
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/793/luF-XVQ2RqbTVeACDk7inukqXYk.roa
File: luF-XVQ2RqbTVeACDk7inukqXYk.roa (raw, json)
Hash identifier: 1/sQ1CdAkzh76vnRNYNu/ta9MSK0imN7WCvVnKJ/9uI=
Subject key identifier: 96:E1:7E:5D:54:36:46:A6:D3:55:E0:02:0E:4E:E2:9E:E9:2A:5D:89
Certificate issuer: /CN=8D8D2658815CA3C4EE5A53F91BA61268E3F4C0E1
Certificate serial: 54
Authority key identifier: 8D:8D:26:58:81:5C:A3:C4:EE:5A:53:F9:1B:A6:12:68:E3:F4:C0:E1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/luF-XVQ2RqbTVeACDk7inukqXYk.roa
Signing time: Tue 31 Mar 2026 08:23:56 +0000
ROA not before: Tue 31 Mar 2026 08:23:56 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 18274
IP address blocks: 202.173.96.0/20 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84 (0x54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D8D2658815CA3C4EE5A53F91BA61268E3F4C0E1
Validity
Not Before: Mar 31 08:23:56 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=96E17E5D543646A6D355E0020E4EE29EE92A5D89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e6:fc:8b:63:dd:f7:07:c8:20:f5:ee:5c:21:
fe:ed:71:fe:c3:cd:d8:cb:f8:cc:70:9b:65:2a:3f:
36:01:75:d8:92:6f:40:86:84:f7:76:9b:7c:fc:c9:
f0:92:d6:84:10:35:eb:36:ea:28:c3:15:8c:42:5b:
d1:7d:15:0a:4c:55:c3:3c:f2:99:c4:6c:83:eb:47:
e2:0a:5a:84:65:3b:0f:2e:38:5a:7d:57:a8:f7:32:
b2:29:db:9f:35:7f:9f:80:de:d8:c9:76:a5:89:7a:
70:10:2f:21:be:d5:a0:c9:2d:0b:ff:ea:23:ca:4a:
04:cc:a3:bd:f2:79:61:d9:b5:65:b6:44:b2:5e:00:
4f:5d:7b:61:09:8f:cf:f7:61:c9:b1:1c:ef:0c:15:
39:b4:d5:8a:89:4a:1e:8a:63:ac:5e:46:85:62:6b:
fa:0d:e5:f1:58:4b:90:90:a0:28:83:3e:8e:64:b4:
aa:a2:26:8c:f4:90:1c:da:dd:59:0a:da:95:37:b9:
49:73:c2:1e:dc:87:ab:b4:13:3b:6c:c1:bb:48:df:
77:3f:3a:0c:65:8d:fd:e7:0f:8c:44:eb:4d:e7:45:
65:75:b5:2d:22:2e:40:eb:57:ce:6e:55:29:62:28:
33:7b:bc:2a:d3:c5:d4:6a:1a:49:d6:3e:e3:50:b4:
3b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E1:7E:5D:54:36:46:A6:D3:55:E0:02:0E:4E:E2:9E:E9:2A:5D:89
X509v3 Authority Key Identifier:
keyid:8D:8D:26:58:81:5C:A3:C4:EE:5A:53:F9:1B:A6:12:68:E3:F4:C0:E1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/luF-XVQ2RqbTVeACDk7inukqXYk.roa
sbgp-ipAddrBlock: critical
IPv4:
202.173.96.0/20
Signature Algorithm: sha256WithRSAEncryption
59:e6:f5:54:da:39:ae:dd:bc:86:db:d8:31:98:3e:e2:90:c8:
1d:48:8c:52:82:ce:d1:a6:1e:cb:37:c3:88:35:56:70:de:e9:
78:ef:9a:39:38:91:66:32:b7:a8:5c:f2:81:a6:ce:22:95:c1:
cc:f8:73:b6:39:c4:90:a9:70:51:37:f2:05:30:13:38:b1:20:
06:11:ef:0b:08:cd:f2:61:ef:7f:bd:5d:3d:65:7b:5b:13:03:
8f:9e:90:f9:9a:12:75:14:dd:42:1d:f5:87:6a:b5:17:ec:fd:
73:0a:23:8f:b4:ae:5a:a7:40:d6:ae:b8:7f:20:93:93:9e:5a:
90:5e:6a:f5:f6:1a:14:ea:c2:ed:bb:78:a3:7d:ed:0e:2a:73:
38:2d:a7:67:31:57:05:ae:5f:0c:07:11:34:ab:97:14:69:3c:
4b:b2:ce:d3:57:58:2a:40:cd:f2:48:a1:ce:48:af:7b:dd:01:
d5:13:29:7c:d0:88:f7:db:dc:e5:6a:0f:bc:04:e4:7a:b9:91:
62:44:c7:3c:6b:8f:90:e8:fe:d4:a8:fa:88:db:1d:4a:a5:28:
fe:56:b1:83:d0:c8:00:db:f0:05:f1:1d:47:22:40:1d:d4:e6:
8a:67:a6:24:af:d7:97:66:80:5c:45:1a:a4:98:4d:5b:16:e6:
c8:1a:af:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:39 2026 by rpki-client