
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/vdNE9eAHGI1RteX6H22EWq_D2ko.roa
File: vdNE9eAHGI1RteX6H22EWq_D2ko.roa (raw, json)
Hash identifier: T/VM7hJ1x6SwS9H2iwZb+Ftm0uBRNpXAPPtgYdyAgMc=
Subject key identifier: BD:D3:44:F5:E0:07:18:8D:51:B5:E5:FA:1F:6D:84:5A:AF:C3:DA:4A
Certificate issuer: /CN=CB8300B20659BB951060F60B1F4BC6091AF27639
Certificate serial: 9E
Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/vdNE9eAHGI1RteX6H22EWq_D2ko.roa
Signing time: Tue 31 Mar 2026 07:50:46 +0000
ROA not before: Tue 31 Mar 2026 07:50:46 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 18144
IP address blocks: 202.236.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639
Validity
Not Before: Mar 31 07:50:46 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=BDD344F5E007188D51B5E5FA1F6D845AAFC3DA4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:58:cf:5e:36:7c:71:25:1a:1b:f6:ad:8a:60:
29:43:61:b7:9e:10:6c:d8:3c:33:fe:66:31:ef:27:
2f:66:e0:e5:d3:b0:53:ab:94:de:05:1c:e6:3a:43:
13:a8:8d:ea:78:66:cc:92:8b:ab:5f:d2:85:2a:4d:
40:6c:34:9a:01:a4:78:5d:3a:d3:4d:83:39:93:d1:
67:10:8c:68:aa:cb:3e:31:10:02:db:2e:aa:22:02:
68:9d:40:84:7d:55:23:09:88:e5:7b:6d:12:6d:ff:
86:ec:ba:ff:7a:a1:3d:b4:22:32:00:86:2d:92:5e:
94:0f:36:bd:01:6a:56:ce:97:d0:a2:e4:05:5d:d8:
a1:1d:e8:40:e0:6d:2f:c4:12:22:88:8b:e6:a1:31:
46:a9:98:f0:07:91:d3:dc:cd:fa:28:64:e1:63:1c:
d6:f8:d3:76:e0:04:cc:f4:5f:0a:c0:ba:18:71:bd:
34:13:79:4b:76:17:b1:d6:a9:b7:bd:51:34:29:4b:
37:64:c0:63:25:3f:2c:3b:63:88:8f:dd:9d:be:2b:
58:60:e9:8d:d2:5c:a5:c6:76:2b:0d:f1:b3:7a:8e:
84:5e:fc:fc:28:bd:2c:ba:28:8f:cb:19:53:68:a3:
96:04:c4:de:e5:93:2f:76:70:de:36:ac:0a:7a:e8:
89:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D3:44:F5:E0:07:18:8D:51:B5:E5:FA:1F:6D:84:5A:AF:C3:DA:4A
X509v3 Authority Key Identifier:
keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/vdNE9eAHGI1RteX6H22EWq_D2ko.roa
sbgp-ipAddrBlock: critical
IPv4:
202.236.14.0/23
Signature Algorithm: sha256WithRSAEncryption
42:2e:c6:b8:ef:aa:5e:13:a8:21:59:05:dc:9f:06:d5:78:d0:
d4:63:1c:8d:4f:53:97:0c:fc:7b:d4:ae:35:87:20:74:07:e8:
0f:30:f1:3a:dc:93:c4:82:b8:4a:5b:fb:98:e1:ec:07:6c:5a:
b8:89:5f:b2:1e:48:7d:c7:ed:1c:18:5d:75:e2:58:64:7e:12:
20:03:ef:67:4a:7e:d8:34:53:9d:0e:3f:f4:99:9a:fe:cf:cc:
7d:94:50:80:78:e1:94:1b:c3:2c:d6:c9:d7:48:ce:f9:5a:e3:
7d:a3:2d:c1:79:6f:b2:b0:2f:57:b3:eb:a0:98:18:b3:56:17:
57:f5:ea:47:84:67:c2:ba:b0:9b:7c:0a:26:34:f2:f4:b4:89:
08:7f:c5:f0:66:74:fd:9f:b8:7d:16:89:85:8f:b3:6d:90:17:
42:02:73:a1:6f:31:b3:1f:69:dc:65:b1:03:99:a5:08:e9:fa:
52:c7:c3:ba:98:6c:b4:f1:4e:b1:ec:cb:6c:2f:68:cd:01:d9:
46:9d:ce:3b:cb:52:76:09:8e:8c:ae:88:2c:03:c0:1e:c3:c2:
a1:69:7d:01:cb:e2:e7:9c:1f:0c:d4:ee:7a:b2:1c:1b:6b:6c:
e0:8a:90:3f:5b:76:b4:60:73:9a:3e:e1:1e:2f:d2:79:8f:28:
69:2f:f3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:07 2026 by rpki-client