
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/csP7rLD2OCMjr46W4bqBG6N27Cc.roa
File: csP7rLD2OCMjr46W4bqBG6N27Cc.roa (raw, json)
Hash identifier: GetplGCnu5g70PzqQzAjROeDB1Yeqp6SAUx03JrpsjQ=
Subject key identifier: 72:C3:FB:AC:B0:F6:38:23:23:AF:8E:96:E1:BA:81:1B:A3:76:EC:27
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 022F
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/csP7rLD2OCMjr46W4bqBG6N27Cc.roa
Signing time: Tue 31 Mar 2026 07:35:52 +0000
ROA not before: Tue 31 Mar 2026 07:35:52 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2497
IP address blocks: 202.238.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 10:39:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 559 (0x22f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Mar 31 07:35:52 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=72C3FBACB0F6382323AF8E96E1BA811BA376EC27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1b:f2:f1:17:77:23:23:09:49:44:63:93:85:
9e:3c:3a:5b:d5:67:81:97:d7:80:67:8c:95:5f:ca:
44:59:4c:15:bb:3e:e2:cd:64:38:61:44:27:00:c0:
d8:2e:ae:56:a0:38:d4:57:43:a2:ba:f3:66:53:70:
17:b0:35:1e:2a:c4:c3:1a:91:37:ee:e8:c8:db:bb:
e5:d1:f6:9f:f4:ba:a7:b7:99:61:da:27:48:0b:16:
01:23:ef:ca:d0:d3:4d:31:80:56:b5:b0:71:00:cf:
52:38:cb:49:96:4f:6c:ce:30:af:54:a2:aa:c6:00:
50:16:64:92:37:8e:89:df:c3:cc:84:0b:54:14:c8:
4c:e3:c9:6a:58:c2:e1:98:a1:8e:7f:c6:16:bf:65:
bb:f3:79:40:bd:1c:09:30:6b:45:25:a2:8a:35:89:
f3:ed:88:8e:fa:5d:2f:66:a4:6f:57:09:d3:3f:d3:
ac:24:15:7e:02:cf:54:c2:ef:0d:b5:ff:52:4b:b3:
ea:80:0e:4f:03:e0:21:46:01:98:47:b2:da:da:7e:
1c:d1:3b:17:d4:7b:c1:bc:d7:31:3e:44:1b:41:6c:
43:89:77:59:80:fb:ee:46:df:5a:50:1c:b3:8a:d8:
28:f9:60:45:76:61:97:f2:c1:19:3e:92:fb:04:bc:
92:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C3:FB:AC:B0:F6:38:23:23:AF:8E:96:E1:BA:81:1B:A3:76:EC:27
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/csP7rLD2OCMjr46W4bqBG6N27Cc.roa
sbgp-ipAddrBlock: critical
IPv4:
202.238.128.0/18
Signature Algorithm: sha256WithRSAEncryption
5d:86:29:5e:49:23:54:c3:b1:92:73:73:77:e2:32:51:90:47:
50:05:2b:c1:88:b3:79:3a:89:40:f9:23:bf:a6:d6:89:d3:43:
09:f9:e6:71:cd:fa:2f:8f:8b:ce:ca:12:87:7f:74:05:72:a5:
28:99:1f:4d:f0:7a:5a:43:70:e8:55:e4:b5:c1:6a:8b:82:ad:
55:df:af:8a:67:2a:a3:a4:15:57:32:26:75:6d:c7:57:75:fc:
5f:1a:d5:c6:b7:a5:c0:29:fb:0d:e1:62:5d:de:06:5c:72:06:
32:9f:42:02:fa:dd:9e:5b:35:63:28:17:51:8e:d8:ca:e2:ad:
71:d3:cd:70:b1:c8:40:c3:11:d5:ae:72:4d:34:d0:01:73:64:
9c:5c:c0:e2:56:74:d8:0c:b9:e8:c8:51:e0:b5:cf:66:c2:45:
d4:6e:9f:4b:ab:d5:a6:f9:be:18:ae:ee:55:76:f7:94:75:f0:
21:97:63:af:32:d3:81:b6:9e:99:41:29:e4:1c:fd:d6:e3:31:
c6:45:5c:1e:f3:21:59:d5:7e:05:20:28:d2:b6:bc:1b:03:ec:
6e:26:69:25:bd:46:36:0d:74:ba:92:05:83:42:b7:e3:07:1c:
d7:e9:8e:74:11:ff:d4:34:02:46:1e:b6:78:67:38:ef:10:25:
1c:e0:d8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:25:03 2026 by rpki-client