
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/-J0s3Ms4nQxxZIIp42ABs6gpKi0.roa
File: -J0s3Ms4nQxxZIIp42ABs6gpKi0.roa (raw, json)
Hash identifier: H2kKmu8NgoOu5PUuUcwM228zNUAJAY4SzeOpCbW8sdg=
Subject key identifier: F8:9D:2C:DC:CB:38:9D:0C:71:64:82:29:E3:60:01:B3:A8:29:2A:2D
Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial: 0161
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/-J0s3Ms4nQxxZIIp42ABs6gpKi0.roa
Signing time: Tue 31 Mar 2026 07:30:31 +0000
ROA not before: Tue 31 Mar 2026 07:30:31 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 7530
IP address blocks: 210.231.216.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 353 (0x161)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Validity
Not Before: Mar 31 07:30:31 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=F89D2CDCCB389D0C71648229E36001B3A8292A2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:11:d0:14:a0:12:8a:c3:21:4d:2b:62:74:d2:
2f:f1:1d:56:06:eb:fa:d7:a8:27:03:43:b0:68:9b:
51:f8:c1:e8:e7:1c:7c:34:00:d7:7d:d2:4c:76:a8:
f5:33:17:c3:a9:a1:18:ab:17:29:a8:93:06:c6:da:
e2:cd:b7:87:19:17:b0:93:c7:6e:c4:50:4a:77:7f:
30:e9:95:a6:cc:50:3b:04:4d:a5:5e:5d:3d:53:5e:
66:f0:e9:cf:29:06:ab:4d:1c:b9:61:79:76:d4:1b:
c8:cc:0f:5d:a3:0d:0f:c9:9c:22:90:4f:8d:fa:56:
8a:af:80:31:a6:a8:66:1b:fe:f7:29:e9:b5:79:18:
35:2e:ec:ab:68:43:e3:e0:48:2a:40:e1:12:31:3f:
57:22:68:83:65:46:ee:b8:2f:70:f0:57:57:d3:71:
91:41:96:53:7e:14:a6:18:b3:d8:82:ac:37:8c:38:
d0:69:6d:f7:ff:3e:86:d6:18:10:e6:af:43:9c:18:
bf:b9:27:08:d5:19:0d:bb:a5:7f:d7:a1:e2:7c:0a:
e5:8a:80:4f:79:5f:54:ba:f5:d5:3a:53:f4:97:36:
b6:d9:b6:43:5d:db:fa:69:e6:6a:1b:cf:82:07:02:
85:8d:cd:02:22:05:fb:25:67:d2:61:e4:52:d8:96:
80:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9D:2C:DC:CB:38:9D:0C:71:64:82:29:E3:60:01:B3:A8:29:2A:2D
X509v3 Authority Key Identifier:
keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/-J0s3Ms4nQxxZIIp42ABs6gpKi0.roa
sbgp-ipAddrBlock: critical
IPv4:
210.231.216.0/21
Signature Algorithm: sha256WithRSAEncryption
5a:ea:21:24:8e:7b:39:07:90:1b:02:23:3c:f1:e8:bc:77:b0:
09:06:65:24:b5:23:66:2e:5d:c7:30:eb:cf:24:1e:7e:fd:0f:
07:72:3b:b8:b7:ab:4a:1f:71:bc:80:90:7b:37:38:4b:64:a6:
5a:a5:0a:5e:2e:8e:70:71:61:67:7e:47:2e:94:72:df:e7:dd:
c7:24:4e:68:11:c9:2b:f7:5d:fd:41:ec:b2:ba:58:08:76:b6:
c3:74:19:97:56:cc:b4:cc:61:2b:02:d0:1e:e6:81:e4:44:e3:
67:5c:54:2f:b3:4b:dc:62:7a:d6:e7:db:71:07:d7:f7:66:c9:
62:f1:a4:26:df:1f:6f:58:79:91:0b:a3:a9:f5:7a:9c:c8:9c:
a1:ec:00:4e:c6:d6:f9:66:70:5e:d2:8f:f4:0b:41:d6:69:cb:
a8:f9:05:31:24:b2:e2:7a:c5:e6:5b:df:39:34:47:4d:98:b7:
91:c3:36:98:67:e5:d9:da:12:e2:0d:9a:ed:cd:6a:42:70:ca:
98:c4:e8:aa:88:db:b8:60:26:6c:ad:3b:6d:4e:32:6f:60:c8:
56:6c:f1:f9:3a:d5:46:6a:7d:a3:b9:57:e8:3b:95:63:46:6c:
5f:6e:eb:32:5c:8a:24:23:4e:9d:bd:a9:de:27:e8:47:57:26:
0b:f9:aa:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:07 2026 by rpki-client