
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20040/vq2viMu_XtDzmBi_R3qy9IDNItE.roa
File: vq2viMu_XtDzmBi_R3qy9IDNItE.roa (raw, json)
Hash identifier: 2GTa6/0yxHrg9AcbA+kFyrBvP2B4JkfbYoAC4flSszM=
Subject key identifier: BE:AD:AF:88:CB:BF:5E:D0:F3:98:18:BF:47:7A:B2:F4:80:CD:22:D1
Certificate issuer: /CN=5ECB165AAD7C3C143CC2F84E4775E59D9D7D94F9
Certificate serial: 3F
Authority key identifier: 5E:CB:16:5A:AD:7C:3C:14:3C:C2:F8:4E:47:75:E5:9D:9D:7D:94:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XssWWq18PBQ8wvhOR3XlnZ19lPk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/vq2viMu_XtDzmBi_R3qy9IDNItE.roa
Signing time: Tue 31 Mar 2026 08:18:42 +0000
ROA not before: Tue 31 Mar 2026 08:18:42 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 7514
IP address blocks: 103.96.112.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/XssWWq18PBQ8wvhOR3XlnZ19lPk.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/XssWWq18PBQ8wvhOR3XlnZ19lPk.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XssWWq18PBQ8wvhOR3XlnZ19lPk.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63 (0x3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ECB165AAD7C3C143CC2F84E4775E59D9D7D94F9
Validity
Not Before: Mar 31 08:18:42 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=BEADAF88CBBF5ED0F39818BF477AB2F480CD22D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:67:2e:a1:df:fb:27:4d:00:21:d3:d7:cb:b5:
da:28:cf:12:85:80:4b:b4:db:89:5a:c7:53:da:23:
fa:4e:24:bd:e9:d3:1b:de:20:dc:15:6f:9e:06:8b:
14:da:17:cf:18:06:4b:20:de:b0:82:f0:92:b5:45:
d7:91:12:0a:7f:43:46:1b:95:ef:77:3b:d0:44:1d:
0e:1e:e9:20:c9:e7:ac:d5:49:c5:6d:35:fa:10:c1:
74:03:4a:c2:5b:79:3a:8d:c3:1e:74:96:2c:6e:13:
dd:a7:09:e9:b2:83:e5:51:1e:fa:e9:56:4c:c0:6c:
08:d8:b5:6f:b7:54:77:e3:f2:8c:6c:95:44:ef:2a:
a7:cf:38:fe:8c:06:41:9b:20:39:e8:da:d6:6a:a0:
69:50:59:80:ae:e5:ca:1b:4d:b1:e1:7e:22:52:31:
29:4b:ac:4a:b9:82:52:e8:79:eb:70:0a:d4:ba:7c:
ef:c6:39:bb:26:5f:3f:62:8a:eb:55:4d:3c:0f:65:
dd:18:81:f4:d0:da:56:94:51:73:7c:c3:2a:b1:8d:
93:7f:9e:c0:60:fd:70:ed:8b:67:49:c5:b1:75:1b:
a5:e0:8b:2a:7e:a2:f6:62:31:19:82:df:b2:82:a8:
11:1c:96:a7:59:3c:63:ae:61:a2:40:da:2b:7d:ca:
47:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AD:AF:88:CB:BF:5E:D0:F3:98:18:BF:47:7A:B2:F4:80:CD:22:D1
X509v3 Authority Key Identifier:
keyid:5E:CB:16:5A:AD:7C:3C:14:3C:C2:F8:4E:47:75:E5:9D:9D:7D:94:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/XssWWq18PBQ8wvhOR3XlnZ19lPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XssWWq18PBQ8wvhOR3XlnZ19lPk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/vq2viMu_XtDzmBi_R3qy9IDNItE.roa
sbgp-ipAddrBlock: critical
IPv4:
103.96.112.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:6c:70:e9:4d:c7:e4:d3:0b:41:9a:4c:65:d1:f0:c6:a0:de:
b4:72:f0:a9:78:23:68:35:25:36:cc:9e:2c:49:fa:93:c2:61:
f2:44:d1:0d:45:f0:0a:2c:ca:0a:5b:f1:5c:dc:73:1d:a2:3f:
86:83:bb:4f:89:b5:c7:d5:cb:50:4c:29:72:63:81:55:2f:e5:
8b:1f:88:5c:8a:94:59:7b:2c:69:94:cf:a1:de:42:be:27:92:
dd:1c:d7:00:20:f3:a8:a7:70:87:1e:cf:ac:d8:f0:5c:b7:45:
2a:4d:f5:1b:84:6e:cc:64:38:13:88:68:2f:42:ac:3a:a2:e9:
4c:e8:f0:a1:d0:64:5b:ab:a3:f6:b7:2b:a2:fc:41:7a:a8:3b:
72:7e:22:c0:03:90:31:c5:7f:1c:fa:e4:0f:2a:11:15:fd:f0:
96:5c:04:44:16:13:ec:f9:96:e6:b6:92:eb:6c:78:f2:74:c7:
5b:9f:8b:b9:db:29:0c:29:59:2a:99:c9:88:e5:03:25:e4:00:
1f:f9:b3:83:67:86:da:63:9c:08:b6:5f:b7:ff:37:6f:e4:34:
d7:86:8c:b4:fa:78:fd:97:55:f3:ba:d3:fc:54:e9:9a:3e:ee:
97:77:1c:45:7b:57:bb:b1:60:b7:62:7b:8f:72:85:f8:2d:96:
20:95:dd:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:23 2026 by rpki-client