
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20075/3zbBvruxWE88FJZUOzqLizyawXg.roa
File: 3zbBvruxWE88FJZUOzqLizyawXg.roa (raw, json)
Hash identifier: 90RJ/yzgb/DFkYNDi7hyu295NbOKjWXpsj5V7VxBh2c=
Subject key identifier: DF:36:C1:BE:BB:B1:58:4F:3C:14:96:54:3B:3A:8B:8B:3C:9A:C1:78
Certificate issuer: /CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C
Certificate serial: 50
Authority key identifier: B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/3zbBvruxWE88FJZUOzqLizyawXg.roa
Signing time: Tue 31 Mar 2026 07:49:44 +0000
ROA not before: Tue 31 Mar 2026 07:49:44 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 18068
IP address blocks: 133.88.0.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80 (0x50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C
Validity
Not Before: Mar 31 07:49:44 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=DF36C1BEBBB1584F3C1496543B3A8B8B3C9AC178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1b:d0:34:b5:12:50:63:e5:a7:dc:42:0c:25:
74:ac:a9:30:41:00:c4:23:2f:78:a8:10:d5:a5:d3:
f0:6d:17:35:42:db:1e:cd:0f:8a:da:97:81:59:d7:
8a:dc:7e:b7:8d:ed:b6:f2:da:ab:5a:7e:64:b4:e6:
be:1c:74:0b:88:2d:1c:71:04:20:20:01:8f:0d:34:
73:fc:7c:71:3e:75:93:7f:82:a3:d5:03:62:c5:5d:
ba:30:6b:10:21:60:71:ce:34:63:c8:1d:c0:af:4c:
af:e7:2a:1f:8e:75:cf:8c:e3:69:0f:e1:e2:93:d1:
7b:4b:4b:f3:ed:1d:2d:70:89:66:1e:21:a5:a0:45:
32:a1:ad:e1:00:28:ff:4e:c0:61:e6:84:a2:10:09:
dd:a6:3f:e0:b2:eb:28:17:8c:78:8a:d6:f3:e1:ca:
d4:78:ee:1b:92:92:e9:c7:a3:df:8a:15:20:ad:af:
d8:a1:b9:23:ab:48:ea:66:3f:ea:58:34:44:3c:60:
50:ba:0d:2e:e5:17:2b:aa:44:0a:c5:97:7e:54:9c:
66:5b:8c:c9:d7:80:d2:64:9d:7c:fc:9a:95:ce:12:
da:57:48:5f:de:0c:c9:3a:cc:29:6f:ee:50:ce:99:
a6:36:9f:5b:b9:83:df:a9:11:44:06:7a:eb:41:27:
dd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:36:C1:BE:BB:B1:58:4F:3C:14:96:54:3B:3A:8B:8B:3C:9A:C1:78
X509v3 Authority Key Identifier:
keyid:B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/3zbBvruxWE88FJZUOzqLizyawXg.roa
sbgp-ipAddrBlock: critical
IPv4:
133.88.0.0/22
Signature Algorithm: sha256WithRSAEncryption
93:ca:e4:71:68:cf:8a:c3:89:44:38:ad:c1:9f:71:81:82:c0:
ab:37:af:54:0e:70:c7:ff:d9:d5:7c:21:62:1f:fc:83:da:88:
bb:bc:cf:43:da:8c:b8:e5:36:43:33:48:77:71:35:70:90:8b:
b3:22:8b:ad:67:0a:2c:6b:f9:0c:fb:d1:6a:48:27:56:13:5b:
62:fc:63:e1:dc:1e:0d:19:90:48:93:5f:1d:69:38:8b:d8:00:
7c:cd:bb:3e:0b:c4:ad:77:40:c6:f8:22:52:b1:13:59:00:a7:
d9:dd:44:0c:6b:2c:32:24:e1:75:2d:8c:2b:ca:ef:37:c2:3f:
75:e3:0a:ff:2f:01:78:44:d1:18:ce:77:c9:a9:67:d5:ea:74:
63:3c:b8:bc:65:cd:62:3a:34:30:57:2b:25:00:24:84:b5:31:
e6:20:b4:b0:10:e4:71:56:b8:b9:81:b9:5c:b7:e5:2d:43:d5:
c1:79:ab:54:7b:54:37:e0:f8:41:bf:a9:59:7b:51:1c:1a:92:
96:04:3b:df:9d:0d:ca:85:66:4e:cb:d3:ee:7c:f3:a1:78:8a:
ed:25:63:c0:80:a1:4b:68:6e:b6:40:11:24:31:5d:66:52:7c:
a0:da:a6:2d:ce:27:c8:6f:98:f8:61:89:b5:bb:bc:9b:9c:f8:
67:7b:32:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:41:51 2026 by rpki-client