
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20288/Jbd17lZ92UvndkEEuXVXvuTWp3A.roa
File: Jbd17lZ92UvndkEEuXVXvuTWp3A.roa (raw, json)
Hash identifier: 4IBLJ1pydtkojbWu1Jc6zKXc/5cJTB2Y6MmczPxYsFM=
Subject key identifier: 25:B7:75:EE:56:7D:D9:4B:E7:76:41:04:B9:75:57:BE:E4:D6:A7:70
Certificate issuer: /CN=495161FDC1D3CA9CBA070A055DAFA73561368BA4
Certificate serial: 04
Authority key identifier: 49:51:61:FD:C1:D3:CA:9C:BA:07:0A:05:5D:AF:A7:35:61:36:8B:A4
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SVFh_cHTypy6BwoFXa-nNWE2i6Q.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20288/Jbd17lZ92UvndkEEuXVXvuTWp3A.roa
Signing time: Tue 31 Mar 2026 08:48:53 +0000
ROA not before: Tue 31 Mar 2026 08:48:53 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 152877
IP address blocks: 151.158.220.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20288/SVFh_cHTypy6BwoFXa-nNWE2i6Q.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20288/SVFh_cHTypy6BwoFXa-nNWE2i6Q.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SVFh_cHTypy6BwoFXa-nNWE2i6Q.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 14:50:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=495161FDC1D3CA9CBA070A055DAFA73561368BA4
Validity
Not Before: Mar 31 08:48:53 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=25B775EE567DD94BE7764104B97557BEE4D6A770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c6:7d:f6:e5:66:f6:52:00:ad:47:92:fa:b5:
59:84:92:90:6a:87:72:f0:20:ff:34:17:83:91:6f:
09:bc:07:61:b3:be:1f:05:ca:56:6a:5e:64:d8:cd:
7c:3c:8b:ff:2d:e1:40:15:35:87:de:fa:96:77:cf:
bc:5b:4b:01:ef:21:59:c2:88:7a:3f:d8:47:09:18:
60:a4:62:58:74:a1:71:37:12:cf:bd:8b:78:c3:d2:
d6:f6:42:0f:fa:a7:73:c4:8f:7d:ee:97:2e:6c:e0:
21:22:6c:3e:50:3d:8e:77:f9:b7:78:5c:53:77:22:
bc:2a:8d:77:9f:32:3f:9c:48:2f:6c:71:db:6d:07:
bd:66:98:2a:63:ad:bb:7a:c7:33:e9:d5:7e:fd:23:
55:15:f3:51:3f:86:c7:cd:8d:c8:ee:af:b1:5d:c6:
d9:33:dc:66:7c:fd:66:b5:cf:98:bd:cc:a9:e4:14:
34:79:f7:05:8e:b3:7c:37:84:22:61:81:b1:63:32:
0c:6a:ed:c0:be:5d:66:67:28:3e:58:5f:9c:71:09:
4b:a1:7d:9a:0b:2b:67:d6:e9:fc:a5:1f:2d:b6:70:
95:ad:fe:f2:8c:70:6b:52:ea:de:c5:58:25:61:33:
1f:3b:ee:ce:88:72:3b:2e:ab:dd:e7:40:11:99:a0:
b4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B7:75:EE:56:7D:D9:4B:E7:76:41:04:B9:75:57:BE:E4:D6:A7:70
X509v3 Authority Key Identifier:
keyid:49:51:61:FD:C1:D3:CA:9C:BA:07:0A:05:5D:AF:A7:35:61:36:8B:A4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20288/SVFh_cHTypy6BwoFXa-nNWE2i6Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SVFh_cHTypy6BwoFXa-nNWE2i6Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20288/Jbd17lZ92UvndkEEuXVXvuTWp3A.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.220.0/23
Signature Algorithm: sha256WithRSAEncryption
05:be:a7:d3:0a:ae:c0:ee:f2:83:16:4e:ff:95:8b:cd:0e:b6:
30:6a:4c:e7:2e:4c:74:97:9d:35:39:e2:0e:37:55:41:3c:f2:
18:69:17:c0:bf:ec:71:d4:eb:95:87:5c:da:57:f3:47:54:40:
1d:76:cd:e5:63:53:49:dd:c3:34:3a:05:85:cb:7b:7e:5e:2b:
d1:15:02:12:37:85:79:e4:af:54:5d:d6:ef:e5:9e:eb:42:ef:
93:59:77:76:b7:dc:16:ad:77:c0:bb:66:45:74:48:9e:44:98:
c6:5a:a0:a2:b5:17:8b:d8:15:06:18:c8:de:6c:e2:de:c0:a6:
da:9c:ac:15:ab:fa:c9:d1:1b:41:49:10:0c:23:3c:48:88:75:
33:31:3d:19:39:ec:2d:51:21:03:ad:25:9a:fa:0d:82:ec:44:
85:f4:a6:13:fc:e9:b6:d2:72:38:69:91:58:8e:08:aa:7d:6a:
68:8b:6a:a9:9b:b3:7e:46:cf:1a:04:f8:f0:ac:c6:cc:11:42:
e9:f0:ba:4b:4d:60:e3:1b:ef:eb:a3:5d:60:f9:b0:74:7b:23:
e3:68:84:fa:7e:53:50:31:22:1e:11:7b:11:07:47:1f:04:35:
c4:d6:fe:01:cd:2c:8a:e6:36:0c:a8:4a:33:e1:34:20:c1:59:
1f:4a:3d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:04:23 2026 by rpki-client