
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/800/retHF8LbE22XEZUt--uFb43UMMY.roa
File: retHF8LbE22XEZUt--uFb43UMMY.roa (raw, json)
Hash identifier: 6gxuRHOotGJAwCdHjwq5qYKcj4ZrPQ69JQkUZ762sX4=
Subject key identifier: AD:EB:47:17:C2:DB:13:6D:97:11:95:2D:FB:EB:85:6F:8D:D4:30:C6
Certificate issuer: /CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B
Certificate serial: 44
Authority key identifier: 08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/retHF8LbE22XEZUt--uFb43UMMY.roa
Signing time: Tue 31 Mar 2026 08:35:36 +0000
ROA not before: Tue 31 Mar 2026 08:35:36 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 18278
IP address blocks: 118.82.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68 (0x44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B
Validity
Not Before: Mar 31 08:35:36 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=ADEB4717C2DB136D9711952DFBEB856F8DD430C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:02:ff:bf:29:46:e0:57:32:b9:d5:8f:5f:d5:
be:e3:da:85:64:ef:93:1b:59:38:b7:5d:64:1b:9b:
92:e3:fa:a9:46:a9:37:14:88:df:8a:0f:97:79:a9:
2c:e1:e3:06:4b:f6:56:45:ab:0a:32:b7:fd:7a:b6:
b1:29:67:0b:d3:e0:e8:b0:67:86:90:a3:e9:f5:d6:
2d:7c:b4:ae:67:f6:fb:8b:fb:e2:a0:7d:96:e8:21:
64:88:f1:44:81:71:da:da:96:cb:d7:fe:63:25:69:
46:6e:a7:d8:00:e3:ed:45:a3:3a:c5:1f:c6:64:9c:
08:47:a0:63:8b:e1:89:9e:02:1f:b8:36:a1:b9:81:
c1:f4:7b:1f:bd:e8:d7:48:68:66:e3:2c:12:e8:89:
34:98:5b:ce:1a:6d:c6:cb:20:e0:79:ad:a0:b0:21:
98:b1:85:ff:1b:a0:77:db:1e:6a:e3:3d:87:c3:18:
9e:80:a4:b9:65:12:d2:0e:68:64:f7:d1:13:89:e2:
01:98:df:e7:69:1d:66:54:82:31:f5:1f:c0:20:85:
7a:a8:2d:b9:1a:4d:5f:11:12:44:53:54:f8:4b:b9:
57:c4:68:30:cf:17:f0:03:83:69:da:4e:82:68:ee:
93:7d:1f:e6:80:17:02:60:e3:2f:86:36:4b:1a:c8:
c4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:EB:47:17:C2:DB:13:6D:97:11:95:2D:FB:EB:85:6F:8D:D4:30:C6
X509v3 Authority Key Identifier:
keyid:08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/retHF8LbE22XEZUt--uFb43UMMY.roa
sbgp-ipAddrBlock: critical
IPv4:
118.82.48.0/20
Signature Algorithm: sha256WithRSAEncryption
98:2c:7b:ed:38:90:cd:fc:20:77:0c:40:55:5d:72:40:0c:25:
66:94:59:dd:66:20:9e:93:ff:54:0f:bf:07:81:0c:45:3c:d1:
74:62:a6:6b:bc:2b:5a:c4:c7:9f:d0:f4:53:ac:1e:b0:e7:c3:
4a:b9:83:de:7e:e3:a3:61:24:72:3e:53:db:f3:20:4a:2b:23:
4d:38:00:49:f3:bd:f4:46:1c:9e:ec:23:bf:1a:ce:ed:2a:7a:
cc:fc:59:6c:81:81:fa:f6:95:b3:43:be:6a:95:fa:6c:59:85:
18:a3:82:29:44:92:ae:8a:1e:34:06:bc:c3:67:89:17:be:aa:
f0:7b:7e:82:74:d8:93:b1:83:af:55:c3:0a:65:6f:68:0f:54:
07:9e:5f:7f:e5:9e:25:e9:36:97:45:25:cc:b6:e8:d5:1e:b9:
20:f8:fe:e0:56:66:70:5b:3f:0c:8a:bd:bf:8d:26:af:5d:ec:
a3:93:32:00:05:bb:8d:be:e6:a3:94:cc:16:25:51:5d:7d:35:
98:5d:ae:5c:5a:34:cf:38:6b:9a:bc:74:bc:66:1d:41:f2:3e:
4b:3c:9b:b0:2d:1f:b6:0f:83:92:da:39:cb:aa:a0:5f:d3:6a:
e1:c1:97:ed:f5:3d:50:96:02:11:9f:4d:54:3c:a1:7e:c9:0c:
81:68:c0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:33:52 2026 by rpki-client