
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20075/8XBwo2cZp9iSsn85XT8Rc_vg01o.roa
File: 8XBwo2cZp9iSsn85XT8Rc_vg01o.roa (raw, json)
Hash identifier: ErXLsDpV5VlLGMH8HTowknyZpHYtxlWzhW38v6OqMgc=
Subject key identifier: F1:70:70:A3:67:19:A7:D8:92:B2:7F:39:5D:3F:11:73:FB:E0:D3:5A
Certificate issuer: /CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C
Certificate serial: 58
Authority key identifier: B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/8XBwo2cZp9iSsn85XT8Rc_vg01o.roa
Signing time: Tue 31 Mar 2026 07:49:48 +0000
ROA not before: Tue 31 Mar 2026 07:49:48 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 131951
IP address blocks: 133.88.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C
Validity
Not Before: Mar 31 07:49:48 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=F17070A36719A7D892B27F395D3F1173FBE0D35A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b3:62:a8:cd:fd:50:19:45:2e:46:07:32:12:
d6:7d:89:9e:53:79:0d:4a:db:03:86:5f:9c:7b:63:
49:73:ba:e2:c0:35:01:f6:5b:05:3a:bd:22:b9:c9:
a1:55:73:36:30:24:c0:7b:3a:86:fe:ec:62:bc:32:
02:3a:53:95:9e:52:2f:29:87:d6:20:56:c7:08:1d:
db:af:47:d9:5b:26:df:85:92:46:d7:74:3b:2c:4d:
c9:72:3e:0d:9f:3d:67:f3:a1:c7:36:ac:6b:5c:f5:
76:22:77:9a:a4:35:81:8d:61:bc:24:93:3e:8f:d4:
ec:41:03:04:b8:b9:ae:2c:38:c0:72:c1:4d:a9:6b:
1c:87:58:f9:a0:3e:19:b0:82:f2:a4:1c:4c:d3:a9:
34:53:f9:d7:b0:d5:ba:aa:57:95:4b:e6:e0:20:95:
aa:4e:f1:2c:d4:5c:7a:db:d2:e6:0a:ca:cb:c5:dc:
ef:45:0b:aa:3c:96:e9:06:d2:33:ee:4d:e1:19:d7:
3c:06:a4:24:10:07:b6:8c:14:1d:1c:a2:89:39:ab:
ed:84:f9:5e:0b:93:a8:b3:f1:37:ec:41:5d:d5:f2:
44:7e:d9:7a:8e:44:ad:c7:1a:2d:3c:d1:58:b1:a3:
21:ea:e1:a8:86:5c:92:aa:87:f9:73:ad:57:da:53:
c9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:70:70:A3:67:19:A7:D8:92:B2:7F:39:5D:3F:11:73:FB:E0:D3:5A
X509v3 Authority Key Identifier:
keyid:B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/8XBwo2cZp9iSsn85XT8Rc_vg01o.roa
sbgp-ipAddrBlock: critical
IPv4:
133.88.31.0/24
Signature Algorithm: sha256WithRSAEncryption
71:b2:1d:b7:68:c4:2a:35:db:df:4b:97:28:a5:88:18:b7:8c:
d8:63:eb:65:fb:09:ee:c6:cf:fd:76:9c:e9:a2:05:74:96:22:
ec:5d:0b:1a:6a:7b:74:fb:15:cf:83:83:72:67:7a:f7:9b:e3:
21:73:75:37:68:5d:53:fa:06:29:f8:88:47:c3:0f:2d:17:43:
72:c3:8b:3f:b7:c9:8f:24:3f:ba:e9:22:34:3a:e7:50:d9:64:
31:ca:a3:17:ba:ae:5d:79:35:5e:50:70:78:e8:59:0a:b8:6d:
f4:b2:c0:8d:03:cc:0c:99:d4:80:5e:61:1c:12:2b:71:ff:c5:
e6:ee:ca:22:8d:76:1c:6b:9c:4f:77:c3:5e:28:3e:19:36:65:
63:88:51:b1:d2:ca:f9:0e:46:80:c5:3b:a7:27:f5:4f:ef:0b:
42:89:51:83:2e:bd:4a:5f:8c:40:2f:f9:3a:df:30:e1:06:79:
a9:43:35:0b:33:8e:85:f5:fc:4c:aa:42:bc:b0:d2:f2:54:6e:
81:c4:cf:d6:2f:dc:4f:06:c4:ba:d4:0f:28:09:71:c2:33:50:
06:18:3b:f6:db:59:15:97:37:a3:b9:0b:a3:7e:ee:a4:bf:da:
3f:09:f4:92:16:f2:8a:17:09:02:f7:11:e7:e7:6a:0a:74:22:
1f:9c:ae:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:46 2026 by rpki-client