
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/433/NcO0LKrRepAx_1DB1UkdvT77Iec.roa
File: NcO0LKrRepAx_1DB1UkdvT77Iec.roa (raw, json)
Hash identifier: 8OZz+4l2P1tLxbeZw7KKM/+wHRfAh1AW0UJYaojRzJs=
Subject key identifier: 35:C3:B4:2C:AA:D1:7A:90:31:FF:50:C1:D5:49:1D:BD:3E:FB:21:E7
Certificate issuer: /CN=56B24E383845AFE7DAA631C01D80FB516C348BB0
Certificate serial: 18
Authority key identifier: 56:B2:4E:38:38:45:AF:E7:DA:A6:31:C0:1D:80:FB:51:6C:34:8B:B0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VrJOODhFr-fapjHAHYD7UWw0i7A.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/433/NcO0LKrRepAx_1DB1UkdvT77Iec.roa
Signing time: Tue 31 Mar 2026 08:45:45 +0000
ROA not before: Tue 31 Mar 2026 08:45:45 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 18077
IP address blocks: 122.250.0.0/15 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/433/VrJOODhFr-fapjHAHYD7UWw0i7A.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/433/VrJOODhFr-fapjHAHYD7UWw0i7A.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VrJOODhFr-fapjHAHYD7UWw0i7A.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56B24E383845AFE7DAA631C01D80FB516C348BB0
Validity
Not Before: Mar 31 08:45:45 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=35C3B42CAAD17A9031FF50C1D5491DBD3EFB21E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e5:4a:7a:6e:47:db:89:bd:94:51:75:f5:ff:
10:01:d6:8e:c9:69:06:6b:f2:ee:5f:b4:c5:7c:ae:
47:51:e9:ca:31:cf:28:ac:d7:b6:47:31:87:96:d7:
d6:18:e4:6c:5d:27:f6:bb:03:63:47:2f:52:a1:4b:
5e:3a:3c:93:f3:d6:2d:a5:2c:cc:c8:4c:3f:c6:26:
a2:55:d3:da:ea:de:e3:13:4c:11:32:7b:cf:e3:b6:
80:21:36:23:72:d4:4f:2a:96:e4:df:f9:ea:9d:3b:
eb:b4:09:d1:ca:b7:6b:8a:8e:5c:b3:0a:45:31:06:
a7:a9:28:1f:41:8b:b9:98:04:60:0f:ee:0b:ae:e8:
d7:d4:08:e4:35:23:8a:35:bc:ac:90:34:41:f2:30:
fa:9c:9e:43:f4:15:43:3e:8f:f1:09:e1:1c:5e:b8:
e6:35:1b:80:06:86:76:34:14:d9:49:e3:23:7a:b5:
98:a4:d3:1e:86:37:b1:2a:64:49:63:fd:58:e3:b6:
b8:1f:32:66:51:c9:72:3c:4b:df:25:c4:64:5c:54:
cc:cb:d0:44:e5:58:be:2a:ea:d5:35:f4:92:f2:f9:
9f:98:01:dd:ec:92:68:10:d9:cb:84:0f:03:30:86:
55:0e:82:e0:9d:04:bf:c1:07:4e:81:bf:ca:8b:9e:
b8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C3:B4:2C:AA:D1:7A:90:31:FF:50:C1:D5:49:1D:BD:3E:FB:21:E7
X509v3 Authority Key Identifier:
keyid:56:B2:4E:38:38:45:AF:E7:DA:A6:31:C0:1D:80:FB:51:6C:34:8B:B0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/433/VrJOODhFr-fapjHAHYD7UWw0i7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VrJOODhFr-fapjHAHYD7UWw0i7A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/433/NcO0LKrRepAx_1DB1UkdvT77Iec.roa
sbgp-ipAddrBlock: critical
IPv4:
122.250.0.0/15
Signature Algorithm: sha256WithRSAEncryption
5a:9e:f5:f8:eb:7d:3e:09:93:77:b8:bb:88:a1:ca:60:9b:40:
62:2a:ed:7b:4d:05:f3:a4:e3:66:1b:ec:be:ee:de:5b:1a:10:
75:8d:f6:32:03:93:8d:cd:7d:85:f9:e3:a3:0c:4c:9a:15:1f:
1d:82:65:a1:cb:de:c3:2e:51:22:6d:d0:3b:a7:2c:5d:27:66:
2e:c3:73:a5:23:e9:7e:e5:d3:d7:75:37:7c:0c:d4:89:81:e4:
88:ef:e9:19:b2:a1:80:25:6a:9a:b1:d2:2f:d8:e5:81:99:50:
6b:bc:b1:79:52:36:56:39:1e:1b:79:7a:43:53:b4:c1:92:23:
04:72:61:2d:53:e1:c6:5b:9e:bc:d8:c3:fb:20:e9:e8:43:77:
3a:3a:c6:22:9b:98:30:4c:b7:53:44:68:38:b8:ac:ef:48:d1:
a7:72:77:2d:e9:0a:82:9a:55:3f:5a:6d:69:aa:a8:28:32:f7:
b6:69:08:47:c5:34:d5:97:b1:62:67:18:fd:af:b4:20:eb:38:
89:fc:5c:c4:be:7e:31:95:df:cc:e9:a7:ec:25:ca:cd:05:8b:
98:32:0f:d1:3f:ad:4a:7d:9f:36:ec:e8:2a:65:c6:78:cd:8c:
07:75:c4:3f:9d:bc:f4:9c:9c:a7:98:37:01:3d:83:ed:3a:5e:
1b:f5:05:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:05 2026 by rpki-client