
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/_Cj2xM6GU4jqgXKTQ2VHcNrgiLA.roa
File: _Cj2xM6GU4jqgXKTQ2VHcNrgiLA.roa (raw, json)
Hash identifier: KaOz71enDxsCpxEr/UhPLDWeH2hAGps29W+lvZA6u8E=
Subject key identifier: FC:28:F6:C4:CE:86:53:88:EA:81:72:93:43:65:47:70:DA:E0:88:B0
Certificate issuer: /CN=677198612266777D83A2DB4A1E9E147C72A5D76D
Certificate serial: 37
Authority key identifier: 67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/_Cj2xM6GU4jqgXKTQ2VHcNrgiLA.roa
Signing time: Tue 31 Mar 2026 08:49:22 +0000
ROA not before: Tue 31 Mar 2026 08:49:22 +0000
ROA not after: Wed 24 Mar 2027 01:46:06 +0000
asID: 17511
IP address blocks: 103.84.124.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677198612266777D83A2DB4A1E9E147C72A5D76D
Validity
Not Before: Mar 31 08:49:22 2026 GMT
Not After : Mar 24 01:46:06 2027 GMT
Subject: CN=FC28F6C4CE865388EA81729343654770DAE088B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:16:87:ad:f4:b1:b1:63:dc:93:54:7f:e8:29:
2b:c4:0c:c9:09:c0:0d:b1:99:86:34:f5:4f:a5:64:
05:d2:25:26:0a:d1:d8:a6:4a:57:fb:3c:bd:15:df:
22:2a:14:fd:e7:1e:6a:b6:cb:0f:69:f8:0b:8f:cf:
8f:62:a5:b4:87:ec:42:3d:16:98:83:f4:70:e2:3b:
cc:ae:ba:32:a7:aa:b9:7d:ff:bd:83:6a:52:be:69:
86:82:f6:ff:3d:a7:47:e8:cd:4e:6b:01:4b:0f:d5:
e8:af:20:7d:bc:bc:52:1a:27:07:4c:72:67:a8:f9:
f9:7c:bb:71:d3:c5:97:2e:ef:5f:2d:2e:85:0e:2c:
08:0c:33:1a:b1:89:b0:b0:9d:41:bd:c8:fa:b8:f8:
03:1f:70:bf:ef:cd:12:c4:d2:f0:11:57:3b:8c:c5:
b9:0a:2e:01:1d:12:ab:31:78:db:07:12:1f:0b:b6:
fa:eb:10:67:04:2a:4b:3c:8d:59:a4:db:c9:03:72:
75:cf:63:b1:7e:35:c3:d4:b4:b7:5a:76:80:33:d0:
4a:cb:ba:73:32:89:ef:80:14:ad:9f:8a:88:c5:bf:
ba:e4:24:86:8a:a3:67:f5:5c:9a:57:fc:58:2a:68:
10:81:92:48:c7:7a:a7:ef:a8:55:79:9e:23:4b:ae:
0a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:28:F6:C4:CE:86:53:88:EA:81:72:93:43:65:47:70:DA:E0:88:B0
X509v3 Authority Key Identifier:
keyid:67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/_Cj2xM6GU4jqgXKTQ2VHcNrgiLA.roa
sbgp-ipAddrBlock: critical
IPv4:
103.84.124.0/22
Signature Algorithm: sha256WithRSAEncryption
19:1d:fd:30:95:9f:b2:e5:67:f7:7c:16:91:28:1b:c2:fb:e6:
7a:5e:a2:7a:9b:8b:be:9b:51:af:f6:e7:0f:27:cc:c1:1b:15:
90:06:ed:06:3a:e4:91:58:8b:90:41:c4:ae:3c:a1:2e:bb:61:
5d:2f:3b:60:8d:d6:37:a3:72:15:23:36:83:8a:c7:2a:b8:d5:
9f:ac:bb:fd:86:46:5a:36:51:db:be:e4:d4:63:bf:6d:7a:0b:
0f:1e:fb:e8:8c:f8:7a:9f:40:14:b4:b9:40:24:43:8b:2b:2d:
8d:02:61:55:98:1e:5e:14:5e:2c:5c:62:bd:9d:20:43:18:e5:
6a:de:d9:a8:fd:45:5d:0a:4b:b2:42:d3:6b:c6:da:24:09:9c:
18:b4:cc:15:9d:4e:a6:40:75:6a:35:51:20:48:01:5e:02:f3:
03:6e:b8:24:3a:d7:c9:78:7f:f8:e9:bc:64:1d:27:7e:dc:7d:
1b:64:26:eb:d4:06:29:9b:8c:e1:c8:08:39:44:59:13:a2:5b:
2a:42:2b:26:81:00:83:d1:a9:27:a3:f9:20:64:83:0d:5d:9e:
e3:d7:20:5e:29:d7:4f:d8:aa:2c:d9:da:b7:56:f7:b7:cc:06:
53:90:eb:b3:76:8b:31:68:d4:a3:a5:64:44:39:b1:4f:41:dd:
2c:9a:9e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:35:09 2026 by rpki-client