
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/sI2hd2FzasIcIGR1mbwfnvVbOt4.roa
File: sI2hd2FzasIcIGR1mbwfnvVbOt4.roa (raw, json)
Hash identifier: svXnDigbaMta8NLAJXIZSMbW+lS1TxTLYrqXiORtwOk=
Subject key identifier: B0:8D:A1:77:61:73:6A:C2:1C:20:64:75:99:BC:1F:9E:F5:5B:3A:DE
Certificate issuer: /CN=1B20A06A21205820B28FD06CE0A84F03FCDAEBC5
Certificate serial: 88
Authority key identifier: 1B:20:A0:6A:21:20:58:20:B2:8F:D0:6C:E0:A8:4F:03:FC:DA:EB:C5
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/sI2hd2FzasIcIGR1mbwfnvVbOt4.roa
Signing time: Tue 31 Mar 2026 07:32:08 +0000
ROA not before: Tue 31 Mar 2026 07:32:08 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 55900
IP address blocks: 218.223.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136 (0x88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B20A06A21205820B28FD06CE0A84F03FCDAEBC5
Validity
Not Before: Mar 31 07:32:08 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=B08DA17761736AC21C20647599BC1F9EF55B3ADE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:97:32:a0:49:60:5c:3a:8c:1a:1c:5a:c9:c2:
0b:76:c0:4f:16:1e:7e:94:e3:e1:21:53:a2:4f:66:
01:4d:93:5b:3b:9f:26:c7:00:3e:81:c0:06:89:b8:
86:21:45:09:98:99:c0:00:bf:e0:ea:a6:1c:ee:32:
d9:cf:20:5a:ec:7f:f6:a0:06:fd:72:32:e5:da:39:
05:c8:f0:60:15:0e:90:d3:29:52:1c:14:5c:4f:91:
4b:9d:5a:4b:46:17:aa:06:05:a8:c8:4c:9c:26:27:
21:b6:12:6d:fa:92:9c:51:0e:c3:25:52:0e:93:a0:
0f:6c:47:e8:d0:db:bf:45:a5:d8:6d:b0:2e:72:4b:
d4:ca:70:f2:3d:ca:69:ee:9f:bd:90:23:aa:d7:ad:
3e:ef:f5:d8:8d:38:d5:c0:57:09:33:39:9c:18:85:
55:21:f6:06:3f:55:b8:00:87:49:6f:0a:ff:12:25:
8f:e9:7e:aa:67:9e:d2:b0:1d:98:1e:82:04:56:7f:
0d:12:fc:64:f2:50:c8:b4:8a:fe:65:a9:fd:ec:ee:
2d:e5:f1:bc:ba:65:70:59:6f:97:96:c3:96:f5:2a:
de:54:a6:f5:bd:91:9b:4c:e0:e1:6b:3f:49:a7:cd:
35:0b:77:17:26:d3:f8:d4:dd:65:43:46:4f:72:56:
84:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8D:A1:77:61:73:6A:C2:1C:20:64:75:99:BC:1F:9E:F5:5B:3A:DE
X509v3 Authority Key Identifier:
keyid:1B:20:A0:6A:21:20:58:20:B2:8F:D0:6C:E0:A8:4F:03:FC:DA:EB:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/sI2hd2FzasIcIGR1mbwfnvVbOt4.roa
sbgp-ipAddrBlock: critical
IPv4:
218.223.132.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:06:3f:7c:07:34:8e:4f:8b:f4:e5:f3:f3:3a:7a:64:7e:ac:
a1:e7:05:10:d4:a9:cb:04:3f:8f:c2:e1:29:75:bb:b9:6f:3e:
b5:50:12:3f:cf:2a:10:25:9e:31:61:18:e8:ae:a9:f6:cc:49:
e6:0b:e7:d1:66:ca:7d:0d:aa:25:f9:9d:3b:5b:83:05:48:4a:
f2:cf:4b:82:b8:2f:c0:27:30:59:09:2b:fa:31:56:cb:4e:ea:
d0:01:1f:34:b2:d1:28:cc:f5:32:50:76:41:28:ff:e7:68:a4:
0c:59:79:bb:4c:50:70:49:f5:42:39:c0:25:8f:6d:8f:92:62:
63:35:45:e3:4a:ac:e5:63:08:31:9e:7c:8d:a9:9b:3d:ee:38:
99:4e:aa:c9:cb:f5:f9:87:ad:87:52:86:2f:aa:f6:a3:85:b1:
cc:25:8e:e5:62:db:f4:d2:cb:3c:cd:fd:9a:a2:cc:51:bc:00:
c9:d5:9d:85:7a:2c:e4:a6:96:89:0b:bb:5c:ff:ff:49:5b:7e:
9c:eb:a7:70:c3:9e:d7:e9:76:79:79:11:f4:bf:48:3f:af:c9:
0d:f9:31:57:27:5a:a1:b3:73:d5:1e:f3:5f:02:e4:e2:76:e9:
26:2a:5a:ad:3b:5b:a2:50:ad:e9:36:db:d0:a8:e2:cd:ca:71:
7a:c7:38:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:02 2026 by rpki-client