
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20160/t7ETh0s2MfhbjLrGVgYKj07kZo0.roa
File: t7ETh0s2MfhbjLrGVgYKj07kZo0.roa (raw, json)
Hash identifier: CLzwRnmaCLc5oCUs4Twzz2zCL1/KMyq7DEyXy9A0E7k=
Subject key identifier: B7:B1:13:87:4B:36:31:F8:5B:8C:BA:C6:56:06:0A:8F:4E:E4:66:8D
Certificate issuer: /CN=050401C788B569B3D440041730E28A991F4018D2
Certificate serial: 38
Authority key identifier: 05:04:01:C7:88:B5:69:B3:D4:40:04:17:30:E2:8A:99:1F:40:18:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/t7ETh0s2MfhbjLrGVgYKj07kZo0.roa
Signing time: Tue 31 Mar 2026 08:41:45 +0000
ROA not before: Tue 31 Mar 2026 08:41:45 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 18282
IP address blocks: 220.208.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050401C788B569B3D440041730E28A991F4018D2
Validity
Not Before: Mar 31 08:41:45 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=B7B113874B3631F85B8CBAC656060A8F4EE4668D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e2:5b:39:74:8a:a4:a2:bf:54:b6:76:fc:1d:
15:e7:7a:85:d8:e6:b4:c1:ba:c4:6c:12:e4:7c:be:
1e:14:d9:a3:79:1a:81:78:75:01:8f:fd:ae:91:7a:
9e:0a:d9:68:47:95:59:2f:48:8d:e8:51:7a:71:82:
76:81:4b:ae:b6:56:1f:3a:10:c8:9e:9b:69:7e:70:
09:06:bc:4b:37:48:62:ad:8b:0a:20:16:f3:c1:0a:
ed:6a:6a:21:da:f3:b9:ba:2a:39:3d:6a:81:80:5b:
7c:cc:7c:1d:76:11:d6:27:b7:fb:c6:3d:c3:45:ab:
0e:e7:76:ac:87:ab:57:b0:42:6b:d5:00:28:b6:11:
15:19:13:d7:64:61:d2:7e:b7:15:ad:00:e5:fa:c7:
1d:0b:c3:cc:a5:0c:54:38:4c:a4:a1:87:e1:27:d4:
b5:d7:f4:65:e1:6d:6a:83:fa:e9:0f:54:41:9a:17:
b4:39:5d:3f:12:67:a7:b2:69:db:fe:95:fa:78:ad:
e0:d0:8a:f1:43:6e:3b:5a:df:76:f2:f9:50:99:44:
1d:65:0f:cc:ba:e1:42:03:68:4e:26:0f:0f:69:a7:
80:ca:71:12:35:ce:ac:b7:cc:57:81:29:44:35:85:
c0:0b:45:61:2c:e9:c1:ee:6e:bb:4e:45:17:65:fa:
d6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B1:13:87:4B:36:31:F8:5B:8C:BA:C6:56:06:0A:8F:4E:E4:66:8D
X509v3 Authority Key Identifier:
keyid:05:04:01:C7:88:B5:69:B3:D4:40:04:17:30:E2:8A:99:1F:40:18:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/t7ETh0s2MfhbjLrGVgYKj07kZo0.roa
sbgp-ipAddrBlock: critical
IPv4:
220.208.128.0/18
Signature Algorithm: sha256WithRSAEncryption
56:0b:7f:54:6c:a7:1e:9b:a8:5e:f2:6f:d0:90:ab:84:9a:66:
69:eb:54:6e:c9:15:15:ea:24:9d:05:5f:e8:c7:05:4e:60:70:
fd:b1:ba:cd:be:9a:fd:a0:09:42:29:45:95:41:1c:aa:03:1d:
ab:f4:23:51:31:fd:d7:6e:25:5e:cd:18:c7:2a:5a:12:26:da:
49:49:d3:d3:39:ff:04:f8:88:f4:8e:d3:fa:6c:4b:10:28:dc:
50:54:1e:1e:5b:ce:eb:a3:89:12:64:6c:9e:fd:d9:e0:74:4a:
c7:ba:cc:ea:97:d6:92:20:98:80:72:df:ac:2d:55:c6:ed:c1:
80:73:2c:4a:82:86:cb:ef:59:3a:33:83:43:b1:d0:aa:89:0d:
af:e6:1c:d7:95:27:e3:6f:5b:67:f6:b1:59:0d:6b:68:5e:d6:
da:78:79:2b:6a:34:d2:d5:b3:74:03:c4:9a:e2:75:41:35:24:
91:bb:64:65:90:bb:06:b9:e3:19:a6:7c:85:3b:ce:74:1d:c0:
0c:39:3b:68:05:bd:e2:9a:7a:b9:e3:eb:10:70:df:e8:8d:25:
82:7e:bf:2f:d8:25:7a:e3:6d:a7:c8:51:87:ed:63:a3:10:c6:
21:ef:a3:9b:b1:25:2d:b3:29:c8:9c:df:a1:b5:64:9c:30:f4:
2c:7a:bb:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:34 2026 by rpki-client