
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/233/ne_l8lFKOrvmfYVRO8IdISbDLHc.roa
File: ne_l8lFKOrvmfYVRO8IdISbDLHc.roa (raw, json)
Hash identifier: NWAKQ42dw683vws05K/GoZhRnTfwU/C6Pmq7b3octh8=
Subject key identifier: 9D:EF:E5:F2:51:4A:3A:BB:E6:7D:85:51:3B:C2:1D:21:26:C3:2C:77
Certificate issuer: /CN=D788678E64D29184C23DAAADB594BFD9BAE2405C
Certificate serial: 6B
Authority key identifier: D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/ne_l8lFKOrvmfYVRO8IdISbDLHc.roa
Signing time: Tue 31 Mar 2026 07:50:23 +0000
ROA not before: Tue 31 Mar 2026 07:50:23 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 7670
IP address blocks: 210.166.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107 (0x6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D788678E64D29184C23DAAADB594BFD9BAE2405C
Validity
Not Before: Mar 31 07:50:23 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=9DEFE5F2514A3ABBE67D85513BC21D2126C32C77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:82:f3:18:22:52:75:3f:32:49:5f:cf:d0:01:
9b:e5:00:ae:96:7c:f0:d2:f0:28:45:cb:c6:b7:c4:
9b:93:bd:b9:64:b6:c8:de:db:2e:b0:40:62:b2:66:
17:fa:3c:88:59:d8:84:38:a1:46:2a:7d:d9:86:f2:
67:fa:e1:81:70:35:f0:eb:c4:eb:78:f9:75:de:c1:
93:92:2d:42:3e:e9:be:46:ce:31:f3:77:63:64:4d:
fc:48:90:bf:fc:52:5c:2a:2f:e1:93:47:06:ef:5e:
02:5b:d6:99:9d:1b:bd:b2:e8:79:69:9d:fe:74:03:
15:2a:e7:6b:d5:80:6a:76:0c:4e:12:db:48:a3:1c:
34:dc:d1:ae:63:d7:f8:bb:b0:23:98:07:b3:5a:b1:
e5:fa:89:6a:90:a1:77:51:1d:96:3d:f3:3f:f3:6e:
7e:43:04:49:61:64:4c:81:4e:65:1d:a7:35:37:b4:
b2:ac:4f:c9:c4:d3:4e:97:a9:cc:1a:ce:50:a9:07:
4c:06:15:2a:5e:35:e5:96:01:c0:7a:c0:3a:24:77:
38:a4:32:7a:f9:85:0e:4d:e3:b2:f2:c7:fb:24:59:
be:51:17:3a:bb:b7:54:f3:45:94:b9:df:94:21:f6:
71:51:be:5d:64:10:15:9d:01:7a:e1:0a:6d:6a:e4:
9e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:EF:E5:F2:51:4A:3A:BB:E6:7D:85:51:3B:C2:1D:21:26:C3:2C:77
X509v3 Authority Key Identifier:
keyid:D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/ne_l8lFKOrvmfYVRO8IdISbDLHc.roa
sbgp-ipAddrBlock: critical
IPv4:
210.166.32.0/19
Signature Algorithm: sha256WithRSAEncryption
a1:fe:99:1a:a0:a5:a3:97:ce:cb:7f:52:df:00:ec:b4:d3:7a:
d2:81:3b:48:2e:4c:cc:fe:ae:a1:7b:9c:68:80:cf:c8:67:19:
3f:d6:c0:b0:ba:d5:cd:0a:61:bc:55:dc:2d:5c:1e:58:76:03:
0a:70:ac:4c:25:ab:1a:eb:51:95:c0:0f:8f:96:ca:59:5d:90:
cb:60:b8:3b:5b:bc:54:97:2b:c7:92:1b:fb:3c:4f:47:bf:93:
7b:bc:77:2f:79:74:cb:5a:f2:f7:75:37:a0:c3:f2:01:88:bc:
dd:b6:a1:54:ae:a7:f3:36:50:6d:5d:41:48:4d:f3:b1:44:97:
98:c8:81:b3:4f:42:74:e7:e1:d2:da:dc:0c:aa:4a:36:b4:bf:
b1:eb:ce:53:16:aa:39:27:03:da:c1:ae:11:29:f2:51:ff:4e:
03:e5:68:bd:44:1c:f7:bb:10:e1:64:ca:ed:01:16:58:07:d5:
85:a8:15:d8:29:cf:7e:ff:c6:38:76:c8:c7:a8:ec:f1:08:b5:
02:01:c7:93:13:35:e0:83:48:40:aa:a0:ef:b4:fe:37:b2:a7:
8c:b2:8f:7d:b8:cf:d9:71:77:f6:00:58:75:21:a1:da:c5:31:
b9:24:fc:4a:0f:db:ac:3a:a1:42:a5:da:14:9f:21:ae:91:40:
d9:9f:f3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:56 2026 by rpki-client