
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/HUxqyab8a7EMQhh-9FfHWcyqNqs.roa
File: HUxqyab8a7EMQhh-9FfHWcyqNqs.roa (raw, json)
Hash identifier: HLd8/edjuedETT4yWzvHgv+Xhb2lbZS3CUww1CDzx7M=
Subject key identifier: 1D:4C:6A:C9:A6:FC:6B:B1:0C:42:18:7E:F4:57:C7:59:CC:AA:36:AB
Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial: 0150
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/HUxqyab8a7EMQhh-9FfHWcyqNqs.roa
Signing time: Tue 31 Mar 2026 07:30:22 +0000
ROA not before: Tue 31 Mar 2026 07:30:22 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9607
IP address blocks: 203.216.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 336 (0x150)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Validity
Not Before: Mar 31 07:30:22 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=1D4C6AC9A6FC6BB10C42187EF457C759CCAA36AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:30:62:20:cb:87:75:e6:d7:38:ca:d3:c5:cd:
1b:19:c9:0a:09:1f:9c:c5:b6:4f:90:c0:31:57:c1:
a4:26:8d:70:83:81:f0:2a:2d:38:ab:7c:0a:89:87:
32:73:2d:04:36:cf:82:30:e8:c3:51:55:1d:4e:39:
ab:55:83:0d:2d:f5:00:5d:72:89:fd:41:d1:3a:22:
cb:f0:28:b9:29:5c:da:a7:3b:6f:23:45:58:bd:2b:
b4:41:39:cd:d5:7e:d8:09:0c:41:32:87:a9:c5:33:
31:cd:87:c2:a5:95:64:bf:4d:3a:57:bd:16:13:47:
5a:38:05:bf:9d:f5:8d:4f:a3:b1:bf:94:da:e3:4e:
2c:fb:09:20:fc:80:26:1b:07:e0:4f:a7:5a:d9:d7:
cf:61:14:ce:ea:46:01:70:55:b2:0b:62:98:22:0d:
42:d4:02:ed:a9:51:4a:f9:eb:a6:44:0c:6a:5a:6c:
aa:31:61:53:ab:4d:bd:65:cc:5c:e8:4c:1a:64:34:
c4:fa:2c:de:62:25:df:d7:ae:04:8f:0b:2e:50:03:
40:ce:16:c9:80:da:5a:af:9d:8d:05:6b:d9:28:30:
36:0a:b9:87:7d:3e:b0:4d:29:b3:9a:79:65:58:8a:
21:fd:01:0f:43:32:c7:bc:99:e4:88:da:b8:f0:1a:
c4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:4C:6A:C9:A6:FC:6B:B1:0C:42:18:7E:F4:57:C7:59:CC:AA:36:AB
X509v3 Authority Key Identifier:
keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/HUxqyab8a7EMQhh-9FfHWcyqNqs.roa
sbgp-ipAddrBlock: critical
IPv4:
203.216.192.0/19
Signature Algorithm: sha256WithRSAEncryption
57:2d:c0:6b:5a:97:33:1e:fe:bf:8e:44:0e:b9:53:02:66:de:
6c:17:fe:67:72:1d:ce:60:3a:bf:e2:08:6a:d7:b2:97:34:95:
ff:b4:4b:f4:ec:f0:29:39:32:13:6b:a8:97:79:49:6c:ce:7d:
53:d5:f2:78:69:82:39:18:b2:e0:c9:e7:2f:f9:5a:58:f4:f3:
78:b3:54:82:3c:7b:69:2e:9d:00:55:97:7f:06:6b:32:7b:be:
37:2b:50:ce:c6:77:71:af:ea:ee:1d:fd:09:dd:e7:24:f5:e1:
18:cc:9d:7b:a8:36:dc:cf:0b:dd:9f:0a:a7:81:a0:1a:04:47:
4d:af:40:4e:fc:94:30:db:08:f3:61:e2:53:f5:26:b5:c0:5d:
08:09:33:9d:ab:cb:29:f7:fb:c8:24:00:ae:8a:40:ce:93:99:
86:36:3c:96:71:fe:eb:ed:dd:3e:b6:6c:16:ea:a8:b0:e5:e6:
28:69:fc:5e:d7:c1:ff:39:74:57:4b:ec:ee:a0:99:aa:56:26:
1f:c8:a7:77:3d:39:03:c2:13:0a:ba:56:d5:ad:85:49:b2:90:
ea:42:58:5f:f6:0c:d8:9f:50:b0:7c:45:fe:f4:df:d3:c0:2e:
a5:c9:95:12:7a:26:a8:59:41:54:d8:6d:c3:cd:78:ad:81:54:
00:8d:29:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:31 2026 by rpki-client