
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/9TIuBYcaKM3sJ6FLW3qb9VLfyzc.roa
File: 9TIuBYcaKM3sJ6FLW3qb9VLfyzc.roa (raw, json)
Hash identifier: LeqF9ZPmAQVvijLR2DTVMKqpgLCZsa93/4EpojxwMOA=
Subject key identifier: F5:32:2E:05:87:1A:28:CD:EC:27:A1:4B:5B:7A:9B:F5:52:DF:CB:37
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 0233
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/9TIuBYcaKM3sJ6FLW3qb9VLfyzc.roa
Signing time: Tue 31 Mar 2026 07:35:54 +0000
ROA not before: Tue 31 Mar 2026 07:35:54 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2497
IP address blocks: 202.232.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 11:22:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 563 (0x233)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Mar 31 07:35:54 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=F5322E05871A28CDEC27A14B5B7A9BF552DFCB37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7f:fb:cb:df:58:ed:87:b9:f8:db:31:3a:b3:
ef:6d:fa:54:3c:d9:eb:25:5f:8a:6a:51:b6:e3:0d:
15:53:8f:ed:22:71:fa:c5:96:19:5e:65:cb:19:f1:
cb:4c:fc:29:d9:07:51:9b:3a:2f:4b:69:a0:c8:ee:
c3:48:00:6a:5a:02:cd:be:8a:f3:0a:c4:9e:a7:bb:
ed:77:5e:2a:9b:e1:03:9f:79:9c:72:49:be:ed:6c:
5f:27:2f:bc:9b:86:22:7f:75:ad:98:80:01:61:ba:
dd:4f:3d:2d:58:0d:08:65:b3:a8:10:43:66:98:df:
32:06:c8:6f:c2:0f:3a:92:61:3d:03:6e:63:6a:c7:
b1:e8:14:0f:60:50:3f:43:7b:29:be:28:10:9a:13:
1d:18:53:29:47:a5:3a:17:f4:10:21:af:4b:c2:a0:
99:c1:11:47:08:0c:1d:aa:b3:a5:7d:75:8f:0b:ff:
5b:c4:be:86:08:b8:ac:cc:4f:53:93:d2:27:33:77:
9d:8e:e6:74:72:ea:38:ba:7c:dc:db:7c:f5:a6:a5:
af:29:d9:e1:4b:2f:78:d2:ce:07:1b:af:b5:86:2c:
08:96:c9:70:95:e6:58:d4:b3:cd:6b:13:25:28:83:
2a:53:3a:2e:ec:59:41:9a:e4:9a:af:34:f7:17:74:
0b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:32:2E:05:87:1A:28:CD:EC:27:A1:4B:5B:7A:9B:F5:52:DF:CB:37
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/9TIuBYcaKM3sJ6FLW3qb9VLfyzc.roa
sbgp-ipAddrBlock: critical
IPv4:
202.232.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7e:bd:e0:3e:57:68:56:e1:7d:ed:7e:d2:ff:6f:c3:7f:2c:22:
df:40:fc:de:65:1e:96:c3:d5:df:98:e8:83:99:02:a1:e4:5c:
4a:7b:64:0d:31:35:ab:a2:83:2f:df:24:4f:31:1e:b1:a5:4e:
2b:78:73:d3:be:3b:d3:e9:78:ea:e2:bd:1b:f4:3d:84:34:d6:
83:29:0b:87:4d:1a:15:99:95:24:6c:68:64:50:8d:7d:22:97:
e6:e1:78:b8:0e:51:b2:1c:40:d3:8c:bf:9f:91:aa:61:19:7d:
65:cf:39:08:b0:7a:74:ea:01:5c:73:ed:2f:17:e1:39:c8:f3:
9f:74:65:d6:01:66:b6:1d:02:3d:b8:4f:46:70:5c:07:35:cc:
d5:56:f4:3a:72:e7:80:d0:7b:1d:1e:23:49:5e:3b:b1:d1:da:
94:34:76:af:91:82:e7:05:5c:69:fd:8a:05:8f:11:f1:e2:00:
6d:c3:b7:b0:40:20:86:7e:5a:3f:c5:51:33:31:3f:c8:76:40:
c7:29:3e:8e:ed:eb:fa:37:7f:f8:9e:2f:0b:a1:46:67:a1:c7:
e3:b6:46:6d:97:50:2a:c8:93:33:50:94:dd:40:6d:c3:d0:17:
17:a9:e0:d1:cd:dd:74:17:43:97:8e:9b:4c:ea:60:f9:92:95:
31:9f:f3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:25:11 2026 by rpki-client