
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20061/-ZEmPGe-iHFFf-XkF033T98LQoM.roa
File: -ZEmPGe-iHFFf-XkF033T98LQoM.roa (raw, json)
Hash identifier: QreQIR2cBUQuYxB4GN6SKxYfyhEWxVXSUpGBDydcEQc=
Subject key identifier: F9:91:26:3C:67:BE:88:71:45:7F:E5:E4:17:4D:F7:4F:DF:0B:42:83
Certificate issuer: /CN=72811A6F4B1F7935818F8C8794F150A772BDD7CB
Certificate serial: 4D
Authority key identifier: 72:81:1A:6F:4B:1F:79:35:81:8F:8C:87:94:F1:50:A7:72:BD:D7:CB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/coEab0sfeTWBj4yHlPFQp3K918s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20061/-ZEmPGe-iHFFf-XkF033T98LQoM.roa
Signing time: Tue 31 Mar 2026 07:52:49 +0000
ROA not before: Tue 31 Mar 2026 07:52:49 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 131161
IP address blocks: 43.222.0.0/16 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20061/coEab0sfeTWBj4yHlPFQp3K918s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20061/coEab0sfeTWBj4yHlPFQp3K918s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/coEab0sfeTWBj4yHlPFQp3K918s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77 (0x4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72811A6F4B1F7935818F8C8794F150A772BDD7CB
Validity
Not Before: Mar 31 07:52:49 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=F991263C67BE8871457FE5E4174DF74FDF0B4283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:64:67:29:4d:f2:98:9a:9d:e8:b7:9a:14:99:
4d:7f:95:f0:03:ae:86:5b:d3:95:d2:39:fb:11:59:
5e:ff:e8:a3:30:de:46:aa:47:31:0e:78:04:c5:39:
43:0a:91:15:c7:63:af:9d:49:e2:f2:dc:3d:46:94:
80:4a:59:d2:df:3c:b5:0f:71:67:1e:41:a7:b4:9a:
e1:fc:53:6b:ef:5f:b4:bb:c8:46:36:e2:30:73:4e:
92:c5:23:51:d6:0d:db:c5:9e:95:cf:b9:e4:36:f9:
fc:41:87:8e:28:b3:b2:ef:1f:68:9b:6a:e2:a2:c1:
21:01:14:e2:83:9a:84:1c:e2:f1:8e:4e:40:69:b5:
f3:b1:d9:72:ec:ed:89:62:74:d6:83:0d:54:b1:93:
d5:25:16:38:ca:20:8b:5a:96:f8:0c:de:fb:30:99:
59:c7:ae:9f:e6:45:70:18:60:44:b8:9f:e6:72:ea:
ec:19:8b:1c:0c:c1:74:3a:b3:2d:4c:6c:bc:c7:0f:
71:8f:6e:a3:91:0f:ed:51:a5:5e:54:53:12:ab:37:
0f:46:ca:f5:04:49:12:12:b5:af:e8:d4:0c:0a:e7:
16:e2:b2:05:d7:50:3d:fb:e6:07:dd:24:c2:72:74:
14:9a:7e:ab:6a:4f:0d:3a:a6:9c:24:fc:03:10:86:
7d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:91:26:3C:67:BE:88:71:45:7F:E5:E4:17:4D:F7:4F:DF:0B:42:83
X509v3 Authority Key Identifier:
keyid:72:81:1A:6F:4B:1F:79:35:81:8F:8C:87:94:F1:50:A7:72:BD:D7:CB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20061/coEab0sfeTWBj4yHlPFQp3K918s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/coEab0sfeTWBj4yHlPFQp3K918s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20061/-ZEmPGe-iHFFf-XkF033T98LQoM.roa
sbgp-ipAddrBlock: critical
IPv4:
43.222.0.0/16
Signature Algorithm: sha256WithRSAEncryption
11:6b:c1:f8:0f:4d:14:28:f4:79:86:a1:f4:99:95:df:35:88:
7f:d5:1e:5d:a6:f4:09:07:2b:44:df:e7:f9:4e:d2:0b:d2:86:
b5:18:b0:7a:b3:ed:e0:0c:d6:3b:6c:26:f3:fd:3d:21:20:9c:
ca:07:53:f8:de:e1:ec:32:e8:b0:ef:69:7f:77:7d:0a:a4:46:
71:a8:ab:1b:b3:8b:7f:bb:b0:22:e4:85:79:46:6e:60:d4:ca:
79:51:d3:1a:8a:8a:b1:56:a1:b9:e0:d7:c9:b4:ea:97:2b:bc:
75:12:dc:c7:49:fa:85:8c:ce:21:47:54:f3:f2:1d:84:99:fe:
54:c2:6b:ce:0a:7a:76:0e:23:30:43:40:3b:57:70:54:cd:33:
a5:35:38:f0:1f:a3:d7:20:fd:7c:03:6e:87:53:e2:4c:49:1a:
dd:43:9b:0c:7d:2a:8a:ed:7f:70:0a:fd:a1:65:84:c5:da:4c:
79:e2:4a:57:d8:3b:11:c5:a4:5f:9e:af:f2:e2:e3:75:18:90:
12:42:cf:e3:72:46:4c:43:8b:71:6e:77:cd:42:01:03:01:3f:
ff:22:72:76:d9:c2:e9:03:ad:56:36:48:db:48:5d:0f:7c:c5:
74:da:55:89:e4:c1:68:f5:f1:93:03:87:5e:73:10:4f:68:56:
4b:ea:76:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:49 2026 by rpki-client