
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/Edfobef9cA_jxJ7D2b9C_3vqJHw.roa
File: Edfobef9cA_jxJ7D2b9C_3vqJHw.roa (raw, json)
Hash identifier: rknlttg6fUOfkB0AKTlL02qpXa/emBI4XXlOYW0kFRI=
Subject key identifier: 11:D7:E8:6D:E7:FD:70:0F:E3:C4:9E:C3:D9:BF:42:FF:7B:EA:24:7C
Certificate issuer: /CN=40D220B9E4A6358E03CD47864517D9D300B06FF0
Certificate serial: 74
Authority key identifier: 40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/Edfobef9cA_jxJ7D2b9C_3vqJHw.roa
Signing time: Tue 31 Mar 2026 07:32:12 +0000
ROA not before: Tue 31 Mar 2026 07:32:12 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 131925
IP address blocks: 160.237.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 03:54:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116 (0x74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40D220B9E4A6358E03CD47864517D9D300B06FF0
Validity
Not Before: Mar 31 07:32:12 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=11D7E86DE7FD700FE3C49EC3D9BF42FF7BEA247C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ca:69:6a:b7:5e:c8:6f:41:26:63:de:a9:62:
9f:15:2b:b6:b6:57:5b:7b:32:74:d7:48:89:71:62:
98:8a:92:a1:b8:03:a8:8a:dc:e6:a9:8c:b1:01:90:
a7:6f:8a:0c:5c:77:ec:9e:0c:e9:88:21:cd:14:90:
e9:07:2c:29:c6:13:b2:d7:92:9a:a5:da:cd:71:7c:
3a:38:54:dd:04:cf:31:ce:21:4b:2b:b5:b3:ec:85:
b2:3c:27:aa:cb:11:9c:8c:cc:5b:8f:87:61:5a:44:
c9:2d:87:00:ec:08:fd:ce:d7:50:31:67:f2:97:88:
a8:43:4e:32:44:2a:df:e9:49:e2:72:23:26:26:4c:
48:ca:b2:66:38:f2:71:87:d8:3d:04:79:fd:f4:90:
af:5a:42:bc:e3:e6:e9:6f:2e:51:c2:1d:9c:2b:72:
59:b3:9d:6c:07:1d:58:d9:f7:72:fd:46:dc:7c:16:
51:7c:35:53:b6:69:9a:2c:20:e0:a8:e1:76:c5:fe:
36:7e:b4:58:2d:3b:f0:ec:df:0a:1f:b4:93:18:8b:
42:0c:6b:09:11:07:cd:32:95:e8:6b:5f:d7:09:cd:
2d:83:03:28:65:85:98:fa:9d:18:12:36:e4:d6:43:
b5:a7:ba:b8:ab:6d:8c:dd:51:8b:5e:5a:fc:b9:ec:
f3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D7:E8:6D:E7:FD:70:0F:E3:C4:9E:C3:D9:BF:42:FF:7B:EA:24:7C
X509v3 Authority Key Identifier:
keyid:40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/Edfobef9cA_jxJ7D2b9C_3vqJHw.roa
sbgp-ipAddrBlock: critical
IPv4:
160.237.160.0/20
Signature Algorithm: sha256WithRSAEncryption
c2:2b:c4:e8:ec:ba:61:59:eb:39:11:79:26:f2:45:04:5a:ac:
7f:7a:a1:66:62:04:d8:e0:bf:e6:55:1b:d0:27:f1:89:70:e4:
8d:e4:22:ea:fe:a0:aa:13:7f:85:69:e9:91:74:63:fe:ff:f4:
89:11:55:90:ca:30:0a:b8:32:10:2c:89:88:20:1e:76:2b:c4:
93:8f:21:88:66:6e:00:d4:25:d2:6e:97:c1:93:0a:fa:70:2c:
87:cb:54:ea:e8:76:58:9a:7b:69:68:d6:d4:8f:9f:92:b5:bc:
0a:16:41:2d:9b:27:98:2c:99:7a:ec:59:a0:7a:85:37:e7:a2:
fc:32:56:d4:cd:0c:5e:fb:01:40:d6:19:28:49:d8:8f:46:c4:
a7:e5:b2:41:e0:33:5f:9f:ab:45:53:56:c6:9f:2d:e5:95:7d:
91:50:3b:0c:f0:1a:61:d0:24:c5:ed:cf:ab:f3:a0:51:db:2f:
d5:5d:dd:6b:8b:c2:f2:7e:c5:e1:ae:a8:62:f1:3a:6d:56:d4:
13:bc:38:21:c4:e5:04:6a:9c:2c:ae:72:a6:13:fc:df:9b:77:
90:25:09:0d:dd:ad:8a:61:33:83:89:76:ee:39:65:34:b3:a9:
7f:4d:dd:45:24:59:6d:30:92:22:74:53:71:68:4c:2a:b1:fc:
48:6d:6f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 16:34:59 2026 by rpki-client