
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/w4qebCHdWAzPl78EbeFZb04TgAs.roa
File: w4qebCHdWAzPl78EbeFZb04TgAs.roa (raw, json)
Hash identifier: YprOJ+ySl/2iJjr4LV7LFOU818h0+qZ3QsGBg5Eaqvs=
Subject key identifier: C3:8A:9E:6C:21:DD:58:0C:CF:97:BF:04:6D:E1:59:6F:4E:13:80:0B
Certificate issuer: /CN=CB8300B20659BB951060F60B1F4BC6091AF27639
Certificate serial: A0
Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/w4qebCHdWAzPl78EbeFZb04TgAs.roa
Signing time: Tue 31 Mar 2026 07:50:47 +0000
ROA not before: Tue 31 Mar 2026 07:50:47 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 18144
IP address blocks: 203.168.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160 (0xa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639
Validity
Not Before: Mar 31 07:50:47 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=C38A9E6C21DD580CCF97BF046DE1596F4E13800B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:95:e9:3d:49:d3:58:2e:fe:f2:7b:e6:a4:5d:
ac:ef:54:73:ad:2a:8c:bc:03:d3:bc:09:ee:06:18:
eb:45:d7:64:30:b8:69:9f:f7:04:f6:d7:71:3b:77:
f2:f7:e6:6d:d4:d1:ab:ed:8b:cb:48:a7:30:86:72:
1f:13:df:6b:3a:9b:b0:1b:e2:34:bf:da:a6:b8:ac:
d6:33:dc:cf:0d:8a:57:6b:fc:0b:c6:67:ba:3c:66:
6e:f5:e9:08:10:0a:6b:75:30:50:ad:2d:17:b6:a3:
72:61:4f:aa:15:a5:c0:8c:3b:df:86:35:40:90:2b:
4e:8d:8b:90:e6:b7:09:0d:3e:78:1c:7c:42:53:5d:
34:1b:23:25:58:e2:a5:8e:b4:93:f6:b3:08:9d:b4:
85:93:a3:05:0f:b3:4b:59:66:b9:3b:53:9d:a2:6a:
8b:96:8f:3d:79:ed:fb:d9:02:44:73:e3:1e:b1:14:
6b:d3:61:50:8a:f4:0f:91:91:e9:e5:35:6d:ef:e1:
eb:82:c4:14:30:be:56:52:f0:8a:ea:e9:9d:19:b9:
29:fb:63:e9:ec:74:c1:9b:20:13:ca:9c:c8:a2:a6:
4a:64:6d:8a:45:b4:4a:8d:d5:0b:91:34:64:2e:44:
d4:ee:95:3f:f1:b8:5d:a3:75:59:34:8f:47:55:a4:
a9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8A:9E:6C:21:DD:58:0C:CF:97:BF:04:6D:E1:59:6F:4E:13:80:0B
X509v3 Authority Key Identifier:
keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/w4qebCHdWAzPl78EbeFZb04TgAs.roa
sbgp-ipAddrBlock: critical
IPv4:
203.168.64.0/18
Signature Algorithm: sha256WithRSAEncryption
66:b8:8e:fb:ee:0c:96:22:d6:81:69:bd:57:83:c0:49:3a:0b:
88:9f:73:83:95:35:ae:42:e2:07:d0:28:ce:00:35:ad:49:22:
25:39:a9:55:c7:99:f9:4e:8b:54:c0:fd:7a:2c:f1:77:7a:a0:
a4:d0:bf:d2:3c:f2:73:c8:bc:29:b0:5a:a8:4c:36:d6:1c:1e:
36:bb:67:92:07:18:b8:08:ac:a4:bd:da:f5:f6:c8:92:35:1d:
db:0a:6d:47:ea:20:18:7f:23:b9:77:b0:9f:26:1e:44:41:5e:
78:c2:36:e6:7d:45:13:f5:5c:47:f1:d0:4e:9f:a7:2f:34:a2:
2b:e4:4f:ae:c7:ae:89:b6:f3:d1:21:dc:90:34:b3:2d:a5:8a:
fa:cd:b2:99:ba:2b:ff:6f:36:37:f5:8c:6b:83:d1:b5:2f:77:
3f:4b:79:2f:f9:11:d8:80:39:d3:75:0f:86:e7:15:d4:56:17:
98:20:58:a4:87:c6:56:d0:7e:9a:cc:10:87:30:00:7e:dc:4e:
ae:15:41:8a:d8:e3:60:60:9c:df:b9:2d:a8:a1:46:3b:d6:42:
eb:fe:39:90:71:0f:c4:d4:33:6d:c0:df:71:54:98:98:2c:82:
5a:b6:36:20:4a:99:ae:81:ff:bb:76:9b:d0:07:59:84:86:58:
63:90:51:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:51 2026 by rpki-client