
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20099/mM6zcI6bN3dvuZ6hXfCMvXl7RtQ.roa
File: mM6zcI6bN3dvuZ6hXfCMvXl7RtQ.roa (raw, json)
Hash identifier: +DmLHxQhr/5LGBR2x3dcMQrFtCF2kQaoeGOkfjugwfY=
Subject key identifier: 98:CE:B3:70:8E:9B:37:77:6F:B9:9E:A1:5D:F0:8C:BD:79:7B:46:D4
Certificate issuer: /CN=2327CD1B4F1F8B8956861597E494314A68561591
Certificate serial: 4A
Authority key identifier: 23:27:CD:1B:4F:1F:8B:89:56:86:15:97:E4:94:31:4A:68:56:15:91
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IyfNG08fi4lWhhWX5JQxSmhWFZE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20099/mM6zcI6bN3dvuZ6hXfCMvXl7RtQ.roa
Signing time: Tue 31 Mar 2026 08:07:24 +0000
ROA not before: Tue 31 Mar 2026 08:07:24 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 131966
IP address blocks: 202.226.60.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20099/IyfNG08fi4lWhhWX5JQxSmhWFZE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20099/IyfNG08fi4lWhhWX5JQxSmhWFZE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IyfNG08fi4lWhhWX5JQxSmhWFZE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74 (0x4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2327CD1B4F1F8B8956861597E494314A68561591
Validity
Not Before: Mar 31 08:07:24 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=98CEB3708E9B37776FB99EA15DF08CBD797B46D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:70:80:d3:e7:6a:d1:d1:e5:dc:aa:d1:72:47:
d7:bc:33:04:22:f9:6d:28:c6:ee:85:47:80:a5:99:
5c:67:de:7b:57:33:79:cb:ae:65:0f:da:01:dd:90:
75:17:eb:5a:db:7e:4d:80:63:0f:3e:44:08:96:76:
43:be:9c:4a:e3:50:0b:20:bf:49:12:04:99:19:38:
b0:24:3c:c5:36:a1:25:7a:7b:18:1b:b6:84:23:0e:
3e:2d:d3:bd:a9:9f:14:41:20:98:1e:3b:92:f1:d0:
82:cb:8a:23:c2:8b:f1:99:c4:a9:51:9a:31:5c:15:
cc:62:79:47:69:8a:d2:a2:1a:d7:99:81:2c:16:9f:
23:bc:43:db:54:4e:64:90:1d:3b:8c:b9:7b:25:d0:
e6:7b:28:5a:3a:19:a4:22:83:25:64:f6:62:04:9a:
e6:48:ed:5a:7b:d5:cb:64:65:31:37:43:51:29:82:
da:2d:02:76:17:6e:bb:9d:c1:21:0b:25:e3:45:ca:
9d:86:87:90:cb:f8:a7:0a:b4:93:cd:de:88:0e:6a:
18:71:3b:29:15:b6:6f:ca:2a:e0:00:25:3a:4a:32:
44:08:8e:df:88:6b:fb:e5:d9:41:cc:66:58:2b:cc:
86:38:2d:67:d5:9b:73:5d:4e:94:52:02:5d:d3:26:
b8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CE:B3:70:8E:9B:37:77:6F:B9:9E:A1:5D:F0:8C:BD:79:7B:46:D4
X509v3 Authority Key Identifier:
keyid:23:27:CD:1B:4F:1F:8B:89:56:86:15:97:E4:94:31:4A:68:56:15:91
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20099/IyfNG08fi4lWhhWX5JQxSmhWFZE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IyfNG08fi4lWhhWX5JQxSmhWFZE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20099/mM6zcI6bN3dvuZ6hXfCMvXl7RtQ.roa
sbgp-ipAddrBlock: critical
IPv4:
202.226.60.0/22
Signature Algorithm: sha256WithRSAEncryption
71:fd:90:8d:49:58:0a:82:2d:65:93:7f:8d:df:f3:59:0c:1c:
ad:25:68:d5:d2:1b:e2:9b:e7:31:24:e1:b8:4c:63:29:69:00:
e5:d0:83:c2:65:39:cd:d2:6a:92:bc:bd:c1:6a:1b:81:bb:0d:
35:5b:9a:a3:a8:02:33:55:a7:18:44:3a:66:90:ff:57:27:64:
4c:d3:3c:6b:7c:64:da:0f:a3:85:84:db:11:2d:c5:06:eb:59:
c1:c7:4e:13:7d:95:81:b0:a2:e7:5c:44:53:c7:e0:2b:ef:e8:
7d:c6:a1:c9:d3:66:96:33:7e:37:6f:77:ab:67:05:70:f2:93:
9d:03:d0:85:54:df:e4:b0:46:51:a7:ba:2f:92:e4:4c:d1:07:
ae:9b:cd:a1:b9:4a:8d:83:b0:83:54:43:cb:62:94:35:40:bf:
72:e3:50:2c:d5:d7:d3:49:08:99:23:e3:c9:98:6a:ad:93:e7:
ee:13:35:1a:8d:c7:21:b6:5b:b5:c8:d4:c4:3f:f6:25:94:c7:
f2:41:0a:a8:a0:25:2d:4d:3a:c5:3c:f9:43:49:e6:b8:4c:94:
e2:c3:89:43:bd:ba:f0:90:e1:5f:ca:9a:c9:18:7a:b6:b3:be:
a2:32:48:36:6a:f7:68:1c:c5:4e:eb:b2:8b:9e:bd:79:4d:38:
38:1a:93:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:04 2026 by rpki-client