:79:60:ea:5a:
57:1a:c0:e4:d8:ab:9b:10:b1:f8:16:ac:93:f3:db:1e:77:fc:
29:f3:6f:b2:e3:91:fe:77:77:8c:c3:9a:5a:99:96:dc:6c:cd:
56:f1:28:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:20 2026 by rpki-client