
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/751/o4Vhz1e3Ulqbu1NGpbTkxLXba78.roa
File: o4Vhz1e3Ulqbu1NGpbTkxLXba78.roa (raw, json)
Hash identifier: I7cLKuJDE2O7fenU6Ke/txjjICyPzegH89XWH9xaLK8=
Subject key identifier: A3:85:61:CF:57:B7:52:5A:9B:BB:53:46:A5:B4:E4:C4:B5:DB:6B:BF
Certificate issuer: /CN=7B49A8775994827975AB37E6DF96064C924783F1
Certificate serial: 40
Authority key identifier: 7B:49:A8:77:59:94:82:79:75:AB:37:E6:DF:96:06:4C:92:47:83:F1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/o4Vhz1e3Ulqbu1NGpbTkxLXba78.roa
Signing time: Tue 31 Mar 2026 08:39:30 +0000
ROA not before: Tue 31 Mar 2026 08:39:30 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 18129
IP address blocks: 202.70.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B49A8775994827975AB37E6DF96064C924783F1
Validity
Not Before: Mar 31 08:39:30 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=A38561CF57B7525A9BBB5346A5B4E4C4B5DB6BBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:72:23:bf:10:06:b8:67:d2:0d:72:2f:76:09:
0c:1c:5f:19:e8:ea:63:d9:3c:9a:09:e5:86:b0:c6:
0b:a1:e7:e1:16:25:2f:84:08:01:9f:f8:d3:94:5b:
28:d3:ef:70:36:58:94:9d:cd:22:d4:75:6e:d2:94:
84:7b:0d:99:a4:a2:d4:b6:42:f2:20:1c:1a:ca:e6:
9f:4b:e5:97:d9:1b:ab:0a:e2:4e:5b:35:3d:0f:71:
e9:67:24:77:bb:ca:a2:fc:3c:eb:23:97:4d:b3:62:
ac:bf:21:aa:ea:97:43:be:87:81:3a:d0:44:e8:87:
56:19:46:25:f4:73:37:e5:b4:e9:39:13:76:23:f7:
0a:8b:da:87:4d:c5:74:85:a2:b5:78:8e:28:6d:16:
da:ed:c0:55:30:24:ca:10:22:31:cc:5b:11:3a:c0:
d6:d4:f4:13:db:1b:39:28:bb:fc:fd:1c:18:07:e7:
6f:6e:d7:b3:87:de:8d:e6:79:c6:4a:a5:2b:b9:ed:
8b:4a:a6:9d:ec:70:ca:7c:61:66:89:49:e5:61:d3:
d7:d6:12:a1:7e:8d:de:a5:42:60:70:3b:02:12:e2:
bb:2b:94:a2:73:f4:9b:3f:51:fc:ea:a4:af:ac:17:
75:9a:85:53:b5:56:5b:63:e8:33:c3:1d:3c:9e:7a:
65:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:85:61:CF:57:B7:52:5A:9B:BB:53:46:A5:B4:E4:C4:B5:DB:6B:BF
X509v3 Authority Key Identifier:
keyid:7B:49:A8:77:59:94:82:79:75:AB:37:E6:DF:96:06:4C:92:47:83:F1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/o4Vhz1e3Ulqbu1NGpbTkxLXba78.roa
sbgp-ipAddrBlock: critical
IPv4:
202.70.224.0/19
Signature Algorithm: sha256WithRSAEncryption
10:d0:4a:dc:55:1b:22:df:19:a1:c5:ce:46:a9:9e:93:5a:13:
0e:33:27:1c:01:97:62:a3:80:f5:b5:1d:e0:fc:e3:ef:69:e8:
78:12:c8:49:be:4d:9e:14:e9:ed:b4:3c:63:f0:40:89:b8:77:
ba:fa:2b:fc:79:69:88:19:ae:ef:ad:ec:5e:35:16:15:da:a1:
3b:f4:9f:3e:83:79:a8:e7:ba:28:85:74:12:d3:d2:ed:4b:f1:
b8:54:e8:4a:6c:1a:5a:3f:e9:ed:01:37:49:3e:4a:85:cb:2c:
92:cb:e6:77:89:37:4d:aa:75:13:14:89:18:bf:70:ba:de:f5:
f9:5f:dd:95:5f:ef:6e:28:32:06:be:f9:b5:2c:c3:f3:98:05:
ca:8f:48:8f:06:7e:f7:b8:ff:6e:31:c1:a5:71:30:5d:c1:7b:
38:e1:f3:62:7c:98:1d:a0:33:24:24:13:96:62:9e:bb:c8:ab:
31:8b:0c:0d:89:94:f7:98:c4:d4:68:28:ac:4e:73:00:02:c8:
24:2e:e9:3d:7d:1b:95:db:ea:15:77:f7:a6:46:55:be:a4:7a:
34:ee:0d:79:e0:cd:e0:ff:2f:a4:96:39:22:78:90:5e:69:d3:
71:01:8d:b2:0f:82:b8:42:a2:cb:8d:7d:f9:5f:3a:dc:91:54:
c1:10:5d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:04 2026 by rpki-client