
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/WL-Oi-r2n9XTWaG_COlHe0dE-D0.roa
File: WL-Oi-r2n9XTWaG_COlHe0dE-D0.roa (raw, json)
Hash identifier: x8Qt+ChYBUiJ4gw7j/oPoJvnnMSwxCITyJbjDaT1dw4=
Subject key identifier: 58:BF:8E:8B:EA:F6:9F:D5:D3:59:A1:BF:08:E9:47:7B:47:44:F8:3D
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 0253
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/WL-Oi-r2n9XTWaG_COlHe0dE-D0.roa
Signing time: Tue 31 Mar 2026 07:36:12 +0000
ROA not before: Tue 31 Mar 2026 07:36:12 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 131925
IP address blocks: 202.247.168.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 11:22:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 595 (0x253)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Mar 31 07:36:12 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=58BF8E8BEAF69FD5D359A1BF08E9477B4744F83D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d1:cd:41:e9:e9:c8:92:eb:b2:ca:03:ab:85:
95:e3:17:18:0d:a2:ed:fc:bb:79:e4:d5:d9:cf:00:
1a:53:45:a1:d2:2a:52:62:48:93:5b:15:fc:dc:fe:
da:c6:da:da:30:42:70:f6:82:d0:55:26:10:78:a7:
11:4c:9b:14:1f:6f:80:c9:c0:0b:52:29:05:28:69:
86:d7:65:20:1e:80:c2:29:df:07:ae:82:b0:55:08:
81:b9:02:f5:dd:d4:ec:47:03:29:3b:dd:6c:03:d6:
1e:68:88:dc:07:b4:31:8a:54:7a:0d:0e:f0:d2:24:
bd:85:bc:e4:b4:07:81:d3:ab:73:ef:3d:8a:5a:7c:
ce:e7:53:3f:e1:1e:1f:41:d4:ca:12:46:65:34:39:
1d:23:81:b9:4c:dc:47:5d:03:ab:19:94:17:ce:8c:
36:47:1e:ea:0e:34:35:e6:5d:c6:f8:30:27:bd:e1:
03:02:5d:86:d8:ac:20:8b:84:d7:14:33:69:3f:b9:
3e:d1:40:6f:53:4e:ed:96:15:f2:79:4e:27:fa:68:
82:36:f4:4f:82:12:3c:9e:c4:78:40:0d:c7:98:1b:
11:0b:3a:b4:f8:01:b5:f1:f1:1a:21:ee:a4:57:c9:
c7:68:37:14:d7:76:70:1d:ea:a4:2f:6d:f5:95:12:
35:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BF:8E:8B:EA:F6:9F:D5:D3:59:A1:BF:08:E9:47:7B:47:44:F8:3D
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/WL-Oi-r2n9XTWaG_COlHe0dE-D0.roa
sbgp-ipAddrBlock: critical
IPv4:
202.247.168.0/21
Signature Algorithm: sha256WithRSAEncryption
72:f3:ff:66:0f:d1:f4:07:2c:7f:f7:5b:4f:5c:9a:fe:41:3c:
34:d3:c6:c2:8c:c5:64:d0:4e:f8:60:5a:81:ea:c8:04:e4:71:
04:bb:2c:a2:e9:b3:59:58:87:d6:1d:72:27:71:c4:2a:58:06:
5d:38:d9:9d:1c:59:f2:97:d6:2f:29:a1:4a:ed:83:1b:c7:a1:
23:0d:3b:72:ec:fb:ec:9c:18:6a:00:28:57:aa:e9:54:a5:56:
cb:00:14:2c:46:01:12:83:74:82:a9:00:4e:95:35:25:e0:81:
24:de:9e:e9:8f:3c:9f:3c:b7:7a:c1:1e:e0:2e:0a:7a:e5:96:
68:92:f1:1b:f4:7b:af:7a:28:e2:44:49:da:e0:10:d3:ac:94:
70:c9:b0:da:0b:a6:e1:9a:77:3a:31:93:33:36:49:21:61:f9:
f9:ca:1d:16:d7:e9:ae:17:7a:df:e7:fb:49:7e:0e:42:02:fd:
40:d9:03:48:87:02:9b:e6:50:db:69:44:68:43:d9:3a:30:9e:
89:fc:69:c7:0c:77:54:fd:2b:21:08:8a:31:ac:70:7e:fa:2f:
51:77:3c:8c:25:f8:88:30:ff:15:6a:40:ff:28:93:a6:aa:1c:
b8:41:55:de:b8:a2:7c:46:94:e6:07:a6:a1:bb:33:f3:d8:73:
0c:0d:1d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:25:00 2026 by rpki-client