
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/ApIT_JKISpEW6lif6r7ehaOU1XI.roa
File: ApIT_JKISpEW6lif6r7ehaOU1XI.roa (raw, json)
Hash identifier: ZoIKaeQneJCMj3Pjjw8K6AAwW+x+FRAtMq+cGEzZ2J8=
Subject key identifier: 02:92:13:FC:92:88:4A:91:16:EA:58:9F:EA:BE:DE:85:A3:94:D5:72
Certificate issuer: /CN=677198612266777D83A2DB4A1E9E147C72A5D76D
Certificate serial: 4B
Authority key identifier: 67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/ApIT_JKISpEW6lif6r7ehaOU1XI.roa
Signing time: Tue 31 Mar 2026 08:49:32 +0000
ROA not before: Tue 31 Mar 2026 08:49:32 +0000
ROA not after: Wed 24 Mar 2027 01:46:06 +0000
asID: 17511
IP address blocks: 219.100.52.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75 (0x4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677198612266777D83A2DB4A1E9E147C72A5D76D
Validity
Not Before: Mar 31 08:49:32 2026 GMT
Not After : Mar 24 01:46:06 2027 GMT
Subject: CN=029213FC92884A9116EA589FEABEDE85A394D572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:61:b2:c4:88:49:95:84:37:be:1c:19:20:e4:
23:7e:42:f4:30:e9:8d:8f:03:69:0e:5b:15:ca:62:
48:45:f0:64:0d:0b:11:ec:ad:d0:69:bb:d2:d4:03:
9b:ea:6d:c2:23:0c:e7:3c:c2:77:1e:20:4d:bf:3a:
a5:f5:6f:7d:77:29:0c:35:74:a0:0f:84:f7:00:5e:
19:c2:e8:a3:88:34:a1:a0:1a:4d:38:bf:7b:13:b4:
e9:dc:8b:f6:4a:da:be:4d:03:04:44:55:3c:17:a2:
05:d8:a8:0f:a5:6e:44:ea:a8:f9:9b:5e:a0:2b:de:
ba:61:ed:10:ed:74:29:d2:b8:34:14:38:52:b7:9c:
0a:3e:94:67:ea:92:b8:8b:14:3a:59:0e:f5:f6:a2:
2d:aa:24:e2:6a:be:bf:a7:1f:8b:4b:48:8c:1b:70:
5f:be:91:ae:c9:ef:c0:36:7c:85:51:44:4a:2f:86:
1e:87:bd:fe:9e:f8:da:7d:6b:f0:85:1a:8d:6e:63:
39:29:45:2a:8c:8b:aa:a4:da:98:ac:3d:2e:da:43:
de:d6:3d:37:7b:f0:83:79:8d:fa:8c:de:7f:39:c2:
6c:a0:3f:e1:5a:b9:bc:d3:53:87:8c:6f:e7:6a:2e:
78:b7:3b:c5:0c:6e:9b:dd:cd:4c:4b:b4:d7:d4:08:
58:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:92:13:FC:92:88:4A:91:16:EA:58:9F:EA:BE:DE:85:A3:94:D5:72
X509v3 Authority Key Identifier:
keyid:67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/ApIT_JKISpEW6lif6r7ehaOU1XI.roa
sbgp-ipAddrBlock: critical
IPv4:
219.100.52.0/22
Signature Algorithm: sha256WithRSAEncryption
28:66:c3:e5:c1:b8:99:62:40:8f:8b:ea:19:98:3a:d5:37:f4:
16:1e:dc:7e:dc:6c:88:f0:1f:98:27:92:c0:10:76:82:d5:7e:
14:c1:68:76:95:ed:f1:e7:13:51:3f:21:55:e8:80:6a:e3:af:
cf:8d:79:f8:a6:0d:58:a5:43:65:27:ff:5a:a9:f0:3a:28:49:
6a:15:70:27:de:a5:f8:16:9a:d8:13:5b:0f:0e:6f:d7:f7:bd:
04:b4:d6:a8:fa:70:74:2c:a7:a0:ea:68:36:c6:c8:52:8b:0d:
80:e8:de:31:8e:9c:f1:9d:9e:19:65:4a:cc:84:da:eb:4e:d0:
5c:d1:28:7e:c4:53:77:05:e6:ab:3f:d3:bd:4c:46:0c:ed:56:
79:46:c9:b0:fe:1c:53:bd:6b:f2:6a:06:e4:f6:ee:77:0e:ea:
4e:db:6c:f6:41:23:a3:a4:8c:73:b3:fe:32:3d:42:a1:c1:db:
a5:d7:44:cb:53:10:1d:32:59:26:74:69:5e:62:0f:1d:fb:0a:
bd:c4:83:a6:9c:49:fe:e8:0a:fb:8f:c3:af:fe:be:1b:6d:a8:
d6:55:da:9a:80:d7:f4:fe:a8:e8:77:3f:04:fb:ed:1c:0c:9e:
2b:b6:d1:b7:e9:f1:f4:5c:73:a4:ab:c2:e0:8b:f4:68:c3:da:
dd:f6:24:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:33:48 2026 by rpki-client