
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/373/z0VmfeV8vGM2VaTjOL1pr8tFOY0.roa
File: z0VmfeV8vGM2VaTjOL1pr8tFOY0.roa (raw, json)
Hash identifier: ZsFCqZWfj+E5AGpyGA2746Cp7iR6imwvmevf2et0juk=
Subject key identifier: CF:45:66:7D:E5:7C:BC:63:36:55:A4:E3:38:BD:69:AF:CB:45:39:8D
Certificate issuer: /CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
Certificate serial: 5F
Authority key identifier: 89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/z0VmfeV8vGM2VaTjOL1pr8tFOY0.roa
Signing time: Tue 31 Mar 2026 08:23:27 +0000
ROA not before: Tue 31 Mar 2026 08:23:27 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9615
IP address blocks: 182.255.64.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95 (0x5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
Validity
Not Before: Mar 31 08:23:27 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=CF45667DE57CBC633655A4E338BD69AFCB45398D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:63:05:d0:f9:94:be:83:fc:95:a0:46:1e:14:
85:d7:fb:aa:4a:fb:7a:58:b3:55:67:cf:ef:3b:f8:
cd:60:4a:a0:8b:e2:3c:36:90:7f:ed:52:69:a8:88:
12:fa:06:8e:42:f2:72:33:4c:7b:ea:33:50:b8:d3:
6b:81:6e:ad:ed:b3:b9:7b:b5:a3:76:e9:f4:11:c7:
2a:3a:c5:fd:c9:f8:1e:a0:66:14:20:99:6d:72:37:
9a:0b:2c:09:9a:c4:c7:75:29:7d:45:2c:70:35:0e:
c0:87:e4:a0:58:ff:64:c4:9e:ea:8d:78:37:40:26:
3c:86:89:fb:17:d5:16:87:18:8d:db:70:5e:7f:ea:
b1:04:33:81:e1:d3:ac:a9:be:ed:8c:22:4d:c8:d3:
b4:f7:33:0a:32:22:46:a7:0a:d3:f9:9c:e0:e7:ae:
b5:87:70:1e:39:9c:b4:4a:c7:f9:07:6b:95:91:ad:
af:06:37:19:e4:b6:f6:6d:a1:25:bd:5a:00:37:99:
21:8c:97:e2:31:c0:1d:39:16:38:6c:39:c0:c4:5b:
c1:37:c5:28:af:15:7f:7f:c3:46:eb:6a:ec:52:a3:
cf:dc:81:b7:b0:35:a3:ff:88:b0:90:30:b9:2a:09:
80:24:77:8d:92:30:e8:af:50:2f:e3:9c:93:59:a0:
54:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:45:66:7D:E5:7C:BC:63:36:55:A4:E3:38:BD:69:AF:CB:45:39:8D
X509v3 Authority Key Identifier:
keyid:89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/z0VmfeV8vGM2VaTjOL1pr8tFOY0.roa
sbgp-ipAddrBlock: critical
IPv4:
182.255.64.0/20
Signature Algorithm: sha256WithRSAEncryption
44:2e:94:0c:c0:25:f4:e9:b3:33:fa:2c:96:12:da:ca:3a:d9:
16:2e:da:8a:11:71:84:fe:8a:45:33:27:df:a0:80:17:5c:95:
e7:54:c5:47:a9:3b:6c:4b:8a:48:fd:bb:46:10:c4:0a:63:4c:
67:e7:2f:9b:99:f2:1c:f1:ac:51:c9:92:96:a0:a0:80:15:ac:
db:52:14:c4:30:1b:a2:a7:d5:36:3e:12:72:5b:d5:a6:36:e9:
34:ea:fc:26:0b:2a:b8:58:32:dd:34:aa:7f:d5:05:7d:97:c7:
2f:2b:cc:5e:ca:e9:b3:7a:75:97:2c:b5:eb:f1:fc:3c:e3:43:
01:c3:fe:1e:55:2c:75:8d:94:e5:1a:a2:5b:dc:fd:3d:66:e6:
8a:67:42:c9:06:ba:47:53:28:36:27:d1:64:c1:86:73:00:e3:
ad:0b:6c:dd:0d:23:82:27:37:f9:82:11:b8:ce:8d:48:eb:5d:
87:af:ac:e5:3d:9e:d5:ef:47:84:4a:25:07:85:a0:6e:94:92:
ab:25:48:39:c9:f2:a9:06:43:9e:c7:06:7b:15:81:ca:85:5c:
8d:8d:5c:f9:87:1b:78:68:8c:2a:b4:2d:82:e6:1e:2a:dd:6a:
7e:34:52:6f:90:5d:6d:9e:b6:2f:38:e0:f4:13:ec:19:65:c2:
0d:b6:98:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:22 2026 by rpki-client