
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/87nHBaCqrgVsWZz7T-osWBpqmkI.roa
File: 87nHBaCqrgVsWZz7T-osWBpqmkI.roa (raw, json)
Hash identifier: cLalHPUGGjfEVD/me6kLx+js+P+38UmkVo3gBhXkRuw=
Subject key identifier: F3:B9:C7:05:A0:AA:AE:05:6C:59:9C:FB:4F:EA:2C:58:1A:6A:9A:42
Certificate issuer: /CN=43917B23074524E9E6EA8E40FA4A0672C9620318
Certificate serial: 91
Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/87nHBaCqrgVsWZz7T-osWBpqmkI.roa
Signing time: Tue 31 Mar 2026 07:47:23 +0000
ROA not before: Tue 31 Mar 2026 07:47:23 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 131934
IP address blocks: 61.245.208.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145 (0x91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318
Validity
Not Before: Mar 31 07:47:23 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=F3B9C705A0AAAE056C599CFB4FEA2C581A6A9A42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9a:c1:5f:87:f0:38:09:3b:cd:1b:17:84:ac:
7d:c4:d8:a0:4b:d5:28:b5:35:14:89:b2:b0:f1:7c:
6e:c7:2e:78:9e:bc:42:1c:d5:80:42:2d:64:6b:e1:
ce:b4:1c:03:e3:aa:24:17:75:9f:26:a7:bc:a1:d5:
af:52:40:b4:85:5d:5d:30:61:94:1c:69:05:92:64:
1c:90:54:55:1e:b5:81:0a:9d:16:71:4f:e4:8e:b4:
b5:de:2d:bb:e1:73:40:92:d4:e1:82:bf:da:ef:44:
87:b3:43:2e:6c:7c:ac:3d:e9:68:fd:b8:2a:b6:5e:
d4:27:6e:64:21:df:26:db:e5:de:61:36:93:48:cc:
9d:77:6f:55:57:be:5c:d4:0e:23:e9:5d:2a:34:8e:
c5:88:c0:1c:88:be:c0:ea:bd:0e:fc:69:0c:3e:00:
ef:e6:46:0c:ff:61:58:5f:04:4d:8d:22:f2:a3:f3:
7e:49:32:26:77:fb:a8:cc:35:39:08:d1:a1:94:ed:
55:9f:ab:b0:26:60:4f:9e:15:26:e1:91:c8:7f:0a:
01:41:f1:74:d6:f7:aa:9d:9b:71:be:44:c1:b4:95:
fb:44:4f:db:cb:80:74:f4:58:08:9c:cc:e2:23:6c:
f6:ec:50:4d:e1:f7:2b:8c:6e:ce:16:1f:2e:ae:21:
d6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B9:C7:05:A0:AA:AE:05:6C:59:9C:FB:4F:EA:2C:58:1A:6A:9A:42
X509v3 Authority Key Identifier:
keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/87nHBaCqrgVsWZz7T-osWBpqmkI.roa
sbgp-ipAddrBlock: critical
IPv4:
61.245.208.0/20
Signature Algorithm: sha256WithRSAEncryption
a8:a4:fe:65:97:22:81:f6:50:5c:b1:b7:67:7b:b2:fb:88:ce:
50:a0:5a:fe:b2:fc:07:d0:63:bd:0f:ec:4e:37:b1:49:9d:f4:
ef:b6:d6:3e:0e:8f:c7:cd:05:91:ff:a4:ae:d1:97:55:f8:72:
10:f9:9e:98:6e:ee:29:0f:5a:f6:5f:e8:2d:28:eb:82:39:08:
9b:5d:c7:0a:de:5e:f8:a9:ab:0a:6a:81:ab:2f:0d:28:21:01:
75:8b:88:54:93:a0:41:a5:06:0d:39:0f:23:bf:b7:52:3b:14:
14:5b:b4:84:2e:09:05:d0:5d:c3:82:ff:8c:85:c0:ee:94:49:
e7:e6:89:78:02:17:94:6d:71:95:12:50:48:12:88:37:89:72:
df:2c:85:63:6a:32:2c:5d:54:3f:1c:db:43:d2:a6:51:d0:85:
1c:db:98:c0:41:8c:58:9b:00:02:e8:fb:ce:8a:78:6b:a3:f3:
5f:55:51:ab:1e:78:bc:74:6d:c8:c8:c0:67:ef:5e:49:89:22:
8f:3d:a4:8d:2d:02:44:ad:82:2a:17:65:e4:ae:ba:f1:25:f9:
69:cb:0a:04:49:09:f5:ad:a2:d2:07:6c:cc:0d:cf:dc:4f:80:
3d:0e:92:a4:50:5d:57:81:e7:70:91:6a:ee:d5:b4:3f:9b:85:
87:d7:88:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:34:00 2026 by rpki-client