
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/SBxmbrcXVXAfLW0L0tLOScCBn_Q.roa
File: SBxmbrcXVXAfLW0L0tLOScCBn_Q.roa (raw, json)
Hash identifier: iBtJV5KnSzA07Xy5ZF95XBKTQ2vipPkPcPp5D6eErY0=
Subject key identifier: 48:1C:66:6E:B7:17:55:70:1F:2D:6D:0B:D2:D2:CE:49:C0:81:9F:F4
Certificate issuer: /CN=677198612266777D83A2DB4A1E9E147C72A5D76D
Certificate serial: 44
Authority key identifier: 67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/SBxmbrcXVXAfLW0L0tLOScCBn_Q.roa
Signing time: Tue 31 Mar 2026 08:49:28 +0000
ROA not before: Tue 31 Mar 2026 08:49:28 +0000
ROA not after: Wed 24 Mar 2027 01:46:06 +0000
asID: 17511
IP address blocks: 203.175.80.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68 (0x44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677198612266777D83A2DB4A1E9E147C72A5D76D
Validity
Not Before: Mar 31 08:49:28 2026 GMT
Not After : Mar 24 01:46:06 2027 GMT
Subject: CN=481C666EB71755701F2D6D0BD2D2CE49C0819FF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a9:98:70:ef:79:42:d0:ae:85:c9:db:d8:ac:
43:ee:70:c0:f4:ea:6a:a7:b5:e7:74:73:8e:13:8a:
8c:39:1f:20:16:ad:f4:6a:d1:11:d4:f5:28:33:92:
2a:f3:c0:48:1e:0e:2c:c9:6e:a2:dc:0c:3c:e3:e7:
0b:da:d0:f8:1f:ec:6b:f0:14:2b:8a:6e:66:11:93:
e1:1e:40:c5:40:0d:f4:ca:6a:a8:99:1d:c9:c7:47:
61:d0:ad:84:bb:69:6f:39:9c:09:e1:47:1a:2c:98:
d7:b5:c3:9c:5c:0c:6f:c7:a1:2c:47:92:51:c1:18:
96:26:eb:56:c7:f6:66:a4:d7:be:74:2c:1a:cd:5b:
15:3c:68:34:6f:50:97:f3:68:cc:23:ac:5f:f0:8a:
3a:65:9f:c0:24:be:f8:64:df:e6:99:47:90:35:aa:
b2:8a:a2:7e:7d:0e:25:6c:e6:eb:7c:fa:55:b5:89:
9c:42:11:7f:98:62:9e:9b:f0:38:d8:e3:a9:bc:16:
ef:f0:04:f7:da:7d:63:b7:10:5e:96:dd:31:f8:a6:
be:db:60:9a:c7:93:a8:4a:05:87:26:67:15:06:96:
c2:e2:2d:58:ee:a9:be:cc:e4:9c:31:93:88:b7:ea:
3d:54:ee:40:31:7b:6b:8a:35:2b:28:c6:b7:52:b5:
ad:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:1C:66:6E:B7:17:55:70:1F:2D:6D:0B:D2:D2:CE:49:C0:81:9F:F4
X509v3 Authority Key Identifier:
keyid:67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/SBxmbrcXVXAfLW0L0tLOScCBn_Q.roa
sbgp-ipAddrBlock: critical
IPv4:
203.175.80.0/20
Signature Algorithm: sha256WithRSAEncryption
47:9e:25:f9:c3:8c:de:08:a7:16:68:5f:2a:fb:6d:0f:8b:f6:
b4:6f:b0:41:79:52:eb:58:cb:aa:bc:a8:b3:17:29:01:09:78:
79:2a:ca:80:58:31:f7:66:99:30:d7:12:17:d1:a8:48:36:27:
1d:77:d8:8d:77:cc:5b:c1:5b:e6:01:08:60:5f:a4:ab:83:f6:
94:7a:fe:2d:d0:b0:a2:c2:a7:9a:2f:dd:9c:1c:c4:08:d7:48:
ba:8f:4c:1e:31:27:18:9d:b6:66:a6:26:50:63:0b:2e:c3:ad:
ea:88:e1:14:80:48:23:aa:ed:86:78:08:fa:0b:6d:0b:c0:96:
06:fb:55:f6:83:35:64:2a:fb:9e:04:d9:1b:bd:6c:ec:4e:7e:
f9:49:a6:4b:0f:d5:f7:a3:65:2b:76:44:a0:62:78:6c:53:11:
c6:03:6e:4c:39:cb:56:42:9a:37:9c:76:ec:44:07:a4:55:65:
24:80:b5:56:04:9d:d5:26:7e:2f:69:e3:16:83:fc:bd:da:86:
44:5c:e6:73:df:c2:51:07:04:e4:dc:8a:d2:f7:bc:e8:27:1c:
8f:f1:c4:e9:bd:5f:39:67:a7:54:5f:89:50:8c:6f:8f:46:5a:
ee:72:c4:68:c5:8c:c4:59:27:35:50:3d:c5:98:ab:2c:1e:4d:
d1:cb:90:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:35:05 2026 by rpki-client