
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/VsvPXWlGEjIAWKBtom3qpYosr9s.roa
File: VsvPXWlGEjIAWKBtom3qpYosr9s.roa (raw, json)
Hash identifier: r/m28to3Lhj+wRgofbbLoj54J6xSRiladkQ2CAvuk6k=
Subject key identifier: 56:CB:CF:5D:69:46:12:32:00:58:A0:6D:A2:6D:EA:A5:8A:2C:AF:DB
Certificate issuer: /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial: AC
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VsvPXWlGEjIAWKBtom3qpYosr9s.roa
Signing time: Tue 31 Mar 2026 07:55:18 +0000
ROA not before: Tue 31 Mar 2026 07:55:18 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 160.249.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172 (0xac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Validity
Not Before: Mar 31 07:55:18 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=56CBCF5D694612320058A06DA26DEAA58A2CAFDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:73:58:5b:75:01:a1:2a:2d:1b:e2:c2:ae:6f:
a5:cc:6c:64:ac:57:3d:b6:69:e9:74:53:18:e5:4d:
fc:f0:30:cb:72:bc:03:3b:d7:89:8c:1a:88:d0:0b:
d9:df:b1:17:d2:44:d6:59:33:7a:64:9e:4b:57:4f:
cf:93:f6:0d:2b:2e:62:ee:9b:36:b3:b7:fd:89:f2:
1e:bf:75:73:36:46:a6:d7:2b:f8:5b:fc:34:ac:84:
03:77:cf:19:4d:2c:35:3e:02:7b:67:8a:0d:31:3b:
5d:d3:53:a9:64:9c:61:6c:e7:35:9d:6c:20:ff:ed:
1b:3c:a6:b7:06:32:c5:de:dd:fd:04:c6:b1:03:a5:
b5:4a:4f:67:a9:46:ee:6d:3d:bc:52:55:1a:08:bc:
5a:15:54:6b:d3:1e:f8:e1:46:15:9e:e6:53:a8:46:
67:ef:0d:d3:ea:35:a2:78:2f:66:4b:14:a8:95:95:
b8:df:fb:29:f6:86:ff:c9:77:a5:64:9f:5e:bd:63:
02:dc:89:64:c6:7e:11:ef:52:d8:68:50:af:65:9e:
f9:24:f4:c9:bf:72:60:7d:06:96:18:24:d0:89:1c:
fc:b9:ab:37:26:cf:a4:c2:9d:bb:7d:7b:bb:35:af:
a4:96:11:5e:98:5c:21:f3:fc:43:a6:d9:27:db:05:
89:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:CB:CF:5D:69:46:12:32:00:58:A0:6D:A2:6D:EA:A5:8A:2C:AF:DB
X509v3 Authority Key Identifier:
keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VsvPXWlGEjIAWKBtom3qpYosr9s.roa
sbgp-ipAddrBlock: critical
IPv4:
160.249.0.0/18
Signature Algorithm: sha256WithRSAEncryption
6e:8b:1f:c2:87:20:e6:ca:63:37:4c:12:9e:5c:ed:e2:a3:a1:
b3:78:72:e2:59:43:6e:a9:e9:10:44:de:69:f3:2b:80:e8:1a:
01:49:ba:76:9b:65:d8:e0:f8:a7:48:62:f7:60:50:a3:56:51:
da:c3:bb:cd:27:32:20:42:03:c5:86:62:09:a4:ad:88:b5:a6:
b4:df:69:07:0a:24:b7:1e:63:0f:07:2e:69:6f:96:36:ec:c8:
0f:5c:25:75:d8:57:d0:3f:d2:62:7c:89:fa:0f:75:b7:0b:83:
83:fa:c7:65:2c:9a:7e:9a:5f:4f:57:a4:e2:b1:bc:4e:2b:85:
f4:c0:47:95:66:aa:2f:81:ac:8a:53:cf:f5:e8:08:88:27:11:
bd:a3:d7:4b:05:80:b3:30:7c:90:6e:be:14:e7:98:85:3c:cc:
3a:ea:f1:89:bb:b6:96:b9:cd:46:c6:df:05:42:ab:b6:a2:c6:
4a:9e:53:66:28:c7:20:7e:14:a4:22:eb:f7:7d:b6:f6:f3:35:
c5:84:de:b2:20:94:86:29:ae:49:73:bd:35:09:94:71:3b:e1:
e4:5c:dc:4d:a9:43:0f:a5:26:11:f3:e6:8f:12:2f:f5:86:b0:
2a:23:44:48:13:55:42:c3:20:4e:ea:0f:38:e3:f2:01:db:be:
c6:fc:97:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:24:58 2026 by rpki-client