
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20227/kFw3HLKChpbPIhL8zGeC_gYpnC4.roa
File: kFw3HLKChpbPIhL8zGeC_gYpnC4.roa (raw, json)
Hash identifier: cRvGpA4eVf2P/GIzCRxcSopEvtzToJyhGQMKn2Aa7AI=
Subject key identifier: 90:5C:37:1C:B2:82:86:96:CF:22:12:FC:CC:67:82:FE:06:29:9C:2E
Certificate issuer: /CN=13B1C8007F2342030F441C774CA9CBCE747ECA50
Certificate serial: 2B
Authority key identifier: 13:B1:C8:00:7F:23:42:03:0F:44:1C:77:4C:A9:CB:CE:74:7E:CA:50
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/E7HIAH8jQgMPRBx3TKnLznR-ylA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20227/kFw3HLKChpbPIhL8zGeC_gYpnC4.roa
Signing time: Tue 31 Mar 2026 08:35:09 +0000
ROA not before: Tue 31 Mar 2026 08:35:09 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 151371
IP address blocks: 103.225.252.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20227/E7HIAH8jQgMPRBx3TKnLznR-ylA.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20227/E7HIAH8jQgMPRBx3TKnLznR-ylA.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/E7HIAH8jQgMPRBx3TKnLznR-ylA.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13B1C8007F2342030F441C774CA9CBCE747ECA50
Validity
Not Before: Mar 31 08:35:09 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=905C371CB2828696CF2212FCCC6782FE06299C2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:96:52:e4:f2:d8:9f:21:0e:2f:38:6b:d2:0d:
c9:5c:5c:22:3f:96:d0:c5:0a:dd:91:36:ac:16:61:
2c:09:e1:fb:a5:12:93:ff:23:dc:25:0d:7f:5c:ea:
d6:43:54:26:e2:f1:2a:32:80:fc:41:89:5b:db:3b:
4d:b6:7e:50:b2:01:db:b9:38:53:a6:bf:8a:e4:9b:
45:0c:f9:6e:0e:b9:b7:67:8d:5f:25:3b:68:ac:96:
24:4b:1e:4f:b3:f6:79:6f:d6:f6:4f:5f:7b:66:11:
9d:4d:d8:e7:d5:87:ca:19:35:cf:fe:03:10:8c:68:
8e:8e:4d:04:12:be:af:f7:aa:97:91:7d:ac:d1:36:
00:89:a9:ea:9c:04:1d:f9:55:86:05:bf:17:9b:33:
a0:70:0b:c6:0f:19:51:60:ba:38:9e:fd:0e:91:b2:
06:0c:11:9c:f8:ab:8d:3e:43:28:4b:0a:6d:bb:f4:
06:e0:f2:88:01:e6:f9:5a:8b:59:99:5f:19:c4:ba:
63:d2:df:24:23:00:f6:fb:6c:66:bf:42:18:81:78:
3a:cb:87:59:ba:b2:27:4b:3e:aa:3f:ea:1a:ef:44:
1b:6d:10:38:72:40:8a:fc:3a:18:94:22:00:85:c8:
96:55:80:a7:c3:8e:6d:a9:5c:0b:7f:bc:35:a1:b1:
9b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5C:37:1C:B2:82:86:96:CF:22:12:FC:CC:67:82:FE:06:29:9C:2E
X509v3 Authority Key Identifier:
keyid:13:B1:C8:00:7F:23:42:03:0F:44:1C:77:4C:A9:CB:CE:74:7E:CA:50
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20227/E7HIAH8jQgMPRBx3TKnLznR-ylA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/E7HIAH8jQgMPRBx3TKnLznR-ylA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20227/kFw3HLKChpbPIhL8zGeC_gYpnC4.roa
sbgp-ipAddrBlock: critical
IPv4:
103.225.252.0/23
Signature Algorithm: sha256WithRSAEncryption
62:ef:39:af:74:00:e0:9e:17:26:92:c4:72:e8:1d:c6:cd:f3:
7e:74:72:32:a0:f6:59:ee:e2:43:7e:48:49:dd:19:0d:83:39:
f3:8d:56:f4:75:57:8e:88:e4:e9:d1:e7:11:4f:bd:2e:a3:7d:
8c:b6:90:8d:c7:1f:cf:37:35:f1:c7:c7:62:d4:d6:3e:e9:ed:
fd:5a:a5:03:5e:f8:e7:59:89:1e:15:9d:33:75:de:78:0a:ef:
48:03:34:09:e9:6e:2a:ca:03:c8:13:0c:47:ef:07:01:8f:bb:
9a:12:ee:92:55:57:9c:03:e7:61:07:ce:66:e6:73:96:43:1e:
93:b8:14:ef:70:59:91:31:bf:79:bd:d9:b6:af:e0:47:bd:9e:
36:ce:47:d8:38:cc:05:3f:c2:a7:15:42:80:70:28:27:f9:00:
cc:e3:21:11:ef:a5:a4:a2:51:76:79:67:de:55:0f:bf:6f:2f:
43:80:dc:db:a0:2c:40:79:ec:5a:2c:54:32:7f:70:64:a2:3c:
61:8d:30:2c:31:e0:6e:bc:64:08:01:ab:04:08:c6:11:64:17:
38:1c:d8:52:71:a4:f6:f0:bd:9c:55:6f:4d:8d:06:57:7c:b8:
1a:ee:d7:c9:30:41:b8:c9:5d:3b:3b:64:0c:6b:01:3b:03:dd:
62:73:1d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:17 2026 by rpki-client