
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20196/zwF1o8IcVpnRwr7-THeOQrYm9A4.roa
File: zwF1o8IcVpnRwr7-THeOQrYm9A4.roa (raw, json)
Hash identifier: u6YVbHExOm17B+F66MUdfRC66kMq8p5lJxnDUYeDcKs=
Subject key identifier: CF:01:75:A3:C2:1C:56:99:D1:C2:BE:FE:4C:77:8E:42:B6:26:F4:0E
Certificate issuer: /CN=F81BD2E58E8035E57254CDB51651C4E319EFDE6B
Certificate serial: 34
Authority key identifier: F8:1B:D2:E5:8E:80:35:E5:72:54:CD:B5:16:51:C4:E3:19:EF:DE:6B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-BvS5Y6ANeVyVM21FlHE4xnv3ms.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20196/zwF1o8IcVpnRwr7-THeOQrYm9A4.roa
Signing time: Tue 31 Mar 2026 08:33:10 +0000
ROA not before: Tue 31 Mar 2026 08:33:10 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 150359
IP address blocks: 121.92.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20196/-BvS5Y6ANeVyVM21FlHE4xnv3ms.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20196/-BvS5Y6ANeVyVM21FlHE4xnv3ms.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-BvS5Y6ANeVyVM21FlHE4xnv3ms.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F81BD2E58E8035E57254CDB51651C4E319EFDE6B
Validity
Not Before: Mar 31 08:33:10 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=CF0175A3C21C5699D1C2BEFE4C778E42B626F40E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fd:23:0e:a9:c6:53:b4:9e:4a:63:c3:cf:45:
b0:78:8a:ef:d0:c0:55:a8:b8:58:60:41:79:5a:76:
3c:88:40:fb:0e:ae:8e:bb:10:4d:dc:a9:b7:f9:4f:
7b:21:e7:2f:bf:ae:e0:75:aa:91:8b:4c:43:2d:32:
1c:6b:ab:3d:6b:a1:b2:cf:27:2f:a1:a6:78:9f:46:
bb:21:d9:c3:e2:03:ea:4c:ae:23:3b:04:65:25:d8:
43:38:fe:f8:55:4e:97:31:b5:40:05:7e:c1:69:9b:
47:41:3b:8e:08:71:04:6d:8b:24:02:4e:54:83:1d:
d2:33:a9:03:df:0e:a3:9c:81:46:30:3c:1d:2f:97:
88:eb:57:de:d1:2c:4f:43:14:86:98:10:62:14:c2:
e7:81:22:02:a2:da:3e:ea:3b:04:89:c1:09:64:6a:
4c:cb:28:c2:2c:2d:c9:a2:2b:21:2e:54:36:bf:66:
ef:97:1b:5e:78:de:74:72:2e:49:6a:79:1c:c4:b4:
93:3c:3e:99:49:d2:48:d2:88:c5:05:43:e7:f3:53:
ed:60:c2:70:5a:d6:ae:05:b3:c4:4c:ed:3c:e8:5e:
04:5e:2e:db:d2:37:7c:66:7e:30:89:9f:2c:2c:6f:
78:58:9d:d0:aa:a3:66:b7:6b:64:df:d7:52:86:a6:
25:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:01:75:A3:C2:1C:56:99:D1:C2:BE:FE:4C:77:8E:42:B6:26:F4:0E
X509v3 Authority Key Identifier:
keyid:F8:1B:D2:E5:8E:80:35:E5:72:54:CD:B5:16:51:C4:E3:19:EF:DE:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20196/-BvS5Y6ANeVyVM21FlHE4xnv3ms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-BvS5Y6ANeVyVM21FlHE4xnv3ms.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20196/zwF1o8IcVpnRwr7-THeOQrYm9A4.roa
sbgp-ipAddrBlock: critical
IPv4:
121.92.0.0/16
Signature Algorithm: sha256WithRSAEncryption
53:f4:d9:4c:ba:e5:b5:df:61:65:b1:2f:53:59:bf:22:eb:17:
1d:81:c1:04:30:08:99:b0:31:08:d2:03:72:e7:90:ca:f2:72:
ff:e4:ce:a4:28:59:2d:bd:67:da:73:2c:85:17:9a:f8:19:5a:
c2:bd:c2:89:60:2b:16:5a:f9:7d:2f:f7:05:9f:35:6d:00:72:
4d:86:3c:8b:33:48:1b:7f:9d:f0:67:3d:b1:59:d4:dc:96:85:
2d:f0:5c:99:ad:ea:f5:5d:82:c5:94:44:2d:c2:50:f7:0e:68:
d8:6e:f8:af:07:eb:bc:9a:65:f0:eb:06:c7:64:fe:96:37:05:
1a:57:a7:87:c0:5d:ad:6e:50:8a:02:68:88:e6:8a:97:ee:28:
91:56:b9:6a:a2:7c:7e:52:31:9f:e4:3a:ad:5a:d0:87:31:b5:
7d:cb:8d:9a:ee:51:62:55:33:db:59:2d:a0:25:d0:82:f5:55:
b1:ac:b7:ea:5e:4a:d7:f1:f4:e3:23:b9:5d:6c:ee:a9:f3:f4:
90:33:59:23:ff:c1:a0:ea:ad:13:93:2b:02:a4:35:44:5e:b9:
c0:69:23:d5:6e:fc:2f:86:7d:81:8a:50:78:fe:61:d9:7e:68:
a6:40:92:5c:98:9a:69:c2:74:db:6e:69:2a:57:8e:bc:af:55:
33:0e:92:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:35:09 2026 by rpki-client