
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20134/YmJn304AfMs5qqw5pXIzDwnGPzo.roa
File: YmJn304AfMs5qqw5pXIzDwnGPzo.roa (raw, json)
Hash identifier: gTrMBE4/VRullcYFDIFbKyj/GJPr3fRDvpPDQuW9HtY=
Subject key identifier: 62:62:67:DF:4E:00:7C:CB:39:AA:AC:39:A5:72:33:0F:09:C6:3F:3A
Certificate issuer: /CN=D02A9A652B87C96957C9DAFD6FFAE7244188E063
Certificate serial: 2D
Authority key identifier: D0:2A:9A:65:2B:87:C9:69:57:C9:DA:FD:6F:FA:E7:24:41:88:E0:63
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0CqaZSuHyWlXydr9b_rnJEGI4GM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/YmJn304AfMs5qqw5pXIzDwnGPzo.roa
Signing time: Tue 31 Mar 2026 08:40:53 +0000
ROA not before: Tue 31 Mar 2026 08:40:53 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 131960
IP address blocks: 122.102.56.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/0CqaZSuHyWlXydr9b_rnJEGI4GM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/0CqaZSuHyWlXydr9b_rnJEGI4GM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0CqaZSuHyWlXydr9b_rnJEGI4GM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45 (0x2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D02A9A652B87C96957C9DAFD6FFAE7244188E063
Validity
Not Before: Mar 31 08:40:53 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=626267DF4E007CCB39AAAC39A572330F09C63F3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1c:3b:8b:55:57:7a:b8:f1:bf:3b:48:c4:1d:
22:c6:e7:ed:0a:fe:b2:f7:44:40:ce:a9:08:c5:9a:
34:8b:14:5e:7b:48:99:16:7f:7c:f0:56:18:10:88:
5a:21:9a:91:fc:2f:09:fc:09:e5:80:43:c6:23:2e:
7f:ef:7e:58:48:5a:10:1a:12:f6:60:38:56:36:34:
ca:3c:18:7f:75:1c:ad:9f:1b:ae:af:03:b9:f3:e1:
90:8e:9b:37:05:4d:26:11:25:4f:04:c1:99:17:69:
63:01:5b:30:4f:60:62:13:75:38:ce:a4:83:27:86:
a6:bd:24:0e:29:f7:e6:3c:19:70:7a:9a:4c:4a:f0:
0e:ed:49:33:88:31:c7:1a:63:01:3c:0a:5a:a8:40:
b6:ff:37:07:8c:9e:a1:70:7d:84:e0:26:86:c8:1c:
27:73:65:4c:1e:44:92:de:cb:40:1a:95:8f:dc:94:
af:57:26:a3:48:cc:a8:d7:64:33:8f:cb:06:27:7e:
95:2a:82:3d:68:47:bf:90:4d:60:3b:1a:93:e8:a5:
3c:74:4c:ff:24:a0:67:dc:e7:e6:36:88:4a:fe:d4:
13:4f:80:62:6c:0e:85:53:92:db:b7:ae:5f:ee:33:
ab:c7:3c:1c:5e:59:dd:00:46:24:21:aa:bd:34:ae:
aa:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:62:67:DF:4E:00:7C:CB:39:AA:AC:39:A5:72:33:0F:09:C6:3F:3A
X509v3 Authority Key Identifier:
keyid:D0:2A:9A:65:2B:87:C9:69:57:C9:DA:FD:6F:FA:E7:24:41:88:E0:63
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/0CqaZSuHyWlXydr9b_rnJEGI4GM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0CqaZSuHyWlXydr9b_rnJEGI4GM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/YmJn304AfMs5qqw5pXIzDwnGPzo.roa
sbgp-ipAddrBlock: critical
IPv4:
122.102.56.0/21
Signature Algorithm: sha256WithRSAEncryption
15:8d:ba:3e:d2:68:84:e9:2d:d4:01:87:60:8c:2f:15:ab:4a:
c0:ca:42:1b:dd:ff:80:e7:d5:17:e0:bc:33:27:ba:0a:f9:d6:
ea:40:f4:0a:94:91:0b:01:58:c2:fb:dc:ed:1e:66:70:38:d9:
0f:3c:f2:a7:b4:c3:42:54:9f:0e:fd:d8:ed:b6:69:2a:39:69:
a7:87:18:c9:7f:b9:c2:51:ae:8b:70:60:3f:e1:80:76:34:41:
00:cf:0b:db:62:2b:0a:5a:d6:f5:32:ca:50:37:89:d8:eb:a8:
d3:9c:5d:92:f2:64:ea:09:b9:df:4f:30:e5:7e:29:d1:d4:89:
e9:b5:77:75:9c:39:17:a4:a2:64:c8:bb:43:19:ae:bb:f6:fc:
74:c8:d8:b5:74:47:d4:bf:b4:00:d8:3e:12:48:ee:4e:49:69:
b8:52:e9:d3:16:65:58:ee:37:23:92:8f:24:b7:bf:aa:03:fa:
dc:db:ef:23:dd:bd:1f:e1:c7:eb:6d:b1:96:13:26:da:28:78:
e9:86:b2:3b:a8:7e:37:c1:1d:7c:3a:de:60:59:7f:35:7d:c3:
00:03:4b:c4:42:ee:22:ad:6f:a3:71:57:55:c3:c0:ba:a0:c9:
a2:3c:9d:32:e2:60:1a:ba:7c:81:44:ba:38:b8:33:36:e5:42:
bd:57:bc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:14 2026 by rpki-client