
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21042/PIy4kJLeiPgtNkqOEXfu6fHZjs8.roa
File: PIy4kJLeiPgtNkqOEXfu6fHZjs8.roa (raw, json)
Hash identifier: jhWY7/9+Fk3PesbiV/54G3x0tdzgiSzxK8v4hiCyn+M=
Subject key identifier: 3C:8C:B8:90:92:DE:88:F8:2D:36:4A:8E:11:77:EE:E9:F1:D9:8E:CF
Certificate issuer: /CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
Certificate serial: 7B
Authority key identifier: 4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/PIy4kJLeiPgtNkqOEXfu6fHZjs8.roa
Signing time: Tue 31 Mar 2026 08:07:22 +0000
ROA not before: Tue 31 Mar 2026 08:07:22 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 15830
IP address blocks: 180.211.72.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123 (0x7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
Validity
Not Before: Mar 31 08:07:22 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=3C8CB89092DE88F82D364A8E1177EEE9F1D98ECF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b3:e5:59:86:bd:85:12:4d:8f:e3:81:eb:e2:
01:6b:56:55:f0:00:e1:f3:e6:74:b8:e6:b5:a2:9d:
2d:cf:ba:5c:ce:a8:c1:a7:a3:3e:82:93:2d:7f:4d:
2b:6e:41:94:73:18:ba:7a:b1:73:b4:cf:a5:69:51:
4d:49:fc:8c:01:41:b3:8f:c4:b3:9c:41:f7:0d:2f:
13:f2:0f:56:37:a9:1d:3b:a9:39:83:38:9e:f1:22:
c2:05:a9:43:6f:be:5f:41:0c:4c:e7:94:d4:09:a7:
59:26:91:bb:36:85:11:86:e9:bd:65:dc:9b:5d:58:
5c:51:87:cb:27:2d:73:c7:1d:99:5d:b7:5c:7d:1d:
51:41:20:03:f4:60:31:16:c5:8a:a7:a4:9f:61:f8:
4b:3f:af:5a:5f:f5:e3:d9:48:89:ff:e4:21:19:34:
31:a3:f0:6f:48:c5:90:da:73:60:81:c6:85:f6:c2:
fd:c7:dd:36:c1:93:17:45:97:64:d5:5a:ab:62:15:
ed:a1:0b:18:3d:5f:f6:d0:31:26:4a:d8:e0:ac:91:
f3:2b:3b:69:61:f4:66:35:8c:34:df:1c:df:fc:53:
6c:71:d6:9f:45:7e:28:d6:19:b2:37:33:29:b1:6e:
d1:66:98:78:bb:8b:2e:76:e9:e3:2c:9c:c4:0a:fa:
fb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8C:B8:90:92:DE:88:F8:2D:36:4A:8E:11:77:EE:E9:F1:D9:8E:CF
X509v3 Authority Key Identifier:
keyid:4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/PIy4kJLeiPgtNkqOEXfu6fHZjs8.roa
sbgp-ipAddrBlock: critical
IPv4:
180.211.72.0/21
Signature Algorithm: sha256WithRSAEncryption
a4:7d:63:8f:35:02:7a:9b:77:f0:f6:ea:f8:56:a7:0c:8c:15:
05:95:21:45:eb:45:77:94:56:70:5f:8f:11:cf:b9:3d:d8:66:
82:04:e4:9c:82:82:e3:31:9c:f8:2a:39:37:62:b8:bd:45:86:
10:33:ae:68:4b:4e:9f:74:b6:93:48:8d:17:38:6a:f7:96:69:
f8:14:88:11:43:ad:fc:48:fb:ae:a5:d1:6c:84:c5:d9:fd:a5:
b4:23:75:73:78:67:b1:f0:2f:52:e8:56:c3:d7:b0:5f:9d:37:
8d:3f:f7:28:8c:ef:3e:b6:1d:e6:dc:54:9c:01:35:74:40:5b:
cd:c0:30:99:17:70:74:e0:74:fb:ac:4e:8a:78:1f:5a:ae:bd:
c2:a5:dc:87:ad:cb:3c:0e:7a:7b:12:3a:21:d7:bf:e5:22:ba:
0a:16:bc:98:ae:65:e9:cc:93:76:d5:9b:ce:41:2e:e9:c6:43:
66:dd:d4:18:0a:dd:5b:f8:3c:ed:5d:18:29:6b:ed:7e:de:ab:
d0:be:01:77:93:b0:82:ef:53:f4:f3:09:c9:31:2e:71:5b:40:
96:4f:3d:90:20:9a:74:6b:3a:87:dd:d2:b4:15:fb:b8:79:d8:
d0:87:cc:69:bd:6e:e6:10:b8:d0:c1:e9:bc:3c:36:e6:69:a3:
1d:0b:4a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:24 2026 by rpki-client