
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/kqMlFspQHJV0kirqIM7OO03uHhs.roa
File: kqMlFspQHJV0kirqIM7OO03uHhs.roa (raw, json)
Hash identifier: nlHFYA6lNbCK6a7yx1JLxm7rxoUvWeUCJ+Kevhi+70g=
Subject key identifier: 92:A3:25:16:CA:50:1C:95:74:92:2A:EA:20:CE:CE:3B:4D:EE:1E:1B
Certificate issuer: /CN=CB8300B20659BB951060F60B1F4BC6091AF27639
Certificate serial: 93
Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/kqMlFspQHJV0kirqIM7OO03uHhs.roa
Signing time: Tue 31 Mar 2026 07:50:41 +0000
ROA not before: Tue 31 Mar 2026 07:50:41 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 18144
IP address blocks: 36.52.152.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147 (0x93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639
Validity
Not Before: Mar 31 07:50:41 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=92A32516CA501C9574922AEA20CECE3B4DEE1E1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:90:41:97:be:0b:9f:64:86:4e:76:5b:ba:c4:
b9:f1:33:df:d3:23:ed:fd:25:d0:4f:41:a6:0a:20:
16:44:53:b4:ac:5f:0d:bf:29:e4:f4:65:8f:65:e5:
22:45:32:bb:34:fc:be:8a:cc:1f:b6:5e:4b:08:da:
9e:63:5e:b4:dc:f5:7f:08:75:7c:b5:7d:7d:f1:52:
59:7d:b6:59:79:f1:5f:24:40:7d:3d:79:d1:a2:f1:
4c:0f:2c:a7:ea:0b:db:d8:55:3b:fe:59:ba:9e:56:
4c:0d:78:be:95:04:43:81:8b:c9:53:19:f3:49:ae:
58:52:fc:de:34:55:4e:62:94:5d:9d:75:fd:c8:6d:
e8:a6:5c:1d:3c:0f:f6:31:91:7e:f4:e9:52:3a:7a:
dd:21:b9:34:53:f2:8e:e3:95:71:a8:20:33:f0:70:
d3:0a:86:7e:42:29:47:e1:80:74:6b:0d:fa:32:1e:
07:7f:4f:6e:36:2c:d1:a7:81:47:4c:c7:4e:1c:f4:
a3:1b:53:0c:ed:a9:8a:ea:76:f9:75:eb:e4:ac:74:
4c:7e:3e:54:af:7c:63:48:58:56:f7:7b:68:e3:0d:
d4:a1:bc:ed:a2:18:72:d8:82:5e:fc:e6:54:69:f2:
85:c9:9f:0a:30:9a:c6:96:95:49:23:51:83:91:23:
71:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A3:25:16:CA:50:1C:95:74:92:2A:EA:20:CE:CE:3B:4D:EE:1E:1B
X509v3 Authority Key Identifier:
keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/kqMlFspQHJV0kirqIM7OO03uHhs.roa
sbgp-ipAddrBlock: critical
IPv4:
36.52.152.0/21
Signature Algorithm: sha256WithRSAEncryption
22:85:b6:d5:bf:f2:26:a4:31:f5:12:77:87:bc:13:c2:f6:d1:
ab:af:31:91:07:62:1d:26:5c:d1:ca:89:55:de:f3:87:1f:5e:
c8:1c:d4:b7:66:c9:6c:bf:41:b0:13:34:2e:5b:87:4e:8a:80:
d5:57:9c:19:60:7c:21:95:bf:d5:a7:00:44:b4:1d:a8:af:ac:
d2:30:a1:61:d6:ca:07:a3:9f:98:8b:d2:00:2a:2e:69:69:8e:
74:5d:39:11:af:1b:c8:8a:c6:4b:2c:b9:65:79:95:1b:81:a4:
8b:5f:b9:f1:80:e5:db:43:b3:5c:2a:d6:57:df:c5:fb:a6:ff:
8f:5f:f7:8c:13:23:e4:2b:06:d2:c4:65:68:5b:8a:1e:ab:46:
b4:f1:9b:98:45:25:74:49:34:16:2f:5a:b3:d5:4d:89:c4:c7:
da:c8:67:cd:dc:a1:12:15:c9:a4:51:de:2b:58:c7:06:c3:46:
f8:f6:22:56:6c:0e:ef:4a:ba:65:95:88:0f:3a:7d:6d:e6:10:
5d:91:82:05:0b:9d:f6:cf:23:cc:92:58:20:78:fc:b1:e9:fd:
f1:49:ef:17:d1:7e:29:e8:77:66:a2:ae:4a:c2:f4:9e:e9:b6:
0f:34:bd:a1:c2:09:a8:d7:58:6d:5c:f7:85:1b:24:a7:06:b6:
90:75:6b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:45 2026 by rpki-client