
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/800/WXatrNmm7vA9UylroX7TerwVKv0.roa
File: WXatrNmm7vA9UylroX7TerwVKv0.roa (raw, json)
Hash identifier: S0N1dGAG0n54vp0KqVsAwhSEHqN2BHrU6qKgOvTw+kg=
Subject key identifier: 59:76:AD:AC:D9:A6:EE:F0:3D:53:29:6B:A1:7E:D3:7A:BC:15:2A:FD
Certificate issuer: /CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B
Certificate serial: 48
Authority key identifier: 08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/WXatrNmm7vA9UylroX7TerwVKv0.roa
Signing time: Tue 31 Mar 2026 08:35:37 +0000
ROA not before: Tue 31 Mar 2026 08:35:37 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 18278
IP address blocks: 202.151.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72 (0x48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B
Validity
Not Before: Mar 31 08:35:37 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=5976ADACD9A6EEF03D53296BA17ED37ABC152AFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1f:56:95:fe:cc:92:39:fd:35:a1:d7:8e:78:
5c:d8:b0:24:30:7f:6e:cb:3f:03:2d:39:32:a8:a7:
92:80:bf:ca:d2:fd:ce:95:9e:e5:06:76:0a:15:a9:
b1:a7:2c:7d:9a:3c:58:e3:94:5b:df:d2:15:4d:b3:
e5:41:9c:1a:88:97:f0:4d:19:96:f7:db:85:97:cc:
06:1a:47:e8:b3:e4:82:fb:40:d8:53:cf:dd:50:26:
90:07:35:7d:2d:c2:2d:4f:c0:37:e6:12:b9:30:62:
95:4c:fd:0f:3b:89:d5:57:13:5e:56:a4:db:6d:72:
bc:c6:ae:e2:9a:77:bf:6d:2b:ed:a9:55:4f:1a:10:
dd:f5:f0:43:c6:b6:66:ca:24:a8:11:11:6a:9a:1c:
98:71:54:e4:40:dc:b5:be:76:d6:84:37:6e:6b:a5:
d7:bd:51:43:36:e1:fa:b2:35:c2:0a:a7:d6:4d:f5:
9d:f0:ab:ec:a0:9b:e4:dd:37:61:84:d9:a4:ce:cb:
14:db:8b:27:9d:a0:ac:16:97:7d:1b:83:32:4d:43:
6f:16:98:bc:aa:96:53:bf:0f:98:db:58:ae:09:be:
c9:75:f1:7e:53:07:94:25:9e:23:39:81:77:df:d0:
20:cf:81:cc:20:b8:52:88:3b:0a:ad:82:5a:1b:b3:
69:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:76:AD:AC:D9:A6:EE:F0:3D:53:29:6B:A1:7E:D3:7A:BC:15:2A:FD
X509v3 Authority Key Identifier:
keyid:08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/WXatrNmm7vA9UylroX7TerwVKv0.roa
sbgp-ipAddrBlock: critical
IPv4:
202.151.96.0/19
Signature Algorithm: sha256WithRSAEncryption
57:39:94:ca:2c:ec:30:f6:43:65:6f:fa:2a:0e:39:30:ab:cd:
35:7a:76:84:ab:00:42:78:6f:59:c6:80:da:50:9d:ef:48:26:
48:40:77:8a:6f:c8:e7:0b:04:96:14:e7:17:95:09:a5:f5:36:
49:c3:01:4e:4c:d1:6d:87:bc:2c:61:59:46:60:cc:a3:b7:fe:
1d:85:11:5e:46:1b:c1:c5:f3:65:1e:08:11:e8:80:59:d0:ac:
39:2b:65:ef:ab:81:c6:24:6b:3f:e7:48:9c:53:cc:e9:7c:ed:
79:bb:19:ab:f3:2e:53:da:8c:45:7f:e9:54:d1:fe:2a:65:45:
08:0d:76:8b:16:c2:0f:8d:ad:cf:b3:da:9d:e8:ed:81:79:55:
36:ad:5a:49:9f:a3:1d:42:55:3c:74:ff:68:19:cf:91:0c:6b:
0e:5d:81:b5:72:25:b5:2e:32:8c:ad:24:c0:c4:03:f6:70:35:
6e:49:23:e8:82:98:4f:fb:4d:08:06:e6:a4:27:51:4f:9d:31:
cf:dd:ea:f9:a9:f7:21:9a:dc:6a:eb:d1:d6:3c:3f:6f:4f:b9:
75:99:d3:6e:3f:1c:1d:80:22:8c:2a:fb:34:14:a0:02:d2:42:
10:7f:fe:8e:26:4c:4e:b8:1f:56:25:79:c6:48:5d:65:d3:98:
fe:d4:36:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 20:49:46 2026 by rpki-client