
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/4722/jBafkcGz4AjCDgVBvDjyDdltZOg.roa
File: jBafkcGz4AjCDgVBvDjyDdltZOg.roa (raw, json)
Hash identifier: IqfXb5u1C88P0pvsFWfhAPzPEY+NNYcFZiJ6Pv5e420=
Subject key identifier: 8C:16:9F:91:C1:B3:E0:08:C2:0E:05:41:BC:38:F2:0D:D9:6D:64:E8
Certificate issuer: /CN=35C4ED25F224BC3728CCE177A534394E0C85C3CF
Certificate serial: 38
Authority key identifier: 35:C4:ED:25:F2:24:BC:37:28:CC:E1:77:A5:34:39:4E:0C:85:C3:CF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NcTtJfIkvDcozOF3pTQ5TgyFw88.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4722/jBafkcGz4AjCDgVBvDjyDdltZOg.roa
Signing time: Tue 31 Mar 2026 08:23:45 +0000
ROA not before: Tue 31 Mar 2026 08:23:45 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 0
IP address blocks: 103.246.232.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4722/NcTtJfIkvDcozOF3pTQ5TgyFw88.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4722/NcTtJfIkvDcozOF3pTQ5TgyFw88.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NcTtJfIkvDcozOF3pTQ5TgyFw88.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35C4ED25F224BC3728CCE177A534394E0C85C3CF
Validity
Not Before: Mar 31 08:23:45 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=8C169F91C1B3E008C20E0541BC38F20DD96D64E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f4:6c:44:34:69:d2:3e:06:24:52:be:3a:39:
ee:83:34:22:5e:cf:f0:45:b5:ed:90:33:45:e8:b2:
42:c2:de:28:5f:80:64:b2:51:a8:99:5d:b6:dc:6c:
4f:38:7a:5c:66:cd:9d:7c:f8:e8:4c:de:85:3e:43:
a6:76:8a:15:c6:3c:d7:1e:7c:ff:e0:e0:6a:14:64:
d3:9a:ad:96:02:55:13:13:36:da:60:a4:85:fd:d6:
52:85:c5:2c:99:87:f5:7b:42:1d:06:c0:fe:e7:63:
15:26:ab:f9:eb:dd:0d:ac:aa:d6:c0:02:9c:c7:32:
62:56:a1:79:d4:5c:70:ee:72:a1:02:a7:5a:9f:ad:
f2:fe:9a:73:fc:c3:49:8b:bd:d1:70:a3:81:ba:e2:
8d:d6:ec:91:c4:04:b9:9a:d8:16:c6:d9:0f:ed:55:
60:a7:4e:a3:39:1f:ca:b6:e9:9c:3d:33:f8:3f:d6:
37:1c:70:55:aa:3b:7a:e1:ac:a6:13:35:69:36:4e:
75:fd:a9:4e:9b:a7:ab:8e:dc:3c:d8:37:51:d2:03:
96:82:7e:1d:b0:20:05:e3:8d:83:a5:62:af:7b:91:
51:66:a1:e2:d1:37:b5:8b:24:a2:c0:75:de:5c:52:
54:79:dc:89:d5:79:9e:0d:fe:1c:1c:d8:fa:83:e7:
c6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:16:9F:91:C1:B3:E0:08:C2:0E:05:41:BC:38:F2:0D:D9:6D:64:E8
X509v3 Authority Key Identifier:
keyid:35:C4:ED:25:F2:24:BC:37:28:CC:E1:77:A5:34:39:4E:0C:85:C3:CF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4722/NcTtJfIkvDcozOF3pTQ5TgyFw88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NcTtJfIkvDcozOF3pTQ5TgyFw88.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4722/jBafkcGz4AjCDgVBvDjyDdltZOg.roa
sbgp-ipAddrBlock: critical
IPv4:
103.246.232.0/24
Signature Algorithm: sha256WithRSAEncryption
26:d7:04:11:4b:4d:00:c3:01:54:1d:dc:a4:94:30:a0:55:9e:
dc:44:e1:4d:6b:2a:ba:a8:d1:63:70:e2:37:e2:56:0d:32:31:
f0:be:f1:27:e6:d2:2c:19:9c:93:a4:e4:bd:d8:af:b3:97:b0:
f5:31:1d:2d:fb:14:c8:65:c3:75:75:dc:c4:1f:ea:31:4f:3b:
2c:fa:a8:91:fb:f8:b8:58:21:be:9f:d5:b1:4c:78:bb:de:29:
9f:42:17:e8:ad:82:93:e7:20:6d:9c:a4:ec:87:22:54:4e:ea:
76:06:9e:49:c0:69:cc:2a:95:cc:19:b8:92:1e:5f:cd:37:f9:
4c:6e:90:a0:4a:67:2a:a1:3f:c8:bb:9c:57:8a:c0:eb:71:ce:
b9:17:eb:54:4f:55:08:20:18:2e:59:26:65:07:1c:30:ef:a5:
46:d6:ca:da:50:ae:95:e2:91:14:e7:16:ac:f5:fa:a8:95:c8:
db:a3:99:98:fb:e6:86:d1:ce:d2:20:9b:80:89:63:4b:bb:b4:
32:8f:33:3c:24:25:37:7d:ca:1d:2f:87:5d:39:18:92:13:5e:
68:83:e9:1b:40:b1:26:52:0f:ff:5e:4b:1b:b9:f4:1f:11:41:
2f:18:be:49:30:36:2a:c0:e7:a6:48:10:2f:63:6e:50:64:22:
8e:cc:ce:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:15 2026 by rpki-client