
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/0XTA6CiAMmA_rHQhobH1C8bCRaI.roa
File: 0XTA6CiAMmA_rHQhobH1C8bCRaI.roa (raw, json)
Hash identifier: 7L+tH303wAjeZ1LJkCQZQBOR+WMFfHxTHqz1Gs0Bf9w=
Subject key identifier: D1:74:C0:E8:28:80:32:60:3F:AC:74:21:A1:B1:F5:0B:C6:C2:45:A2
Certificate issuer: /CN=43917B23074524E9E6EA8E40FA4A0672C9620318
Certificate serial: 98
Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/0XTA6CiAMmA_rHQhobH1C8bCRaI.roa
Signing time: Tue 31 Mar 2026 07:47:27 +0000
ROA not before: Tue 31 Mar 2026 07:47:27 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 10019
IP address blocks: 218.45.32.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152 (0x98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318
Validity
Not Before: Mar 31 07:47:27 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=D174C0E8288032603FAC7421A1B1F50BC6C245A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:52:04:70:93:f1:e1:3e:09:55:cf:88:d2:94:
cd:ce:2b:2f:28:80:fc:04:15:10:54:e0:22:4e:01:
2c:a8:60:42:18:85:b7:6c:26:dd:60:4a:a2:be:8c:
b2:bc:ad:a5:a2:9b:8b:c3:b9:71:e9:92:d3:81:0b:
ec:83:f8:76:fd:4c:5a:4b:8d:9c:99:bd:4d:71:75:
9f:31:cb:9b:51:35:c3:79:c8:b6:d1:23:fe:bc:ae:
f4:99:bc:d6:63:da:39:28:a2:a9:d2:eb:53:3e:a5:
81:06:46:3a:f2:3d:f0:fb:5b:83:bb:ef:b9:b6:69:
b4:95:b1:49:93:cc:0f:40:91:2b:7d:d1:04:fb:ce:
5c:dc:38:d8:ed:3f:0a:dc:08:46:9e:72:18:04:68:
51:d1:f1:22:26:af:89:e8:67:70:3e:c8:fb:aa:8b:
61:71:71:ff:1f:97:24:17:19:57:f2:72:4c:03:7d:
00:c6:12:f0:58:ba:05:49:71:a6:d1:0b:a9:20:37:
23:af:45:e2:24:2a:d0:bb:27:6d:a9:a4:a2:9a:46:
9c:dc:73:10:b0:b8:1c:8e:13:1e:fc:85:d6:78:4b:
30:03:1e:4a:0f:da:ce:09:af:78:e3:43:a7:44:34:
c1:13:79:fc:cd:5d:20:74:f3:d3:4c:f0:8e:73:75:
2d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:74:C0:E8:28:80:32:60:3F:AC:74:21:A1:B1:F5:0B:C6:C2:45:A2
X509v3 Authority Key Identifier:
keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/0XTA6CiAMmA_rHQhobH1C8bCRaI.roa
sbgp-ipAddrBlock: critical
IPv4:
218.45.32.0/20
Signature Algorithm: sha256WithRSAEncryption
a3:bc:65:33:3c:75:43:2e:83:51:c5:56:5c:dc:3f:38:59:61:
73:c8:b3:c0:2a:8c:9a:c3:e2:11:2e:2b:4c:d8:43:c5:21:11:
ef:d2:49:89:5c:f4:f3:eb:0c:d7:1e:e4:e4:06:70:0c:24:86:
1e:96:81:94:f5:c2:a4:96:91:8c:7f:bc:34:d6:6f:1b:4d:91:
f9:b7:17:5e:14:34:8b:68:97:0d:7a:8f:36:f0:5c:c0:6d:f1:
49:2f:dc:da:a6:e8:2b:2c:15:d1:65:34:97:17:78:d3:34:17:
bb:f8:f0:c9:fe:2f:14:1c:74:e1:0a:5f:05:b1:93:a7:a7:a0:
2d:d8:04:00:60:e3:93:0d:fc:63:f4:26:59:d4:76:0d:46:41:
60:13:3d:23:65:4d:a9:bf:66:32:8e:23:d1:a2:04:14:70:ba:
48:8e:a8:3d:0b:00:dd:ae:02:74:d1:e4:6e:0d:04:bc:a9:7f:
eb:08:22:d0:b6:75:4c:87:fe:9b:22:33:23:54:80:98:7c:34:
2b:5a:25:e3:a5:db:e5:b4:ae:11:99:4d:72:46:90:6e:28:79:
db:b8:d2:7f:a1:56:74:8c:f9:75:cf:d5:d7:a1:79:8f:39:7a:
9d:fb:49:e5:35:3c:2d:e1:50:8a:08:55:cf:b6:70:e2:a7:bd:
e7:fd:a8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:33:47 2026 by rpki-client