
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/373/2AKEvQYaBOvreQH3C1MnTRAwU-A.roa
File: 2AKEvQYaBOvreQH3C1MnTRAwU-A.roa (raw, json)
Hash identifier: EHqMIRp7v+w5upJrrgErtpwVIVQUvxFzkMKMN4AKsJU=
Subject key identifier: D8:02:84:BD:06:1A:04:EB:EB:79:01:F7:0B:53:27:4D:10:30:53:E0
Certificate issuer: /CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
Certificate serial: 64
Authority key identifier: 89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/2AKEvQYaBOvreQH3C1MnTRAwU-A.roa
Signing time: Tue 31 Mar 2026 08:23:29 +0000
ROA not before: Tue 31 Mar 2026 08:23:29 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9615
IP address blocks: 203.141.112.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100 (0x64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
Validity
Not Before: Mar 31 08:23:29 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=D80284BD061A04EBEB7901F70B53274D103053E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b2:2c:73:c9:e5:39:f5:63:5f:11:bd:71:f0:
75:c5:c9:b7:e6:e0:2d:7f:5b:7c:5b:95:6e:5b:a3:
33:f5:26:c3:21:e6:96:ca:60:33:33:be:8b:7f:36:
22:0d:dd:ee:0c:d7:f0:67:83:3d:61:4d:b1:af:37:
0c:93:ee:97:67:59:ca:9d:de:10:4a:c9:f4:d9:04:
c1:b8:9d:9d:6e:09:bc:3e:fa:e3:49:97:e8:bc:80:
61:41:92:6b:6f:8b:e6:82:ed:f9:14:bb:c5:1e:cd:
4d:0b:e3:30:b5:ee:5a:67:94:06:3f:ee:ec:d3:3d:
9e:e6:07:30:9b:a6:31:12:de:31:fd:7f:be:51:ca:
45:1c:04:1f:f9:4b:81:76:22:31:14:21:d2:a8:23:
a6:6a:f3:39:c2:32:cb:0b:71:36:f2:c7:e0:22:ac:
b5:fb:74:9d:99:87:5f:68:53:35:42:25:a6:6c:65:
7d:1d:77:b0:6b:e0:4b:17:6f:84:3d:d2:20:78:d7:
e5:6e:16:91:17:b7:c7:29:a3:0c:e8:db:8f:3f:30:
e0:78:a7:a2:d4:b9:31:ba:7d:36:42:7d:ad:c9:18:
06:ca:bd:32:fd:ca:e2:a0:8a:3d:a7:6d:16:0a:3a:
4a:50:41:6c:c3:8f:ac:76:d1:33:a8:7c:3a:52:6b:
51:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:02:84:BD:06:1A:04:EB:EB:79:01:F7:0B:53:27:4D:10:30:53:E0
X509v3 Authority Key Identifier:
keyid:89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/2AKEvQYaBOvreQH3C1MnTRAwU-A.roa
sbgp-ipAddrBlock: critical
IPv4:
203.141.112.0/20
Signature Algorithm: sha256WithRSAEncryption
46:9b:80:d5:3b:83:ad:23:fd:07:5b:20:10:bb:31:8e:77:b4:
20:5b:e6:71:26:d6:78:6b:73:51:32:3a:18:55:eb:4c:25:3e:
5e:75:b2:27:69:b3:e7:f7:45:0e:ce:b6:ba:ef:07:a8:09:8c:
c7:fc:b2:ea:9f:23:81:8b:42:3e:13:62:76:bb:50:d1:23:d8:
eb:31:a6:4c:90:18:21:64:6e:a8:7c:b5:1a:c3:42:c1:b5:e7:
11:a6:8b:17:70:16:2b:2c:28:d0:c5:73:3f:82:73:f1:85:ae:
4a:d4:30:02:01:4c:3e:82:ce:82:41:d9:c9:35:94:1a:c7:db:
25:d0:eb:45:d4:80:54:a3:42:1f:7b:14:50:4e:6c:64:81:1d:
98:7d:a8:0d:2f:81:ed:b9:34:ab:e2:43:78:82:f0:4c:56:e8:
57:e0:5c:ed:4f:e7:e6:a1:33:7c:77:67:d8:86:ec:7a:b9:56:
83:c3:82:31:f9:14:dd:2e:cc:16:29:49:cd:25:1e:3b:a1:7b:
b2:99:f4:86:9c:c0:61:e0:1e:b0:b5:00:30:26:59:26:de:13:
30:69:09:0b:ee:5d:6c:da:02:97:dd:6b:e3:d2:25:0d:d7:17:
46:f7:1d:62:48:5a:40:b7:93:8d:dc:92:39:8e:fd:db:7e:cc:
28:41:df:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:27 2026 by rpki-client