
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/512/zbUqd9CPdraOX8imSZFqYnqRSSc.roa
File: zbUqd9CPdraOX8imSZFqYnqRSSc.roa (raw, json)
Hash identifier: EThkr1sr1t5JLdweYrKrQceCpaWDyzQMb615IxGXA2g=
Subject key identifier: CD:B5:2A:77:D0:8F:76:B6:8E:5F:C8:A6:49:91:6A:62:7A:91:49:27
Certificate issuer: /CN=BAED0E35A7B58DAC2159F7F1CD740A54B9E8B407
Certificate serial: 48
Authority key identifier: BA:ED:0E:35:A7:B5:8D:AC:21:59:F7:F1:CD:74:0A:54:B9:E8:B4:07
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uu0ONae1jawhWffxzXQKVLnotAc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/zbUqd9CPdraOX8imSZFqYnqRSSc.roa
Signing time: Tue 31 Mar 2026 08:24:26 +0000
ROA not before: Tue 31 Mar 2026 08:24:26 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 55376
IP address blocks: 202.6.68.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/uu0ONae1jawhWffxzXQKVLnotAc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/uu0ONae1jawhWffxzXQKVLnotAc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uu0ONae1jawhWffxzXQKVLnotAc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72 (0x48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BAED0E35A7B58DAC2159F7F1CD740A54B9E8B407
Validity
Not Before: Mar 31 08:24:26 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=CDB52A77D08F76B68E5FC8A649916A627A914927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b1:67:b2:2b:ce:5b:7b:53:b0:96:8b:22:6a:
99:4a:0b:90:22:40:e5:39:86:c4:c0:65:f9:bd:a5:
61:f9:cc:fd:11:f7:8c:b7:74:73:81:1f:18:21:c9:
90:4b:cd:c3:a5:95:a4:0c:55:1e:83:1f:85:8e:73:
37:1e:48:3b:20:53:53:e2:82:1e:86:e3:1b:77:39:
4f:f6:60:e4:d1:3a:72:89:ad:f4:5c:0f:7e:48:04:
36:54:29:b9:ab:e8:8c:43:7c:67:44:92:11:cc:fa:
a2:25:e1:a8:04:a0:b4:c0:f4:e1:a8:14:83:98:2e:
e2:59:ed:df:f4:c6:cc:61:f2:32:20:fb:cb:88:a1:
bf:d1:66:fa:a7:36:46:6f:e5:47:c3:ab:63:d0:89:
1d:8b:df:91:3c:b6:fa:b0:1e:d5:20:06:3d:0c:07:
f6:7f:5a:a9:19:9b:86:a5:1f:8f:15:2f:d2:7c:79:
60:a5:d8:66:7c:3d:72:31:97:43:33:29:0c:37:c2:
6a:b7:93:7e:71:ea:08:e7:33:ad:39:7e:78:ab:d9:
46:d9:65:63:ad:23:53:9c:a4:24:42:64:4d:01:9c:
bc:62:64:93:25:44:fd:53:6f:90:0d:43:75:f9:f0:
4b:04:dd:13:fd:fa:59:3f:aa:5b:39:b9:7e:e2:6a:
a1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B5:2A:77:D0:8F:76:B6:8E:5F:C8:A6:49:91:6A:62:7A:91:49:27
X509v3 Authority Key Identifier:
keyid:BA:ED:0E:35:A7:B5:8D:AC:21:59:F7:F1:CD:74:0A:54:B9:E8:B4:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/uu0ONae1jawhWffxzXQKVLnotAc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uu0ONae1jawhWffxzXQKVLnotAc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/zbUqd9CPdraOX8imSZFqYnqRSSc.roa
sbgp-ipAddrBlock: critical
IPv4:
202.6.68.0/22
Signature Algorithm: sha256WithRSAEncryption
53:7c:f9:ca:6c:13:d3:70:f0:53:f4:ac:21:7a:b5:69:33:7f:
e4:83:dc:2b:95:bb:e6:e9:92:9c:e3:3a:31:15:59:2b:f9:33:
51:01:02:88:63:21:c9:e7:79:f7:bb:fe:34:9a:6f:fa:65:0a:
00:1a:77:78:dc:91:4c:3e:1d:5c:3c:ef:f5:59:f1:f4:ee:99:
b8:74:c3:a3:05:d7:e3:99:b9:c2:cb:76:89:ab:a5:20:4d:0d:
2a:88:e3:72:aa:e6:6b:3d:f4:28:2f:14:90:65:7e:60:61:a4:
97:72:c4:7c:5e:cf:6d:85:5b:ef:83:06:14:bf:01:7c:59:7e:
13:55:8d:19:af:6f:28:5f:9f:61:76:c1:39:d8:ee:83:c8:f0:
d8:03:5c:08:d2:f9:a1:84:3b:3b:06:27:3f:fb:0c:35:12:9a:
8e:02:ab:49:a1:92:4e:d9:9f:8a:1d:bc:b6:12:03:27:02:44:
cf:71:13:8c:54:e2:16:7c:9a:88:6d:f1:55:ff:16:e9:51:55:
00:06:d1:00:40:34:8b:f3:3a:68:53:75:76:fb:37:62:02:68:
24:a4:a6:bc:a5:b1:f8:8c:ee:6c:eb:c8:0a:1b:3b:42:d1:fe:
f8:a2:ed:50:46:3f:6b:04:f4:6b:00:60:85:67:44:f1:fe:ef:
15:2b:84:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:22 2026 by rpki-client