
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20160/i38OWtqM8Qlsqeb9dB4L4QCEyh8.roa
File: i38OWtqM8Qlsqeb9dB4L4QCEyh8.roa (raw, json)
Hash identifier: 1EACgLgskkGPCEvQyijaQyHVnvPQ4SqKJKmGhGW40Ok=
Subject key identifier: 8B:7F:0E:5A:DA:8C:F1:09:6C:A9:E6:FD:74:1E:0B:E1:00:84:CA:1F
Certificate issuer: /CN=050401C788B569B3D440041730E28A991F4018D2
Certificate serial: 36
Authority key identifier: 05:04:01:C7:88:B5:69:B3:D4:40:04:17:30:E2:8A:99:1F:40:18:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/i38OWtqM8Qlsqeb9dB4L4QCEyh8.roa
Signing time: Tue 31 Mar 2026 08:41:45 +0000
ROA not before: Tue 31 Mar 2026 08:41:45 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 18282
IP address blocks: 202.238.0.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050401C788B569B3D440041730E28A991F4018D2
Validity
Not Before: Mar 31 08:41:45 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=8B7F0E5ADA8CF1096CA9E6FD741E0BE10084CA1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:78:36:12:84:b4:95:89:87:7d:98:a9:aa:5a:
34:1e:fb:f8:41:d5:d0:2b:31:58:01:a1:ac:3e:7e:
6a:1d:17:d1:ac:99:fa:4e:fd:58:1d:fb:49:5e:db:
5d:7f:9f:c7:03:a9:85:7d:1e:d7:d3:33:17:06:22:
96:0f:8a:b3:f4:a9:07:9a:3e:4c:78:6e:ac:7a:4e:
61:f4:91:17:bc:e3:24:d9:13:e1:23:57:9c:c6:11:
04:2a:d5:69:87:98:58:a6:cc:a1:12:1e:20:3e:18:
98:47:95:02:fe:cc:eb:87:71:8f:34:66:e1:af:3b:
87:83:3b:e9:dc:97:76:cf:d9:22:63:42:46:ad:2f:
ff:1e:c9:4c:ab:ca:ad:0f:3b:66:7e:39:19:e9:a3:
d5:84:e8:63:88:14:a0:06:7e:3a:d2:d2:e8:bd:2b:
0b:1a:a6:0b:07:e3:23:b9:8a:7d:c7:48:37:f3:a0:
9a:43:02:fc:35:9a:ee:ec:b9:f9:a4:51:52:2b:1e:
ce:70:60:e6:48:73:46:b0:fb:b5:51:16:6e:56:8f:
09:a9:3b:94:80:f3:2d:e6:6e:c5:20:ed:ca:02:29:
b1:58:5b:bc:45:0d:6d:d9:e4:c5:8f:22:83:70:3d:
0a:af:c7:7d:92:2a:8b:77:02:97:c7:59:90:47:d1:
d7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7F:0E:5A:DA:8C:F1:09:6C:A9:E6:FD:74:1E:0B:E1:00:84:CA:1F
X509v3 Authority Key Identifier:
keyid:05:04:01:C7:88:B5:69:B3:D4:40:04:17:30:E2:8A:99:1F:40:18:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/i38OWtqM8Qlsqeb9dB4L4QCEyh8.roa
sbgp-ipAddrBlock: critical
IPv4:
202.238.0.0/20
Signature Algorithm: sha256WithRSAEncryption
c0:3e:43:f7:7f:56:f7:74:f3:64:fa:19:57:cc:ba:62:de:f0:
e9:aa:cc:fd:6a:c7:b5:c1:8e:82:e8:09:3d:98:78:8b:67:17:
ab:a1:68:9d:9d:46:25:6c:b5:e0:6f:b3:75:e6:8b:4c:81:7e:
3d:fb:32:4c:08:2c:4b:39:1f:cd:d2:1a:d6:6d:95:9f:26:d7:
a0:1c:86:3d:2e:ca:0e:84:9d:7b:63:1a:e8:82:9b:17:40:79:
4c:12:6f:48:e9:e0:95:28:80:2c:18:4d:bc:2f:c4:63:17:94:
21:c3:1e:4a:92:a1:df:6a:1f:f7:8a:11:0f:02:b3:87:68:a2:
bd:32:6a:79:75:24:56:3c:74:87:a1:dc:52:ea:13:a5:6a:41:
7b:7f:92:31:d1:5c:b9:dc:1d:19:24:c0:f3:5b:84:d8:a2:f9:
f8:3c:ca:e7:56:0d:72:a1:04:0e:b3:35:66:34:b3:24:f2:2a:
29:5e:c9:39:22:db:e1:d1:6b:09:29:61:44:b0:fc:dd:e2:81:
d9:bd:c0:bd:4b:9e:47:40:35:e3:80:f5:bf:f5:2e:1f:18:c8:
fa:b7:12:3c:9e:9f:fb:a3:f4:9a:33:fb:e2:a3:10:e0:a9:09:
29:d4:df:07:b8:48:a6:3d:5e:77:bb:b2:b9:16:dd:24:56:11:
37:7b:e1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:14 2026 by rpki-client