
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/573/YmS2jQwcRqGQYg4arFDbxakaBjs.roa
File: YmS2jQwcRqGQYg4arFDbxakaBjs.roa (raw, json)
Hash identifier: ZVtv6ObtpfQ66ZqSJV5W3SQLAFXhAVUepFXk8Zz5Kxs=
Subject key identifier: 62:64:B6:8D:0C:1C:46:A1:90:62:0E:1A:AC:50:DB:C5:A9:1A:06:3B
Certificate issuer: /CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Certificate serial: 8B
Authority key identifier: C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/YmS2jQwcRqGQYg4arFDbxakaBjs.roa
Signing time: Tue 31 Mar 2026 07:50:14 +0000
ROA not before: Tue 31 Mar 2026 07:50:14 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 131896
IP address blocks: 103.239.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139 (0x8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Validity
Not Before: Mar 31 07:50:14 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=6264B68D0C1C46A190620E1AAC50DBC5A91A063B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0f:14:d7:bb:91:78:17:97:db:69:8b:86:c4:
d0:8c:7a:60:28:72:3a:8a:7f:4a:10:cb:ae:94:44:
d0:9f:f8:5f:ae:2c:b4:05:15:09:06:34:59:49:7f:
c8:72:77:44:79:85:97:c6:95:ce:19:9f:d0:2d:49:
29:f4:7e:7d:0c:b8:2d:28:0b:7b:4a:ec:9d:bd:e5:
cc:64:75:95:e0:47:da:de:6c:b4:02:4c:da:c5:3d:
04:60:ff:08:95:ec:96:05:45:cf:68:23:8d:98:c4:
fc:4f:c5:f8:8e:28:85:89:ad:7c:cd:14:ba:ce:3b:
9f:2d:50:85:ba:2e:a5:95:f2:f8:a3:64:a3:eb:3e:
96:55:d5:23:f9:a4:d8:ab:b7:a8:3f:71:59:dc:84:
4c:ed:42:f3:94:41:b4:9a:f2:9c:4d:9c:d8:fc:ce:
e4:be:cc:49:61:4a:3d:40:0e:b2:66:77:d1:e2:1f:
7e:ad:3b:bd:f3:0a:b6:e1:77:5d:70:1d:56:06:86:
10:b4:20:c9:f5:6b:81:64:61:94:8f:d1:0e:f7:ba:
48:37:c2:a1:d4:71:a7:f6:b4:80:db:18:7f:4a:ae:
36:36:ad:4a:45:ce:13:19:6d:c9:c9:71:b0:a3:db:
7d:14:58:df:25:73:46:57:e9:20:84:3b:d9:11:1f:
dd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:64:B6:8D:0C:1C:46:A1:90:62:0E:1A:AC:50:DB:C5:A9:1A:06:3B
X509v3 Authority Key Identifier:
keyid:C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/YmS2jQwcRqGQYg4arFDbxakaBjs.roa
sbgp-ipAddrBlock: critical
IPv4:
103.239.17.0/24
Signature Algorithm: sha256WithRSAEncryption
43:2b:bd:fd:03:af:5d:01:fa:fb:88:40:af:fd:a3:38:49:6e:
72:70:b0:6c:98:84:2c:85:39:5e:ea:17:22:bd:e8:7b:6f:99:
59:d8:5a:e9:48:4b:7d:93:88:58:39:05:43:cb:69:ca:29:b9:
01:a3:44:8b:b9:12:a4:6b:64:69:e8:80:cd:7b:64:25:af:60:
d6:7d:50:70:87:64:e6:74:7f:43:32:0e:6a:7e:6f:95:57:8b:
83:4a:38:5b:62:0a:25:4f:6a:a8:0d:c6:f1:41:ad:b1:88:f8:
5e:dd:24:10:d7:01:69:87:67:5d:5c:6c:bc:ba:40:6c:3c:2e:
9a:4d:0e:76:31:31:58:f0:2f:5a:1c:73:6d:a7:6a:b2:3d:12:
ef:27:2a:c3:aa:cb:09:80:e3:d5:58:b8:ff:6d:37:c5:8f:4a:
1e:8b:49:2d:ee:26:38:5d:92:9c:36:91:26:50:81:16:10:99:
d6:eb:56:6c:63:97:c1:0f:24:e6:ce:14:e4:2e:e3:d6:d3:bc:
b8:fa:91:b8:b6:c0:c5:e2:6e:0b:31:19:9e:e0:26:d7:3a:10:
57:df:55:03:7a:99:5c:c0:47:9c:22:b4:2b:80:77:82:0d:77:
57:40:9b:c3:4b:be:cd:6e:36:67:0e:d0:8d:1b:0d:65:ee:ad:
6d:23:67:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:33:51 2026 by rpki-client