
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/O7L6r0C0nIIl8AeJ41C9q_nG6oo.roa
File: O7L6r0C0nIIl8AeJ41C9q_nG6oo.roa (raw, json)
Hash identifier: UjeGpyvFJzcASAxMFYK44QJyochLiB6vFZLG76fwSPY=
Subject key identifier: 3B:B2:FA:AF:40:B4:9C:82:25:F0:07:89:E3:50:BD:AB:F9:C6:EA:8A
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 020E
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/O7L6r0C0nIIl8AeJ41C9q_nG6oo.roa
Signing time: Tue 31 Mar 2026 07:35:37 +0000
ROA not before: Tue 31 Mar 2026 07:35:37 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2497
IP address blocks: 49.239.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 10:39:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 526 (0x20e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Mar 31 07:35:37 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=3BB2FAAF40B49C8225F00789E350BDABF9C6EA8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8e:d6:38:69:e8:83:ba:39:4f:2c:6f:a3:ec:
45:a9:44:24:a3:4a:bc:5d:f8:7b:5e:e0:d6:4a:90:
2d:7c:13:22:71:fb:a6:92:5b:29:3f:0a:ca:a4:d0:
41:db:02:c5:c9:05:5d:c5:dc:01:de:6f:5c:04:7a:
0f:e4:dc:79:2d:cc:cc:4a:be:4d:5e:e4:3d:46:f3:
4c:b2:4a:d5:d1:c1:80:99:9e:7e:d0:37:1e:6c:f4:
ba:38:3b:30:12:10:94:6b:f8:4f:6e:41:91:f3:d9:
6d:94:77:e8:9c:20:db:8f:02:8a:96:b9:87:2a:82:
d5:fa:9a:44:61:60:91:b8:13:88:fa:29:2d:b3:ac:
be:cc:95:08:94:21:bd:33:ad:61:5a:38:5b:f0:8d:
f9:4c:24:77:92:2b:a1:7c:75:d7:33:48:10:7c:9b:
f9:42:2b:d4:20:55:02:a1:b9:44:ae:83:18:b3:34:
07:9e:c4:91:26:02:ae:3b:aa:32:72:49:5b:d1:90:
af:3b:04:6a:aa:ec:ad:36:0a:21:ac:cc:5c:b7:df:
1a:61:97:ed:65:bf:6c:96:8a:10:65:70:9a:68:14:
8b:36:6b:08:af:22:cd:b1:e8:91:24:ed:30:c4:54:
91:39:c1:e2:b3:58:41:7f:d1:d6:af:8a:73:92:c3:
01:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B2:FA:AF:40:B4:9C:82:25:F0:07:89:E3:50:BD:AB:F9:C6:EA:8A
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/O7L6r0C0nIIl8AeJ41C9q_nG6oo.roa
sbgp-ipAddrBlock: critical
IPv4:
49.239.64.0/18
Signature Algorithm: sha256WithRSAEncryption
08:b7:b5:90:1e:1d:1f:1b:e2:50:67:b4:27:33:dc:78:be:98:
7e:d0:1a:31:1e:2a:cb:a7:78:da:50:76:51:d7:98:96:60:fb:
4a:15:00:1c:5d:93:27:47:0b:91:2f:15:45:5a:e5:af:f8:92:
64:44:21:80:63:f7:64:e2:dd:36:fb:f4:97:1a:0e:bf:68:20:
3e:df:a6:4f:d8:39:1a:d5:de:1a:5d:e2:24:6e:fa:56:32:7f:
3e:60:46:2d:3a:1e:5a:b9:92:ac:a0:d8:a1:3b:20:99:3f:90:
ff:1c:98:90:ce:5b:a7:95:0b:ad:d3:16:ce:99:b5:14:1e:c2:
b8:12:30:37:86:04:be:39:35:c0:da:35:13:82:37:5a:21:e4:
57:5a:b2:01:9e:97:d9:54:5c:f1:4c:7c:87:fa:2d:b6:b3:ba:
aa:70:39:11:fb:ff:e4:91:a8:b2:69:d6:b8:5a:7a:6b:7a:5b:
88:da:c4:af:82:6c:74:01:c4:4c:8e:20:c5:3e:17:f4:64:c6:
45:23:d1:51:3d:d6:a8:4a:4e:f7:a1:bb:be:84:c6:38:4e:92:
61:18:ea:cf:a0:41:e0:13:5f:be:ed:ff:1a:bd:aa:9b:7f:c7:
b9:df:12:43:7f:94:cb:1f:b2:f7:b0:ab:eb:82:a7:40:86:4c:
78:14:47:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:24:54 2026 by rpki-client