
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/c89VrQUzdbHttB5MzxIWDNkPxUM.roa
File: c89VrQUzdbHttB5MzxIWDNkPxUM.roa (raw, json)
Hash identifier: SRq04KADi1R2zn8BKqVaf/Dvf3j3xLpIv3sE2rfyaWM=
Subject key identifier: 73:CF:55:AD:05:33:75:B1:ED:B4:1E:4C:CF:12:16:0C:D9:0F:C5:43
Certificate issuer: /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial: 9E
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/c89VrQUzdbHttB5MzxIWDNkPxUM.roa
Signing time: Tue 31 Mar 2026 08:25:09 +0000
ROA not before: Tue 31 Mar 2026 08:25:09 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9374
IP address blocks: 210.237.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Validity
Not Before: Mar 31 08:25:09 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=73CF55AD053375B1EDB41E4CCF12160CD90FC543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:48:d7:ea:3f:77:08:a3:bd:31:20:a3:30:ec:
a0:1f:ae:ff:55:c0:af:32:e1:e3:2a:8b:dd:e8:26:
65:9f:94:70:e6:2c:19:13:e3:c6:b4:a2:6e:b7:ec:
71:b0:7e:6b:ff:7b:2b:27:4c:3b:16:b1:6b:fd:ac:
56:01:39:73:e1:14:42:26:f0:0f:a2:26:ed:02:5d:
85:71:ec:ff:ba:66:29:52:e4:b1:ad:69:25:4a:55:
ac:41:95:5e:03:bf:fd:e6:b2:a0:fd:9d:12:10:b1:
e2:53:cb:f9:81:dd:4b:20:98:30:4e:8f:ec:a4:01:
99:cd:96:bb:be:52:15:32:d8:f3:fd:80:53:52:02:
fa:f8:3e:36:9d:58:ad:d4:27:7b:b5:7f:f3:74:8c:
14:b1:70:93:ca:ec:81:1c:76:2b:8f:3c:d8:c2:ca:
f2:8a:38:2c:eb:78:10:8a:93:7c:3e:4e:e1:5c:83:
bc:d1:3b:a9:07:f6:bc:4b:21:fb:d4:bc:c6:95:02:
4e:77:96:1b:8a:07:2a:9d:5b:02:80:f2:69:38:27:
b7:01:32:6a:c1:9a:5f:7a:a1:b8:68:b0:d3:5e:b5:
d3:fc:6a:a9:16:b7:a5:5c:d5:8f:d3:58:bf:0b:8e:
02:fd:70:cf:e3:f0:e5:51:4b:a2:30:3a:b5:1d:aa:
8e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CF:55:AD:05:33:75:B1:ED:B4:1E:4C:CF:12:16:0C:D9:0F:C5:43
X509v3 Authority Key Identifier:
keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/c89VrQUzdbHttB5MzxIWDNkPxUM.roa
sbgp-ipAddrBlock: critical
IPv4:
210.237.0.0/19
Signature Algorithm: sha256WithRSAEncryption
10:63:ed:c5:a1:c8:d0:06:e1:ce:aa:4d:15:8b:e5:9a:9a:a2:
4f:36:ae:23:ad:a9:c9:b6:15:2c:f5:51:f8:39:7b:a4:a5:44:
47:c1:07:ad:08:27:b3:35:40:fe:52:2a:3e:d3:f3:4f:65:7c:
11:26:bf:e9:f9:ee:9c:21:72:ff:e4:c5:a8:e7:b8:b4:cd:47:
ed:18:83:03:7f:87:07:0b:7a:7a:66:dc:22:21:12:a2:0c:be:
6b:90:06:1f:52:43:64:af:2b:58:4d:56:55:6a:30:4d:8c:a2:
12:8d:82:b6:cb:4f:17:b2:76:c0:0a:19:a0:f9:cb:46:e2:0f:
08:46:5d:9f:56:26:7c:8b:93:60:e7:51:a6:3c:54:d9:63:b1:
5a:af:fb:c0:f3:03:7c:ff:60:5a:30:6b:89:51:5c:9f:60:a5:
9c:1e:bd:67:80:f2:8d:92:09:24:73:19:d2:06:2f:18:a4:dd:
d6:e0:b7:1c:72:d2:1e:6f:02:eb:24:e2:ee:c9:b2:52:90:0a:
58:6f:84:19:9d:08:66:3a:ec:ac:89:26:2d:7c:ed:7a:fd:bf:
f5:e4:a2:f7:15:58:47:bb:dc:57:f6:05:11:0e:dd:62:bd:a3:
1f:96:cb:d6:01:b7:8b:84:b9:78:67:2b:35:ba:13:c8:91:eb:
a6:0b:bb:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:17 2026 by rpki-client