
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20075/rY7GmP7c0Tnkd8jjxW_L0BLPzGI.roa
File: rY7GmP7c0Tnkd8jjxW_L0BLPzGI.roa (raw, json)
Hash identifier: HyUIeMjrbDgtHQVUIaaxNBRhTtRnGlrOoQAeViuJ22Q=
Subject key identifier: AD:8E:C6:98:FE:DC:D1:39:E4:77:C8:E3:C5:6F:CB:D0:12:CF:CC:62
Certificate issuer: /CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C
Certificate serial: 55
Authority key identifier: B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/rY7GmP7c0Tnkd8jjxW_L0BLPzGI.roa
Signing time: Tue 31 Mar 2026 07:49:46 +0000
ROA not before: Tue 31 Mar 2026 07:49:46 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 131969
IP address blocks: 133.88.20.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85 (0x55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C
Validity
Not Before: Mar 31 07:49:46 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=AD8EC698FEDCD139E477C8E3C56FCBD012CFCC62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:21:d0:f6:78:84:19:b7:1b:bd:aa:14:b4:fa:
19:62:7d:87:2e:9f:bd:6a:cc:93:1f:d3:3d:e0:b6:
f7:5e:a1:6b:64:eb:d5:e9:7e:83:93:11:06:5f:62:
b8:26:47:66:d7:a3:d7:4e:d9:f3:5b:63:af:dd:44:
11:eb:34:04:4c:2b:4d:8e:f2:eb:a5:3e:e9:e2:4c:
9a:23:da:37:e6:6c:b1:74:0e:e6:37:c3:04:7e:0e:
38:aa:b5:f6:45:1f:37:7d:39:c4:9c:7e:e3:7c:40:
1c:fe:87:f1:8f:60:2b:a6:e7:9a:63:2e:90:b9:3c:
3b:fd:ab:c1:10:44:e2:28:a5:60:d7:e3:18:dc:db:
1c:96:7f:7b:2c:be:0c:f0:ab:e6:1d:8e:fc:9b:ad:
91:16:dd:00:b0:8d:6a:43:06:ee:0a:f3:b6:10:11:
59:ed:75:5d:a1:da:93:19:97:16:db:f5:54:f9:55:
cc:13:7e:17:4d:1f:39:f5:1e:02:d7:67:18:f3:65:
76:ac:2e:36:fc:7b:ae:ef:7f:f6:20:d6:da:96:7e:
c8:6c:02:17:1f:70:c6:3a:eb:36:1c:db:30:5f:f0:
7c:0e:72:01:ed:a4:ec:b2:30:b0:f5:0c:c3:1b:eb:
49:d8:17:38:8d:e5:73:78:99:9e:06:2f:67:c1:5e:
fb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8E:C6:98:FE:DC:D1:39:E4:77:C8:E3:C5:6F:CB:D0:12:CF:CC:62
X509v3 Authority Key Identifier:
keyid:B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/rY7GmP7c0Tnkd8jjxW_L0BLPzGI.roa
sbgp-ipAddrBlock: critical
IPv4:
133.88.20.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:3d:c8:d0:4d:64:d7:8b:9a:e7:a3:71:6d:c8:ae:98:7d:8e:
e9:d7:b4:af:73:17:2c:dc:b8:92:4c:9b:dc:1e:1c:49:2b:7e:
16:29:c7:39:0e:25:4e:4e:7a:f4:7b:bb:37:8a:18:d5:81:bd:
bf:69:f7:c2:d7:92:b1:1a:72:45:6d:fb:a1:a0:47:a2:c4:4d:
88:a4:64:d1:82:14:d7:4a:59:c1:2f:fd:91:31:1b:c2:f8:ce:
a1:c3:1f:88:cc:1d:ee:c1:19:ca:52:3d:4d:ef:b4:77:6d:ce:
54:ea:b7:f7:b8:e6:93:e5:a2:f9:91:3a:0e:19:48:79:6b:30:
19:d0:4c:6e:b4:85:15:ed:37:5a:c2:5a:a7:fa:7b:48:9e:a1:
8d:59:7e:82:99:58:44:62:86:70:7c:51:00:9a:96:e1:1b:de:
9b:32:17:1f:56:89:82:2f:21:b5:34:f4:59:d7:4a:fc:ee:73:
40:4c:c5:1b:8c:f7:58:8b:58:62:03:d0:ed:93:03:89:86:8f:
ba:d6:06:a3:86:71:54:0f:15:fc:9a:b9:56:84:f4:5c:2c:cd:
c9:8b:5f:75:9d:03:93:55:7f:57:56:47:65:22:a7:d3:42:d4:
dc:96:3b:f0:b2:10:fa:94:f1:ea:4f:f0:a7:e2:ca:2e:23:9d:
55:bd:aa:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:40:09 2026 by rpki-client