
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/696/o27zRcgYTf3qpKxQOQjSjkpW67U.roa
File: o27zRcgYTf3qpKxQOQjSjkpW67U.roa (raw, json)
Hash identifier: 4RSUlHirkbZJqRbpYOFMmkrDCYs8M4aV0n7D2F15y5o=
Subject key identifier: A3:6E:F3:45:C8:18:4D:FD:EA:A4:AC:50:39:08:D2:8E:4A:56:EB:B5
Certificate issuer: /CN=32DB70FFB8A72289F56450768644658C54AA64E9
Certificate serial: 56
Authority key identifier: 32:DB:70:FF:B8:A7:22:89:F5:64:50:76:86:44:65:8C:54:AA:64:E9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Mttw_7inIon1ZFB2hkRljFSqZOk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/o27zRcgYTf3qpKxQOQjSjkpW67U.roa
Signing time: Tue 31 Mar 2026 07:51:09 +0000
ROA not before: Tue 31 Mar 2026 07:51:09 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 18135
IP address blocks: 203.211.48.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/Mttw_7inIon1ZFB2hkRljFSqZOk.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/Mttw_7inIon1ZFB2hkRljFSqZOk.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Mttw_7inIon1ZFB2hkRljFSqZOk.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32DB70FFB8A72289F56450768644658C54AA64E9
Validity
Not Before: Mar 31 07:51:09 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=A36EF345C8184DFDEAA4AC503908D28E4A56EBB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:37:ed:b8:91:31:24:f8:d6:c9:9f:9e:e2:f3:
a7:47:aa:3c:0d:6f:3f:7c:fb:08:0e:c9:79:3d:79:
63:d2:2f:05:51:2b:34:86:cc:3c:f0:e8:d8:07:e0:
d0:4a:70:1c:4f:58:ef:a6:f5:77:27:f1:4c:d2:30:
57:cf:72:eb:aa:98:39:de:d3:0c:80:52:e9:fa:d4:
6d:28:b7:bc:d6:66:c0:0c:2a:90:9f:f7:a0:6a:1c:
71:5a:6b:b9:cd:cf:8e:89:fa:f4:fe:b3:9f:69:db:
cb:96:8c:b5:92:d6:0b:e3:40:18:c4:66:e5:5f:4d:
73:3a:47:fc:88:7a:60:51:3f:7d:fa:f0:4f:2f:8d:
bf:a5:de:c3:9c:3a:fb:39:6c:5e:90:93:7d:a6:cb:
bc:00:94:b8:f8:09:91:62:17:e0:42:9e:34:04:d0:
ad:4d:80:dd:45:69:6f:27:06:bb:c5:ae:c2:69:f1:
ae:67:e9:1a:5e:f9:df:b9:ec:82:2d:3b:ea:46:68:
37:16:0d:c3:17:60:81:52:03:20:81:da:9f:e7:a3:
ce:36:37:ad:7a:6b:60:20:44:0f:49:71:c4:fc:45:
d0:71:4d:83:cd:11:25:e6:09:3e:84:d4:31:00:23:
59:f9:e5:5e:1b:95:cc:31:d0:8f:1a:9c:06:a7:a3:
2c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:6E:F3:45:C8:18:4D:FD:EA:A4:AC:50:39:08:D2:8E:4A:56:EB:B5
X509v3 Authority Key Identifier:
keyid:32:DB:70:FF:B8:A7:22:89:F5:64:50:76:86:44:65:8C:54:AA:64:E9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/Mttw_7inIon1ZFB2hkRljFSqZOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Mttw_7inIon1ZFB2hkRljFSqZOk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/o27zRcgYTf3qpKxQOQjSjkpW67U.roa
sbgp-ipAddrBlock: critical
IPv4:
203.211.48.0/21
Signature Algorithm: sha256WithRSAEncryption
09:7a:ee:f9:b0:35:0e:8e:6e:40:e9:b2:28:71:43:4f:24:64:
fc:8f:80:82:d7:cb:86:25:24:67:15:32:23:bb:98:c6:43:82:
75:4e:c3:b8:d0:2b:56:f8:02:16:da:ec:6a:0c:99:95:63:b1:
31:c2:db:37:17:80:1b:fb:fe:f5:13:e1:2d:f8:09:48:45:78:
c3:7e:93:41:22:1a:37:73:7c:f5:6b:0e:83:a0:4a:01:9e:1e:
0a:09:bc:b2:03:10:7c:a4:b2:86:62:96:0b:bf:48:04:49:d5:
fd:0d:5b:89:3d:1b:24:74:9f:c8:b6:55:ab:c9:75:f8:54:ad:
19:71:6c:c9:a6:e7:37:38:8e:3b:e9:74:3d:aa:ae:92:3f:8d:
c5:ac:66:44:cf:cc:83:48:ea:a0:1d:1a:ce:e5:36:53:71:55:
57:0d:4b:4d:03:fe:81:8d:23:da:24:d0:74:cf:21:f4:3f:9d:
0d:d2:dc:ae:31:02:69:1f:cf:07:a3:17:4c:6d:6a:c1:27:41:
fa:ab:0f:a0:f5:93:78:c4:5f:1d:3b:86:04:5c:61:23:83:1d:
71:a2:66:55:de:f2:d6:0c:fe:65:e3:12:f1:d0:4a:31:52:6b:
24:65:6d:d7:1c:bd:1c:8d:14:91:9b:7c:7a:24:d6:0a:d9:4c:
ae:3b:89:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:41:51 2026 by rpki-client