
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/751/QXQhNGIPyouHok5gQzIVpx1MwiQ.roa
File: QXQhNGIPyouHok5gQzIVpx1MwiQ.roa (raw, json)
Hash identifier: rlPe+6Wtlj+owZ8t2kTBuJ3hMWR/MQOOyytc9I9Qkto=
Subject key identifier: 41:74:21:34:62:0F:CA:8B:87:A2:4E:60:43:32:15:A7:1D:4C:C2:24
Certificate issuer: /CN=7B49A8775994827975AB37E6DF96064C924783F1
Certificate serial: 3D
Authority key identifier: 7B:49:A8:77:59:94:82:79:75:AB:37:E6:DF:96:06:4C:92:47:83:F1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/QXQhNGIPyouHok5gQzIVpx1MwiQ.roa
Signing time: Tue 31 Mar 2026 08:39:28 +0000
ROA not before: Tue 31 Mar 2026 08:39:28 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 18129
IP address blocks: 119.47.96.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61 (0x3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B49A8775994827975AB37E6DF96064C924783F1
Validity
Not Before: Mar 31 08:39:28 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=41742134620FCA8B87A24E60433215A71D4CC224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:30:cf:bb:60:d8:e7:a0:c0:3d:11:9b:72:bd:
89:b9:14:82:a6:28:0b:a8:f6:1a:60:2e:8f:62:19:
06:38:42:85:83:09:22:db:a7:0a:bd:da:ee:04:70:
22:db:a0:7f:79:f9:37:15:3c:23:92:1a:dc:7b:f9:
9d:31:a1:de:b6:1c:75:f6:0f:2e:04:3c:5a:38:0a:
23:f5:ee:b9:43:80:d6:e3:70:7d:2e:7b:66:13:be:
87:c7:ff:ec:3a:e8:37:e2:d3:0c:95:3d:ba:92:c4:
b3:26:a3:3d:67:b2:19:d6:cc:26:86:c0:87:6e:a8:
16:7f:98:d1:fb:2b:af:ba:92:44:3c:3b:dc:47:69:
50:fb:f8:3e:ce:a7:94:67:bb:fd:3d:1d:f1:58:b7:
eb:ed:9d:c5:01:bd:3a:13:7b:98:05:f9:7e:82:2d:
c9:e5:8d:14:5a:ea:11:47:d7:d6:e6:48:48:f9:7d:
40:87:f2:4b:a3:9f:ae:6a:bc:57:ae:f9:a3:45:4b:
d7:24:b2:4c:66:2d:69:27:60:98:a0:18:3d:da:2f:
d5:81:02:7c:8f:d7:76:92:7d:4c:4a:37:45:ce:8a:
1a:41:cf:d3:b7:a0:bf:eb:f1:13:dc:e0:ca:3a:dd:
da:ab:5e:4c:90:fc:a8:49:d9:f5:ad:a3:d6:01:20:
fe:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:74:21:34:62:0F:CA:8B:87:A2:4E:60:43:32:15:A7:1D:4C:C2:24
X509v3 Authority Key Identifier:
keyid:7B:49:A8:77:59:94:82:79:75:AB:37:E6:DF:96:06:4C:92:47:83:F1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/QXQhNGIPyouHok5gQzIVpx1MwiQ.roa
sbgp-ipAddrBlock: critical
IPv4:
119.47.96.0/20
Signature Algorithm: sha256WithRSAEncryption
65:e1:84:5f:02:ba:c0:6e:2f:11:8c:70:b8:eb:26:15:c6:e2:
1a:2e:eb:e2:cc:b4:02:07:fe:97:ca:07:81:5e:f7:ca:59:78:
a3:5c:5a:28:e5:08:ba:7b:ef:b6:ac:b3:8c:cf:e1:b0:0d:d7:
e1:ea:8d:7a:57:4a:cc:41:d9:a8:20:92:da:5d:61:5c:ef:a0:
03:84:ba:9f:a3:04:00:bd:aa:13:27:80:45:71:81:7d:b4:f3:
2a:95:ed:a4:46:df:a0:98:f3:c9:ff:28:04:a0:86:25:ab:a7:
aa:b0:9b:8a:01:57:d9:7b:f2:a2:d8:d6:a5:f5:3b:c6:e4:53:
14:1c:24:82:0d:1f:df:d8:d5:dd:bf:e7:97:af:8c:eb:ca:0c:
95:de:6f:08:93:ba:33:93:10:b7:66:ea:d5:55:52:37:c5:b9:
16:c7:e5:26:69:74:40:ae:f8:ae:d9:ad:49:0d:95:5d:61:58:
b3:21:5c:b0:d3:ff:e5:d6:12:b1:3f:b4:64:6b:9c:05:b4:90:
a7:58:a7:3b:29:6d:50:13:3f:6f:30:04:73:0a:f9:1b:65:79:
3b:bd:63:07:f2:fc:44:90:93:c8:b2:fc:1d:c7:44:8d:a4:ab:
11:d7:96:d4:41:3c:03:96:dd:0a:8e:ec:96:52:c3:fe:b0:56:
33:f9:53:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:27 2026 by rpki-client