
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/0md-_JwlZla89USlvpeuBsBzwUw.roa
File: 0md-_JwlZla89USlvpeuBsBzwUw.roa (raw, json)
Hash identifier: RFjlBvpApTjeKkVBfRu+LXdWo5mj3UdHeFVapTWyrKs=
Subject key identifier: D2:67:7E:FC:9C:25:66:56:BC:F5:44:A5:BE:97:AE:06:C0:73:C1:4C
Certificate issuer: /CN=296966DD720C30575F62D8FD4149458A90AACAA4
Certificate serial: 94
Authority key identifier: 29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/0md-_JwlZla89USlvpeuBsBzwUw.roa
Signing time: Tue 31 Mar 2026 07:35:32 +0000
ROA not before: Tue 31 Mar 2026 07:35:32 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2497
IP address blocks: 160.13.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 03:54:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148 (0x94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296966DD720C30575F62D8FD4149458A90AACAA4
Validity
Not Before: Mar 31 07:35:32 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=D2677EFC9C256656BCF544A5BE97AE06C073C14C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b5:a6:06:6f:bb:8d:a8:6d:c0:a6:4b:db:13:
fe:0f:19:cd:d8:ec:e9:0e:b4:ff:c7:39:f8:bf:da:
9a:e4:04:ef:d8:8e:cf:ee:ab:c7:6f:4a:26:65:48:
8b:6b:94:54:24:02:65:29:fb:a4:fd:74:1d:5b:69:
57:22:93:1c:57:d9:3f:21:3c:c7:5d:c6:18:73:d6:
a7:51:ce:fe:8b:53:bd:09:4b:37:38:22:74:7a:63:
c4:5f:cc:a3:6e:d6:41:71:90:63:77:56:3d:66:46:
23:89:f7:f9:66:1d:a5:21:c7:f8:b2:87:97:2f:2d:
b1:76:7c:37:4a:ea:e4:0a:43:52:c1:a2:07:cc:79:
9b:3f:55:34:c1:7d:f6:ff:b1:8a:05:83:fb:5a:b0:
97:3b:8e:18:5d:31:3d:ae:8c:aa:23:7f:b7:29:44:
a4:2f:14:bf:ca:3c:88:4c:3a:f3:04:c9:d2:06:47:
29:c5:10:ce:0c:92:b9:f2:4a:7b:46:a5:ed:50:6b:
10:94:24:43:82:57:d0:9f:10:97:2a:65:ef:4d:00:
08:26:71:bd:88:fc:6c:63:19:8a:10:c3:cf:99:e5:
f3:e4:83:12:25:c6:ee:7c:41:c5:47:a2:4b:2e:f6:
02:f9:42:47:0b:65:d8:12:f2:b8:b5:59:6c:fc:4b:
03:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:67:7E:FC:9C:25:66:56:BC:F5:44:A5:BE:97:AE:06:C0:73:C1:4C
X509v3 Authority Key Identifier:
keyid:29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/0md-_JwlZla89USlvpeuBsBzwUw.roa
sbgp-ipAddrBlock: critical
IPv4:
160.13.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7e:42:88:62:b8:24:71:ea:39:55:ed:04:aa:3a:da:d4:07:a8:
b7:81:8e:d4:ab:00:0e:da:ba:55:ca:a0:97:40:c4:81:12:48:
a6:4c:28:49:3a:e6:a2:f6:89:47:a4:8f:a5:4f:ff:3a:af:ef:
80:f5:a2:5b:d2:02:da:49:2f:ef:5e:06:99:29:72:25:6f:cb:
2a:4e:17:60:30:7d:00:40:f8:21:5a:20:0a:b8:4e:62:39:55:
a9:e4:c6:44:f4:0b:13:4e:12:72:fd:54:42:5e:c7:ca:00:36:
74:68:bf:e4:71:f1:ee:96:e8:f0:07:b0:92:39:3f:ee:d0:f1:
e9:5d:e1:ad:bb:8b:4a:8c:c0:c5:56:ed:e9:25:c8:c3:8e:a9:
74:ac:4b:12:04:33:b8:1f:7b:13:39:42:c5:a0:ea:f3:e5:0e:
c3:9a:ea:4f:69:ab:75:74:04:50:3a:cd:0f:39:29:95:d8:db:
78:c6:66:c6:49:8b:9d:af:94:99:41:4e:9e:6c:73:f0:06:80:
9e:26:fb:99:d9:a4:c6:e3:f2:b7:62:9c:18:15:11:a5:90:2b:
f4:4a:21:a2:ca:9c:4b:44:29:c3:c6:1c:f1:f3:c7:e1:98:51:
0f:44:e6:11:bf:72:72:7b:cb:c0:69:56:54:ee:94:38:4a:8d:
34:73:4b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 16:28:53 2026 by rpki-client