
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/694/p0rvgW910v3A6L8SYlv4lbLlHLg.roa
File: p0rvgW910v3A6L8SYlv4lbLlHLg.roa (raw, json)
Hash identifier: h+lCKM3Tpk/P9DeNK4EuMVDiekZxpNIm7zhptj5YbtE=
Subject key identifier: A7:4A:EF:81:6F:75:D2:FD:C0:E8:BF:12:62:5B:F8:95:B2:E5:1C:B8
Certificate issuer: /CN=2DD3FD68BD774CF9C2B99D670ADA9CAD9F963A5D
Certificate serial: 2D
Authority key identifier: 2D:D3:FD:68:BD:77:4C:F9:C2:B9:9D:67:0A:DA:9C:AD:9F:96:3A:5D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/694/p0rvgW910v3A6L8SYlv4lbLlHLg.roa
Signing time: Tue 31 Mar 2026 08:36:20 +0000
ROA not before: Tue 31 Mar 2026 08:36:20 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 7511
IP address blocks: 202.79.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/694/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/694/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45 (0x2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DD3FD68BD774CF9C2B99D670ADA9CAD9F963A5D
Validity
Not Before: Mar 31 08:36:20 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=A74AEF816F75D2FDC0E8BF12625BF895B2E51CB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ad:53:2c:8a:58:7d:48:42:df:26:b2:96:8c:
17:bb:af:f3:be:d4:af:33:f9:48:c0:12:b4:03:cd:
51:64:02:58:9d:0d:a6:b6:6f:54:94:ac:88:2d:70:
db:31:fe:3c:d7:d3:48:57:20:ae:62:84:ef:63:5b:
08:b3:9b:31:a8:b6:5d:85:43:2f:1b:ef:da:c7:25:
21:9d:90:be:5d:91:cd:85:2e:88:2e:aa:c2:e7:a3:
63:dd:f3:b3:77:df:20:09:16:56:ba:f0:b9:51:0f:
60:a1:96:4b:23:15:c0:c2:20:ac:60:e4:79:05:cf:
35:00:67:9b:21:39:79:c8:6a:f6:51:df:c8:4a:e8:
4d:21:20:52:d8:73:3a:3b:ed:c4:8e:77:40:02:93:
43:8f:bc:28:54:ef:71:d2:dc:66:30:26:0d:cb:86:
56:fa:4d:2a:71:73:49:d6:b8:86:73:a7:8f:f2:d5:
e0:2f:af:d2:a2:0b:4a:e8:38:e0:85:d8:99:96:82:
ee:ed:d0:27:9d:09:36:88:9f:b7:ff:be:c5:18:60:
53:9f:a9:cd:9c:aa:9f:46:66:ba:d5:c0:a7:c7:fa:
4f:e3:bc:8b:f5:36:9a:83:99:2e:02:4d:53:e7:b3:
66:a6:9a:6b:76:af:fe:c0:0d:7e:7c:88:27:0c:d1:
78:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4A:EF:81:6F:75:D2:FD:C0:E8:BF:12:62:5B:F8:95:B2:E5:1C:B8
X509v3 Authority Key Identifier:
keyid:2D:D3:FD:68:BD:77:4C:F9:C2:B9:9D:67:0A:DA:9C:AD:9F:96:3A:5D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/694/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/694/p0rvgW910v3A6L8SYlv4lbLlHLg.roa
sbgp-ipAddrBlock: critical
IPv4:
202.79.0.0/22
Signature Algorithm: sha256WithRSAEncryption
79:e6:59:34:07:67:99:ff:0e:3f:cb:96:ee:56:b9:0f:31:8d:
17:fd:50:af:35:05:e6:50:57:0a:6a:1f:a8:f4:44:c5:8f:21:
1f:e6:d5:38:b5:ef:66:3f:8e:e6:7b:5d:a9:fd:9e:01:29:10:
cd:1c:2c:b2:d6:36:42:fa:9a:3f:1e:39:4e:1a:83:14:f5:00:
97:ae:65:f8:9b:50:5c:aa:72:1c:9a:04:ec:22:1b:31:3f:f4:
5e:3f:6b:36:e3:65:f9:07:a4:38:29:c4:99:2d:33:e0:70:f7:
5d:93:cf:bc:19:08:ab:3b:5f:34:cd:bf:67:90:d6:63:53:73:
ed:b8:83:ce:e2:79:3b:8f:b3:77:ae:ef:95:8c:c8:11:4a:61:
82:98:76:f0:0f:3d:a3:99:58:86:76:d4:dd:46:f3:ee:92:a2:
6a:c3:1a:10:3a:80:8c:51:b3:98:14:da:88:36:1f:49:dd:4b:
d4:24:46:a9:b1:a9:09:14:9a:c0:06:e0:b9:48:93:a4:f3:ab:
ae:4e:a8:0c:09:5d:4e:5b:4d:f1:b0:74:be:c8:f3:f8:e3:d1:
29:03:c8:7f:9a:da:4d:4c:af:09:a2:66:4d:d4:32:f0:1b:66:
0b:cc:5c:14:50:24:37:59:3c:76:7d:34:a2:5c:6c:ee:ea:9a:
ed:01:40:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:40:11 2026 by rpki-client