
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/9K_RRF0ypbWqzoqiR5QG_MoA8HE.roa
File: 9K_RRF0ypbWqzoqiR5QG_MoA8HE.roa (raw, json)
Hash identifier: McAXdgVo9v/3Fj0YFGcRgPpumhNXLIpN3z5s0ljJvh8=
Subject key identifier: F4:AF:D1:44:5D:32:A5:B5:AA:CE:8A:A2:47:94:06:FC:CA:00:F0:71
Certificate issuer: /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial: 82
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/9K_RRF0ypbWqzoqiR5QG_MoA8HE.roa
Signing time: Tue 31 Mar 2026 08:24:31 +0000
ROA not before: Tue 31 Mar 2026 08:24:31 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 10000
IP address blocks: 103.29.48.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 14:08:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130 (0x82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Validity
Not Before: Mar 31 08:24:31 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=F4AFD1445D32A5B5AACE8AA2479406FCCA00F071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:32:63:de:66:80:45:2e:0a:50:c2:80:86:5f:
80:22:fa:16:92:c1:5b:17:50:b0:db:ac:93:54:e6:
24:98:f6:f4:93:c2:87:a7:3c:4d:d7:4f:46:f2:25:
3b:73:62:c5:47:1b:51:7c:a0:05:84:72:5e:78:b9:
44:6c:80:4f:e3:09:4b:ee:ae:60:9f:f7:de:86:b2:
71:40:33:74:26:a2:30:91:d1:e1:74:0c:3e:4c:42:
0a:9c:04:24:1c:34:22:2d:32:e2:be:c9:18:56:06:
57:3d:08:58:9d:ee:f6:48:07:54:12:2c:61:8b:f5:
b4:00:01:7f:12:a8:47:fa:c1:8b:e9:40:5b:0e:06:
bb:d2:e8:df:b4:82:05:ac:90:5e:33:12:fe:01:48:
ae:17:93:f6:71:6f:2c:00:df:1e:1a:ed:3c:0c:3c:
e7:32:d7:cd:3a:3b:8f:e6:00:9d:06:e8:0d:a5:b2:
00:ae:b8:f8:c4:45:fe:ff:9a:63:ca:1f:5f:99:28:
0f:91:c2:39:fd:1b:e5:77:d2:e2:7a:e4:01:2d:13:
7b:b9:56:5f:32:1b:1b:91:f3:2f:e5:22:b3:ba:bb:
22:41:62:0a:db:c2:2f:cf:ea:6b:52:61:fe:46:bf:
28:ba:7f:ca:0a:8e:b0:b4:5b:dd:ec:cf:85:32:03:
69:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AF:D1:44:5D:32:A5:B5:AA:CE:8A:A2:47:94:06:FC:CA:00:F0:71
X509v3 Authority Key Identifier:
keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/9K_RRF0ypbWqzoqiR5QG_MoA8HE.roa
sbgp-ipAddrBlock: critical
IPv4:
103.29.48.0/22
Signature Algorithm: sha256WithRSAEncryption
12:7c:b5:23:a1:3b:d3:6e:55:f9:47:37:a2:41:a5:60:f5:9c:
1f:0b:1d:5a:f2:3f:3d:65:23:cc:7e:1e:b8:0a:0d:c5:1f:a3:
e9:50:ac:92:2c:da:5f:4d:5e:a2:01:ac:cb:e0:82:d0:ea:e4:
71:b5:22:12:cb:dd:f8:cc:70:b9:18:c0:ec:77:19:00:da:97:
6d:e8:c8:cc:eb:9f:d5:79:dc:0d:46:2f:97:9c:2a:4f:97:14:
6f:3e:63:c5:0e:f6:f1:08:22:53:54:ae:18:4e:92:c1:e7:99:
f4:4d:45:76:c9:99:de:00:2f:a0:bc:51:76:89:b9:83:35:cd:
0e:2e:37:f5:3f:55:f0:a1:ea:50:ee:15:09:d7:dd:99:35:ef:
e3:ed:fa:ad:70:41:ff:71:d5:10:71:68:0e:66:fa:1f:c4:86:
92:8b:06:22:74:9d:77:fe:e7:c5:b6:32:7c:62:c3:65:b6:16:
46:01:a4:51:a0:cc:10:33:a9:4b:c6:7c:b9:01:d3:21:7b:8f:
a4:0d:99:5a:34:4a:16:d8:c1:76:f2:ce:79:44:17:3d:60:b8:
b3:b6:6a:7c:93:46:95:db:47:c2:71:7d:a4:ca:87:bb:61:73:
8d:54:41:aa:a7:6a:be:a1:0a:76:ff:8d:5b:e6:0d:c9:be:ef:
b2:f2:1b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 16:28:56 2026 by rpki-client