
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/RtaGVU6W-EOKKLo-r2Z9Jof0-OI.roa
File: RtaGVU6W-EOKKLo-r2Z9Jof0-OI.roa (raw, json)
Hash identifier: bs0bKConIglQIrVW/GfuA9X5jYUQoqUePHVD9v4ymd8=
Subject key identifier: 46:D6:86:55:4E:96:F8:43:8A:28:BA:3E:AF:66:7D:26:87:F4:F8:E2
Certificate issuer: /CN=40D220B9E4A6358E03CD47864517D9D300B06FF0
Certificate serial: 75
Authority key identifier: 40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/RtaGVU6W-EOKKLo-r2Z9Jof0-OI.roa
Signing time: Tue 31 Mar 2026 07:32:13 +0000
ROA not before: Tue 31 Mar 2026 07:32:13 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 131925
IP address blocks: 160.237.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 03:54:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117 (0x75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40D220B9E4A6358E03CD47864517D9D300B06FF0
Validity
Not Before: Mar 31 07:32:13 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=46D686554E96F8438A28BA3EAF667D2687F4F8E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:85:44:52:53:53:d0:66:f3:2c:9a:6e:8c:3a:
d4:86:a9:df:eb:55:93:4f:6a:7f:39:b9:c1:e5:37:
85:d8:0c:3d:9c:69:f3:22:ea:be:2f:f7:6e:0c:d0:
51:2d:9a:37:52:80:2b:f7:1a:03:dd:b2:79:b9:60:
46:3b:c3:b3:db:cc:68:1e:dc:84:54:75:54:50:05:
bc:b4:56:08:46:83:ec:e3:92:c2:29:b8:1b:13:89:
09:70:4c:83:48:2f:39:f6:70:56:38:12:e3:5f:80:
89:61:52:cd:96:b3:5e:ce:8d:27:38:ec:d9:d1:f0:
27:f4:68:37:c8:6d:9a:00:9e:1a:5e:3d:47:9d:78:
a2:d6:5d:00:e8:b1:71:c1:76:1f:3f:4f:de:3d:3a:
50:5d:22:72:af:d7:3f:24:23:00:c9:e9:63:bf:35:
cf:7f:8d:48:01:0f:8b:65:be:2a:29:f9:4d:9b:8d:
bc:57:03:97:c8:40:91:27:70:2e:0f:1c:16:82:f9:
22:01:46:77:95:30:6c:21:a2:f5:b1:a8:f8:0e:65:
f2:f1:dd:d2:68:23:3a:98:66:84:ee:cc:07:de:b5:
22:de:12:99:f3:2c:31:2d:01:77:da:ca:9b:03:8d:
4d:3f:f3:9b:e0:03:1c:ec:37:76:01:bb:69:66:e4:
1c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D6:86:55:4E:96:F8:43:8A:28:BA:3E:AF:66:7D:26:87:F4:F8:E2
X509v3 Authority Key Identifier:
keyid:40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/RtaGVU6W-EOKKLo-r2Z9Jof0-OI.roa
sbgp-ipAddrBlock: critical
IPv4:
160.237.176.0/21
Signature Algorithm: sha256WithRSAEncryption
9c:90:6e:b5:cf:94:1d:c5:45:fb:c2:55:7d:29:18:57:f0:77:
c9:10:99:bb:f6:67:9c:89:0a:1a:f4:7d:11:5b:62:51:92:ae:
23:b8:e9:7c:7b:c5:3a:80:89:7e:18:8e:b0:f8:03:5a:3f:35:
3a:30:98:86:f2:a0:a5:60:50:84:47:90:a4:85:9a:16:3e:df:
a6:4a:d3:53:e9:c2:9b:3d:30:9e:33:f5:f6:ac:49:e5:6d:b8:
ce:d8:23:91:96:59:55:eb:7d:63:ba:f6:c3:d5:cc:32:ea:96:
f1:82:06:97:63:a7:ec:15:33:eb:97:a6:80:08:0b:9d:b7:57:
45:24:91:3e:3a:60:61:4f:b9:99:2e:76:a6:e7:be:e1:0e:32:
12:f2:54:91:61:38:ba:8d:5a:db:f6:84:5b:56:28:2e:87:a7:
db:47:68:ba:7a:b0:48:b0:b6:3f:95:ed:f1:77:d8:cc:f7:73:
cf:91:f6:83:fe:b2:d9:a5:d4:cf:e8:e7:73:84:f9:a8:52:11:
93:e4:91:dd:be:d6:61:0d:b7:c7:f5:6e:ad:33:c0:5f:97:67:
ec:27:ba:5d:8e:7f:d8:cd:79:82:69:57:e4:75:fe:48:79:09:
e8:08:a8:b6:bb:e3:d6:d4:80:2b:1e:a3:10:16:3a:a9:1b:08:
31:fd:6c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 16:28:55 2026 by rpki-client