
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20062/oTOma-AZsSFyw9Edv7O2I4yaMS0.roa
File: oTOma-AZsSFyw9Edv7O2I4yaMS0.roa (raw, json)
Hash identifier: Gvu3Y5WGaD2nDi7zzg/8nCStHoIr0RS5cFv5qgggyes=
Subject key identifier: A1:33:A6:6B:E0:19:B1:21:72:C3:D1:1D:BF:B3:B6:23:8C:9A:31:2D
Certificate issuer: /CN=938067C25BCA7D1385BD36C482858F830B5A6E3A
Certificate serial: 4E
Authority key identifier: 93:80:67:C2:5B:CA:7D:13:85:BD:36:C4:82:85:8F:83:0B:5A:6E:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k4BnwlvKfROFvTbEgoWPgwtabjo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/oTOma-AZsSFyw9Edv7O2I4yaMS0.roa
Signing time: Tue 31 Mar 2026 08:15:04 +0000
ROA not before: Tue 31 Mar 2026 08:15:04 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 131929
IP address blocks: 103.108.232.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/k4BnwlvKfROFvTbEgoWPgwtabjo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/k4BnwlvKfROFvTbEgoWPgwtabjo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k4BnwlvKfROFvTbEgoWPgwtabjo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938067C25BCA7D1385BD36C482858F830B5A6E3A
Validity
Not Before: Mar 31 08:15:04 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=A133A66BE019B12172C3D11DBFB3B6238C9A312D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:57:d2:d3:94:14:68:a8:3c:67:0d:f6:74:13:
2f:fc:c6:d5:56:09:6d:bd:46:8c:ba:4b:45:ef:b7:
00:0b:cf:4e:a2:2b:e3:9f:9f:1e:22:83:3e:e5:89:
93:a5:9c:9b:cc:6d:ad:92:14:ed:6c:11:08:43:f2:
5a:1c:08:b5:fe:15:ba:ae:1a:ec:e3:66:7a:f7:43:
58:46:b8:2e:58:65:c9:ee:f2:0a:3d:1e:4c:d6:8b:
3b:7d:dc:43:8c:71:51:a4:5a:b0:2c:11:3e:cb:96:
63:43:6b:18:be:ce:e6:83:49:84:05:4c:19:b7:fa:
bc:4a:7d:96:4d:c0:88:96:6f:58:60:91:e5:64:a2:
f7:e5:02:d0:08:d9:43:00:6a:0f:41:0c:71:86:38:
d2:87:ae:f6:11:07:28:95:31:7e:db:ba:90:15:84:
03:0b:0b:80:12:2e:76:f0:80:8c:d3:5b:b1:dc:de:
63:49:d1:d0:e3:28:de:20:39:c6:92:0c:41:30:13:
30:03:cc:a3:49:84:e0:96:b4:b3:cf:98:b5:03:d9:
5f:99:4e:25:ad:76:bd:d9:47:f9:ab:45:08:8c:0a:
ad:1e:74:29:50:5d:85:58:14:50:dc:92:80:31:7b:
1b:67:c2:4e:81:ef:dd:ed:c8:e2:95:5f:49:25:d9:
59:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:33:A6:6B:E0:19:B1:21:72:C3:D1:1D:BF:B3:B6:23:8C:9A:31:2D
X509v3 Authority Key Identifier:
keyid:93:80:67:C2:5B:CA:7D:13:85:BD:36:C4:82:85:8F:83:0B:5A:6E:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/k4BnwlvKfROFvTbEgoWPgwtabjo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k4BnwlvKfROFvTbEgoWPgwtabjo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/oTOma-AZsSFyw9Edv7O2I4yaMS0.roa
sbgp-ipAddrBlock: critical
IPv4:
103.108.232.0/22
Signature Algorithm: sha256WithRSAEncryption
18:d6:c1:08:06:e6:8c:e2:18:19:92:41:5b:9a:76:65:6a:7d:
b1:17:4e:e8:3d:33:b2:61:80:00:71:ca:25:a9:08:23:74:38:
86:b0:41:d9:a4:46:5a:57:e1:8e:70:08:46:ef:8b:5e:d6:2e:
49:5d:1f:ad:87:19:e3:7b:e5:84:96:39:74:94:c6:ce:27:c1:
7a:ac:8e:6b:70:ca:ea:25:29:c8:fe:66:77:a9:de:b8:21:9f:
14:a9:20:f3:b6:df:e5:b8:c8:f5:b2:88:80:b9:df:bd:f2:fc:
65:33:b7:f9:db:bb:7d:4d:95:5f:dd:db:80:28:79:05:58:27:
c9:d8:0b:82:93:5f:1e:71:06:e5:cc:3d:73:cc:aa:7e:22:41:
65:53:1d:36:4c:da:38:04:d8:65:b9:d0:f5:3e:bc:ea:33:5f:
bc:4d:9b:20:f1:2d:ea:39:54:0e:00:0f:5f:00:dc:89:dd:e4:
d0:f0:13:3e:1e:77:97:a5:1f:a1:5c:4a:f5:38:1a:f2:4a:4c:
97:de:e9:a1:82:6e:40:2f:bb:d6:41:9c:93:e5:ef:83:a9:57:
d0:85:33:83:37:73:d8:8d:1b:c7:b1:c0:3e:7a:82:1c:5a:97:
30:33:5b:38:92:0a:ad:07:f1:fe:9b:54:81:23:60:4f:cd:c2:
96:b4:a4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 20:04:28 2026 by rpki-client