
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/Ku2T2SOX5iRI_l_1YPcOQms9oq8.roa
File: Ku2T2SOX5iRI_l_1YPcOQms9oq8.roa (raw, json)
Hash identifier: 8Aac0ukCt08bW2vlQS5xKSDx456UGHe6nIPwPqNbJ98=
Subject key identifier: 2A:ED:93:D9:23:97:E6:24:48:FE:5F:F5:60:F7:0E:42:6B:3D:A2:AF
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 0236
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Ku2T2SOX5iRI_l_1YPcOQms9oq8.roa
Signing time: Tue 31 Mar 2026 07:35:54 +0000
ROA not before: Tue 31 Mar 2026 07:35:54 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2497
IP address blocks: 202.32.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 10:39:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 566 (0x236)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Mar 31 07:35:54 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=2AED93D92397E62448FE5FF560F70E426B3DA2AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c5:3e:3d:9e:99:71:f1:c9:39:9e:7e:bf:cf:
6e:c1:06:eb:6e:36:b5:94:85:18:22:8f:ba:61:43:
af:9e:75:e8:ab:94:31:d8:af:43:87:68:3c:0d:35:
e9:1f:ad:63:79:3f:86:a0:74:67:2f:05:3c:32:58:
e6:aa:f0:65:a3:99:bf:c6:62:58:9b:a6:32:3d:6f:
2a:7c:c3:93:43:78:bf:9a:b2:bd:71:a7:5e:3c:98:
f6:46:41:a0:61:25:15:f0:a6:e4:7d:c3:cf:72:56:
04:1b:e5:b5:0d:a1:be:e2:ce:5e:4e:e7:c3:9e:c6:
8d:1a:81:50:0a:cc:1c:87:63:2a:53:24:2d:bb:bc:
53:3e:57:96:0a:38:ab:b3:85:e9:2e:24:37:f1:a9:
03:df:a0:15:fc:e1:a7:54:91:2d:39:00:1f:ea:16:
61:e0:ad:b1:1d:03:65:18:99:fa:58:da:62:f0:68:
b2:ab:eb:4e:84:a0:50:f6:02:2a:dd:00:f6:75:66:
eb:06:f3:67:0b:d4:a8:85:94:0c:d1:91:a9:db:f7:
b0:4f:98:f2:4e:55:a3:4e:7f:66:2e:7e:27:e4:80:
e8:60:ae:90:eb:dc:9e:c5:dd:2d:91:2d:14:2b:50:
d3:ba:5d:bd:44:24:5c:08:ba:59:e0:e1:bd:ba:9c:
ca:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:ED:93:D9:23:97:E6:24:48:FE:5F:F5:60:F7:0E:42:6B:3D:A2:AF
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Ku2T2SOX5iRI_l_1YPcOQms9oq8.roa
sbgp-ipAddrBlock: critical
IPv4:
202.32.0.0/16
Signature Algorithm: sha256WithRSAEncryption
63:a6:c9:90:9e:f6:95:ba:ee:49:f1:4c:c1:85:92:c8:6a:e6:
6f:ca:ae:0b:5e:1c:8f:74:8f:c6:97:4f:e6:39:b9:43:fb:b2:
11:32:6a:9a:0a:f7:7f:ac:be:a9:0b:df:6a:61:70:92:f5:03:
89:e6:28:b6:b8:b7:49:72:db:8e:50:04:87:bb:66:c2:8d:81:
4a:86:3f:3b:e4:b1:3d:3e:ca:c1:a8:48:53:05:7d:e1:7f:3e:
3b:8e:bc:02:99:27:a9:fc:0d:c2:97:6b:2b:b2:e9:46:4d:26:
05:1c:dc:14:25:b1:92:79:fd:7c:a1:2d:8e:0b:84:a4:bb:b5:
0b:88:76:ed:3a:51:bb:a4:d9:88:fd:34:bd:25:cd:22:5b:b8:
d0:56:83:44:c5:1e:48:1a:31:82:3b:83:fc:a3:b7:0a:95:88:
d5:76:8e:24:b8:ad:c1:83:b5:88:09:7a:6f:81:99:ef:2d:01:
aa:c4:94:de:34:3d:c0:49:5c:1e:ea:58:f5:8c:7d:59:c4:85:
10:0a:bf:7d:97:25:12:a3:be:39:8e:6e:53:d1:c1:e4:e1:6a:
e8:c2:2f:c1:1a:66:10:81:67:f8:52:75:99:48:4c:67:4d:65:
67:8a:a6:96:64:b9:cf:ef:9b:ad:a8:cd:4d:20:51:e4:9f:b2:
78:7c:6b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:24:56 2026 by rpki-client