
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/tM5gRxSxHpZBG4gdyb_maU0UaqU.roa
File: tM5gRxSxHpZBG4gdyb_maU0UaqU.roa (raw, json)
Hash identifier: FchWSgELlqI3a0WbeLMf7xxCm6nyl5qMx9rpUbrctaM=
Subject key identifier: B4:CE:60:47:14:B1:1E:96:41:1B:88:1D:C9:BF:E6:69:4D:14:6A:A5
Certificate issuer: /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial: AF
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/tM5gRxSxHpZBG4gdyb_maU0UaqU.roa
Signing time: Tue 31 Mar 2026 07:52:23 +0000
ROA not before: Tue 31 Mar 2026 07:52:23 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 24277
IP address blocks: 203.160.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175 (0xaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Validity
Not Before: Mar 31 07:52:23 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=B4CE604714B11E96411B881DC9BFE6694D146AA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f6:43:85:55:b2:5a:d8:00:a0:38:a3:b7:95:
a0:5a:c1:92:6e:dc:d4:cb:1a:b2:35:33:7d:c1:da:
f3:2e:95:e6:5b:73:8a:07:7b:9d:76:e6:55:cb:0f:
b4:76:d2:6d:82:40:7d:a4:e1:fb:cc:92:2b:46:0a:
67:b3:02:75:27:f0:24:bb:21:b8:e8:6b:3d:72:6b:
1e:b1:58:9f:08:8e:5b:cd:de:c2:e2:98:2f:05:4d:
bd:5b:3d:6d:9b:ca:b8:60:7f:4e:64:4b:d7:89:95:
78:57:1a:56:d1:d5:40:00:81:7b:4e:2e:c6:3e:01:
f5:e1:0e:b3:63:fe:4d:7c:64:fb:71:8f:53:8b:63:
e0:0c:a5:eb:30:3e:e5:82:df:b8:b4:b8:9b:42:d8:
de:be:c2:24:d4:fb:7c:6f:06:4c:47:40:ce:5d:40:
f0:7d:3f:89:c4:8b:d5:a4:64:d2:e6:7e:c4:72:96:
e9:c3:91:a1:a8:7f:2c:e3:c9:d3:13:ee:e3:1b:37:
6b:dd:09:9a:41:27:c3:a3:57:86:7c:55:56:1b:5e:
81:8f:0c:16:fc:8d:50:f8:26:6f:a2:20:8b:5c:bc:
5b:c6:d5:e2:09:a8:dc:90:68:3c:0a:ad:38:ac:eb:
de:78:6f:70:cc:e2:ad:65:b6:20:1a:1e:41:4f:94:
f6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CE:60:47:14:B1:1E:96:41:1B:88:1D:C9:BF:E6:69:4D:14:6A:A5
X509v3 Authority Key Identifier:
keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/tM5gRxSxHpZBG4gdyb_maU0UaqU.roa
sbgp-ipAddrBlock: critical
IPv4:
203.160.16.0/20
Signature Algorithm: sha256WithRSAEncryption
61:d8:b8:39:a9:b7:b6:99:fb:77:c4:9f:48:9b:7e:1f:fa:14:
35:47:ac:0c:dc:75:3f:1f:6f:a6:8c:fc:11:1f:a0:e0:20:53:
4c:3f:65:ec:13:65:bc:1f:ee:85:b9:60:61:c1:3a:84:ed:a4:
a7:f6:42:7e:2c:a1:56:b4:b0:3e:07:73:a0:fb:b7:e6:1a:77:
2b:08:e3:1c:f6:65:c4:7c:a0:7f:6a:9d:27:b5:ca:3c:ee:77:
cc:63:29:a7:4e:62:18:b9:5e:58:66:bf:eb:f0:72:21:65:5a:
94:17:26:66:33:a0:35:ec:d5:49:60:2e:06:19:a7:6c:5b:7c:
fb:2f:e6:73:6b:58:7a:c4:0b:7d:1f:d9:e2:3d:64:75:9b:21:
fe:64:72:62:a4:93:9f:6f:40:3c:d7:8d:ef:11:91:9a:a2:3d:
7d:56:07:bc:b0:ce:2c:ea:d2:33:7c:c9:47:fb:28:c5:c0:ed:
fd:97:56:e2:c1:7d:b5:9d:ad:c8:b3:5a:a3:33:6c:1f:ac:3d:
16:f4:eb:2b:de:23:7a:62:4e:80:c0:44:9c:3a:6d:36:07:71:
53:d3:14:73:08:51:e5:54:38:61:3a:57:c0:81:6f:64:a0:a9:
1c:55:ff:ac:91:b9:72:e1:18:1f:54:df:23:2c:3f:b1:01:3b:
93:26:94:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:29:33 2026 by rpki-client