
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/368/Strx_-cb5HBT1Te0BitLgS00Um0.roa
File: Strx_-cb5HBT1Te0BitLgS00Um0.roa (raw, json)
Hash identifier: /lelt/Y5Zq7ZY0eY9ttpHrJiwuZmlw/lSFAY7GlWb+4=
Subject key identifier: 4A:DA:F1:FF:E7:1B:E4:70:53:D5:37:B4:06:2B:4B:81:2D:34:52:6D
Certificate issuer: /CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756
Certificate serial: 7A
Authority key identifier: 3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/Strx_-cb5HBT1Te0BitLgS00Um0.roa
Signing time: Thu 09 Jul 2026 08:01:04 +0000
ROA not before: Thu 09 Jul 2026 08:01:04 +0000
ROA not after: Tue 15 Jun 2027 01:30:02 +0000
asID: 7671
IP address blocks: 202.211.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 19:12:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122 (0x7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756
Validity
Not Before: Jul 9 08:01:04 2026 GMT
Not After : Jun 15 01:30:02 2027 GMT
Subject: CN=4ADAF1FFE71BE47053D537B4062B4B812D34526D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:87:3f:6e:19:69:ff:24:a1:09:40:25:76:7e:
28:25:27:50:57:98:5e:09:1f:ba:86:d7:df:cb:26:
33:7e:4b:9a:29:bd:98:e4:bf:38:d9:ac:b4:a5:ed:
73:dc:da:2a:cf:c3:97:31:f3:83:db:48:d6:ca:b0:
f7:41:32:20:2f:13:7a:3a:98:a3:83:77:7e:19:bd:
96:b3:d2:72:dc:57:95:88:d0:af:69:0a:20:e4:a8:
97:59:6b:31:e8:39:86:f4:e6:05:7b:7d:f1:7e:d9:
5a:fc:68:94:02:70:58:dd:7e:7b:5e:19:e1:44:a4:
c4:e3:61:39:20:17:a3:79:f8:10:84:be:77:dc:76:
da:93:c6:15:a5:dd:6a:a3:6a:42:b3:cd:ac:cd:cf:
73:c8:17:15:de:5d:45:06:c9:ad:d3:13:99:6f:44:
1a:80:61:7c:fc:e4:92:9a:d7:3c:f4:a7:c7:4e:7e:
29:3e:05:c1:cf:cd:3f:e7:40:ce:50:8d:8f:52:1f:
be:17:09:80:f2:a7:9f:20:93:2c:e2:7e:16:be:33:
91:e0:de:d2:07:00:71:68:c6:bd:ce:50:ee:a2:1d:
32:ef:5c:4d:b9:8d:e8:50:50:23:9e:18:b6:f2:1b:
75:47:bb:93:6b:a5:ce:35:8a:94:51:47:39:1e:aa:
ea:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DA:F1:FF:E7:1B:E4:70:53:D5:37:B4:06:2B:4B:81:2D:34:52:6D
X509v3 Authority Key Identifier:
keyid:3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/Strx_-cb5HBT1Te0BitLgS00Um0.roa
sbgp-ipAddrBlock: critical
IPv4:
202.211.112.0/20
Signature Algorithm: sha256WithRSAEncryption
15:30:73:c0:c1:7a:0a:47:21:a8:51:f9:53:23:e2:3b:66:4e:
33:d5:81:54:ed:26:d7:8b:ea:48:7e:30:8d:fb:39:67:27:0e:
6a:d2:75:e8:f5:e8:d0:22:32:83:41:4f:d0:1e:be:7f:30:12:
e3:d5:0b:b7:cb:2e:8f:c1:48:e3:b2:88:18:df:da:9c:9f:18:
39:c6:b5:1a:49:47:1d:92:15:e2:07:04:4f:6a:12:13:cb:61:
ee:99:9e:26:6b:00:9e:fb:20:0a:5e:09:c6:7e:ca:cb:55:05:
e3:ca:3d:6d:46:b3:9c:db:70:b9:37:80:fd:d3:93:b8:86:23:
d3:a0:85:02:7d:42:80:4c:47:37:cb:8b:d7:a6:97:63:3b:46:
fb:bb:72:cd:81:49:68:b0:4f:0a:90:89:a8:8e:6c:c7:46:39:
94:04:eb:9a:94:8a:8e:06:90:a6:9f:9a:3e:2b:7e:a3:bb:b0:
06:69:c6:a3:b9:87:a6:52:4f:68:0b:ca:e5:2c:ed:53:67:c1:
ba:c5:9d:47:a8:e3:be:99:69:df:2a:10:b8:52:95:4a:22:17:
54:34:f4:c6:9e:66:70:9a:18:25:9a:aa:bf:4e:a7:ec:96:c2:
2a:45:6b:6f:cd:55:bd:ca:8c:6c:8a:43:8a:8b:43:3f:14:6a:
aa:62:f7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:05:50 2026 by rpki-client