
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/573/9dsTNo7ZL7BoVZfJdhGu6NahKqM.roa
File: 9dsTNo7ZL7BoVZfJdhGu6NahKqM.roa (raw, json)
Hash identifier: eIlm398L8VVyj/2jtGu6vORQfIbdCNSYKIAo1cwd5ZI=
Subject key identifier: F5:DB:13:36:8E:D9:2F:B0:68:55:97:C9:76:11:AE:E8:D6:A1:2A:A3
Certificate issuer: /CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Certificate serial: 8C
Authority key identifier: C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/9dsTNo7ZL7BoVZfJdhGu6NahKqM.roa
Signing time: Tue 31 Mar 2026 07:50:14 +0000
ROA not before: Tue 31 Mar 2026 07:50:14 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 131896
IP address blocks: 103.239.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140 (0x8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Validity
Not Before: Mar 31 07:50:14 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=F5DB13368ED92FB0685597C97611AEE8D6A12AA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bf:4e:27:9a:68:40:94:7f:81:89:2f:96:c4:
96:78:be:51:19:64:dd:92:d4:a9:46:c0:52:d8:9f:
a1:71:96:d1:70:84:24:40:39:f2:6a:a6:d5:56:1d:
bb:1c:cf:64:59:97:5a:90:ee:ba:59:d6:b5:ad:37:
9d:9a:29:6b:3c:8b:61:b9:46:c9:50:ee:67:be:c4:
de:69:f1:16:04:e9:18:88:df:d5:ba:46:96:5b:a3:
5d:a0:52:f7:fd:39:c9:22:25:5b:b2:fb:90:a2:bc:
15:37:b2:ff:cc:b0:f9:15:97:f0:c0:41:eb:82:2a:
ce:ab:35:93:6f:51:9d:ce:03:65:01:c6:ab:b2:68:
e2:d8:ab:f0:df:54:2c:56:cc:fc:8b:ea:bd:fe:5b:
d9:f8:22:58:e7:cb:be:99:4a:34:67:28:bb:98:83:
cf:e7:4a:a4:a0:04:ac:d3:0d:5e:5e:59:86:78:ea:
18:0e:00:07:cb:52:52:3a:c9:40:cd:f3:e4:bb:09:
22:cd:a7:4f:22:3b:5f:b9:7e:3f:33:7b:27:d2:c4:
48:54:c3:89:79:93:d0:42:fd:1c:a0:04:80:fe:d9:
ad:84:74:89:a9:5d:66:b6:d0:c0:f7:f7:a7:d5:66:
8d:54:e6:80:b1:4f:db:3e:ae:9f:a5:14:f6:c3:f3:
1b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DB:13:36:8E:D9:2F:B0:68:55:97:C9:76:11:AE:E8:D6:A1:2A:A3
X509v3 Authority Key Identifier:
keyid:C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/9dsTNo7ZL7BoVZfJdhGu6NahKqM.roa
sbgp-ipAddrBlock: critical
IPv4:
103.239.18.0/24
Signature Algorithm: sha256WithRSAEncryption
57:02:67:fe:a9:d3:8e:03:36:30:e5:ab:33:5b:7b:60:03:be:
c3:d4:5d:38:2e:8e:e8:5a:2f:9a:b9:b0:ff:78:da:0e:d4:58:
4d:1c:a6:2e:28:d2:52:1c:96:8f:72:e2:b8:4a:d8:ee:96:52:
eb:c7:49:c4:d2:fb:ff:c1:73:f3:31:74:7e:69:a2:fc:b1:19:
13:64:47:a5:6e:a9:01:c3:90:e4:5a:1f:4b:9d:06:2b:60:2f:
e3:ee:f5:ef:4e:37:7d:5c:b8:e1:1e:3e:21:9a:0a:3b:cc:91:
1d:9e:c9:75:10:1d:bc:55:89:17:48:11:3b:f9:09:20:90:36:
5e:bf:ed:c5:b8:c1:3f:ae:17:aa:f3:25:27:2a:3d:0b:e5:69:
36:54:99:82:36:1d:c6:f2:f2:e9:d7:51:d6:fe:e3:24:d6:45:
66:6d:fe:46:7b:b2:b1:41:87:82:6d:6c:79:aa:8b:3f:15:7d:
32:f0:2a:c0:59:e1:05:18:a6:7b:58:c8:97:6a:bb:50:84:2b:
82:60:e8:9b:e7:90:d0:0c:4b:8d:fa:29:ff:72:b8:da:b2:de:
85:e2:6e:e8:20:f9:a5:d2:76:bc:86:c8:06:d8:67:d2:3b:e9:
dc:0c:fc:b1:d2:e0:a9:bf:1c:4d:f5:8a:c8:fe:f9:13:0e:19:
e4:84:3d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 20:49:55 2026 by rpki-client