
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/z53IKUzTD9oud2__3nN3NE-ozks.roa
File: z53IKUzTD9oud2__3nN3NE-ozks.roa (raw, json)
Hash identifier: IU4tqrK7Tj1biiPQ93L8Pspv3UGwCMkDTapv9qBnVXQ=
Subject key identifier: CF:9D:C8:29:4C:D3:0F:DA:2E:77:6F:FF:DE:73:77:34:4F:A8:CE:4B
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 0213
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/z53IKUzTD9oud2__3nN3NE-ozks.roa
Signing time: Tue 31 Mar 2026 07:35:40 +0000
ROA not before: Tue 31 Mar 2026 07:35:40 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2497
IP address blocks: 118.151.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 11:22:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 531 (0x213)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Mar 31 07:35:40 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=CF9DC8294CD30FDA2E776FFFDE7377344FA8CE4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f4:1f:f7:c9:96:65:82:70:d4:3f:b8:61:76:
a9:75:66:ef:e5:7a:c3:bd:b8:89:66:58:a3:e5:51:
f8:63:ca:c3:bf:a7:10:18:88:e3:e2:2b:d7:5b:82:
b3:06:0a:f4:cb:2c:f1:73:d2:d6:28:62:71:69:5e:
c1:df:48:0e:95:a9:8c:7f:2a:70:48:44:b3:a0:ae:
94:a4:0c:79:9f:2c:92:63:3e:ba:74:76:db:4f:d2:
72:47:bf:8f:2d:bc:01:6f:42:b1:50:5c:f7:b3:6b:
58:b2:8a:ae:c2:48:ac:0a:3f:6f:fe:7e:76:4a:a8:
f8:20:54:cc:a8:fd:d1:1c:25:cc:f5:7c:9c:a2:2f:
8c:96:f3:7c:dc:61:5f:58:1f:30:c8:f6:0d:5c:39:
47:91:14:5e:30:12:6b:cd:94:96:85:29:1c:60:51:
23:96:96:44:0a:2b:e0:22:88:e8:f5:fa:f7:7c:11:
7c:68:7d:90:c6:37:f6:63:ea:55:08:f3:1a:25:9b:
b4:6f:fe:28:76:8a:f9:39:26:4c:22:32:31:6a:18:
7d:c1:a0:e2:54:71:12:f3:72:0c:43:2d:8e:3a:0d:
94:2e:e7:35:9e:c5:b7:2b:2f:1e:ae:4d:07:4c:f0:
af:31:2c:86:d9:84:56:0c:44:5c:5e:13:ce:7b:2f:
a4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9D:C8:29:4C:D3:0F:DA:2E:77:6F:FF:DE:73:77:34:4F:A8:CE:4B
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/z53IKUzTD9oud2__3nN3NE-ozks.roa
sbgp-ipAddrBlock: critical
IPv4:
118.151.0.0/17
Signature Algorithm: sha256WithRSAEncryption
7a:3a:5e:b3:bb:e9:f0:ea:88:23:aa:b1:43:18:8a:9a:19:93:
c3:09:06:1d:d7:12:69:6c:05:fe:43:70:88:10:ea:11:50:0c:
d1:d5:6e:fa:82:87:13:fe:80:55:2d:d1:e7:e5:f6:ae:8e:a8:
79:46:66:43:2b:5f:8d:d8:71:05:f4:d5:d1:b4:1c:af:d4:31:
6e:b5:82:2f:f1:74:46:1d:89:c7:eb:d2:eb:1c:60:89:03:40:
ba:1c:c4:29:6e:1f:40:47:00:ba:01:f4:fa:f7:20:4e:08:9d:
b7:03:16:25:84:65:a7:35:a1:45:49:37:8d:70:ea:2e:ba:8d:
cf:ea:a1:e0:cb:c1:ea:87:8b:6a:98:ad:7a:b1:5f:80:1e:30:
6a:f2:5b:28:ae:64:71:25:3c:bc:bb:fa:6f:ee:75:9d:1c:4d:
8f:6c:03:f0:d4:be:48:e7:f0:73:87:9a:e7:11:f9:1c:83:47:
97:75:de:b2:33:a6:c4:2a:e1:ab:a2:24:38:8e:a7:19:78:98:
08:f2:b7:25:6c:31:bb:51:ba:23:80:c8:7f:dd:ee:9c:1d:da:
b1:6b:16:da:1b:bc:0f:db:0f:f4:b3:b2:78:b4:2e:c2:8b:ba:
bf:5e:6d:85:a9:f5:87:e2:6d:be:b0:90:36:b5:da:5a:ed:32:
1e:92:dd:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:25:15 2026 by rpki-client