
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/373/ijnY7GiCx7xDmR0FiiLVtFCwh4w.roa
File: ijnY7GiCx7xDmR0FiiLVtFCwh4w.roa (raw, json)
Hash identifier: LCZwmQBf3ymjDmcRwhl+XHaBZHLc9Xsk/L6D+xqIJZk=
Subject key identifier: 8A:39:D8:EC:68:82:C7:BC:43:99:1D:05:8A:22:D5:B4:50:B0:87:8C
Certificate issuer: /CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
Certificate serial: 5D
Authority key identifier: 89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ijnY7GiCx7xDmR0FiiLVtFCwh4w.roa
Signing time: Tue 31 Mar 2026 08:23:26 +0000
ROA not before: Tue 31 Mar 2026 08:23:26 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9615
IP address blocks: 119.63.112.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
Validity
Not Before: Mar 31 08:23:26 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=8A39D8EC6882C7BC43991D058A22D5B450B0878C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:85:40:70:18:a7:8f:96:77:f2:22:ee:5e:3f:
bb:74:2d:72:cf:ab:d5:19:cb:ef:b2:ed:c6:e2:52:
e2:8f:65:e9:0d:6f:be:28:43:4c:8b:2a:f4:21:f5:
7d:9a:a7:2c:db:a4:c2:f4:cb:82:9e:60:82:f0:dc:
69:00:9b:bb:64:a9:5d:5f:08:e6:96:93:1d:38:b8:
c2:2c:a2:06:75:f8:6e:83:8e:16:f2:2c:59:c2:69:
84:a0:27:3e:57:05:49:2e:b5:52:bf:af:9f:f5:60:
dc:dd:87:8f:09:9a:ca:d8:8c:0c:e2:04:b5:27:00:
99:5c:c1:fc:99:1b:5b:98:4a:c3:65:e5:d4:c3:fa:
70:20:eb:20:af:bb:7f:c6:03:06:44:06:35:8d:e3:
6e:c5:81:ea:60:b4:0d:d2:da:2a:df:e0:cd:9a:ee:
9f:24:a0:ea:96:67:b0:a1:db:66:86:86:cd:08:c2:
b0:ac:95:60:94:8e:a5:4e:84:f9:99:36:8f:cd:38:
d6:8d:ce:aa:bc:b8:0a:f7:d0:cc:ee:eb:38:e8:e4:
af:ad:03:0e:6e:09:29:3e:79:60:87:a4:65:88:ae:
65:2a:71:08:c4:15:17:78:5d:fb:0a:f5:32:7f:4f:
d0:2a:e4:64:3a:85:f7:fc:cc:90:f9:2c:5e:ec:88:
d1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:39:D8:EC:68:82:C7:BC:43:99:1D:05:8A:22:D5:B4:50:B0:87:8C
X509v3 Authority Key Identifier:
keyid:89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ijnY7GiCx7xDmR0FiiLVtFCwh4w.roa
sbgp-ipAddrBlock: critical
IPv4:
119.63.112.0/20
Signature Algorithm: sha256WithRSAEncryption
8d:71:93:28:e5:4d:f0:62:4b:6f:d4:c5:5a:40:76:89:a5:7b:
94:8b:83:39:f7:7e:3a:e3:0b:a5:60:40:7e:a9:61:18:ee:cd:
08:40:3e:ec:8b:fb:61:5c:a0:f9:7c:64:62:e1:1a:17:1a:dc:
27:a9:a9:63:06:ef:66:be:4e:16:62:03:a5:c6:75:76:2c:ff:
08:e8:9f:24:14:c4:32:78:3d:fc:df:e7:59:0c:88:41:ad:c7:
05:dc:a8:f9:90:44:a0:ff:78:4d:31:41:e6:1c:e6:da:ba:d9:
76:fe:db:dd:eb:60:cc:ba:1c:c6:50:a9:d0:e6:a7:9f:e6:f8:
36:7b:a8:b4:d5:7f:c1:c7:8f:0e:41:a1:61:e0:fa:5c:4a:a6:
bc:cf:aa:2e:98:05:2a:6d:fc:6c:d9:8f:46:24:5e:a0:0f:01:
de:9d:2d:9f:1e:b7:41:5a:f6:d4:7f:28:5b:ac:a2:d5:27:8d:
d3:4d:51:d0:63:4d:ab:04:18:e1:59:53:2f:8e:53:c8:fb:e1:
02:ea:6c:ed:55:51:55:9b:4c:60:21:90:ae:0b:47:e1:06:e8:
fb:ea:a6:45:4e:ac:a7:09:fb:36:68:ef:6b:bc:59:25:21:f5:
47:a2:87:4b:a9:db:10:e4:31:b9:0f:9b:7f:db:49:c2:c7:c1:
fe:bf:88:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:20 2026 by rpki-client