
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/807/WtNqEu2LPq-ROpCcJoFcYA7Fxs8.roa
File: WtNqEu2LPq-ROpCcJoFcYA7Fxs8.roa (raw, json)
Hash identifier: +RXwYwQR8XijIisNUA7MBzP1IYmCBOKcMBoZVEkardk=
Subject key identifier: 5A:D3:6A:12:ED:8B:3E:AF:91:3A:90:9C:26:81:5C:60:0E:C5:C6:CF
Certificate issuer: /CN=849BB8D5AE11496E74A595AB3D9F8F401C4B58CC
Certificate serial: 42
Authority key identifier: 84:9B:B8:D5:AE:11:49:6E:74:A5:95:AB:3D:9F:8F:40:1C:4B:58:CC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/WtNqEu2LPq-ROpCcJoFcYA7Fxs8.roa
Signing time: Tue 31 Mar 2026 08:32:39 +0000
ROA not before: Tue 31 Mar 2026 08:32:39 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 18283
IP address blocks: 101.50.48.0/21 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66 (0x42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849BB8D5AE11496E74A595AB3D9F8F401C4B58CC
Validity
Not Before: Mar 31 08:32:39 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=5AD36A12ED8B3EAF913A909C26815C600EC5C6CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1b:c0:fb:da:8f:7b:71:0a:de:6b:5b:60:a3:
61:9e:2f:0f:e2:36:a3:57:57:02:90:e7:bb:b4:c7:
ce:e9:bb:53:4a:7f:bd:82:c7:37:7b:52:ba:78:a0:
fc:a2:26:54:6d:93:e8:5b:8d:9b:2c:81:40:38:b7:
18:e1:c7:f1:d8:3c:a5:9d:0f:45:71:3b:a5:de:a5:
34:c0:f1:d3:7e:9f:1b:61:e8:d0:91:cd:9b:00:d4:
c5:02:4a:f8:cc:69:a3:ce:6f:a1:66:e1:34:88:0a:
bb:2f:5b:fe:f7:5c:10:b2:84:32:95:a8:a4:5c:33:
b0:e0:4a:f5:26:45:bb:c0:03:6d:6e:8d:46:db:46:
68:d5:4a:fb:41:b7:e8:a7:bd:2d:cc:1c:10:90:65:
19:a0:58:bd:02:0f:63:35:b4:25:88:6a:5b:04:25:
0c:a7:e6:69:14:dc:de:ef:65:8e:42:a7:c5:f0:f8:
c7:8c:03:fc:f9:c3:cc:7a:97:fe:43:68:84:42:6d:
73:23:c9:b2:9f:71:36:6a:44:74:33:38:16:88:3a:
53:ed:f3:a5:c5:20:b2:98:c6:77:f3:e1:e0:10:c8:
3c:d6:ae:d8:4a:1e:2c:f1:52:4e:bd:89:87:ac:9b:
94:10:8b:be:73:00:98:a1:14:ba:cd:c5:98:f5:a9:
77:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D3:6A:12:ED:8B:3E:AF:91:3A:90:9C:26:81:5C:60:0E:C5:C6:CF
X509v3 Authority Key Identifier:
keyid:84:9B:B8:D5:AE:11:49:6E:74:A5:95:AB:3D:9F:8F:40:1C:4B:58:CC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/WtNqEu2LPq-ROpCcJoFcYA7Fxs8.roa
sbgp-ipAddrBlock: critical
IPv4:
101.50.48.0/21
Signature Algorithm: sha256WithRSAEncryption
29:21:b4:4a:b5:3a:c6:c5:cd:20:ae:54:e2:df:6e:24:a5:eb:
1d:35:b1:e7:8c:27:72:9f:ac:be:f1:2a:7e:57:ed:fd:21:a3:
f8:e9:3d:31:ce:3c:fb:af:05:02:6a:7d:dd:06:91:c1:be:3c:
2b:64:00:25:06:64:54:e5:f4:c6:f3:ca:14:03:20:44:42:08:
73:c8:61:23:a9:a9:a8:a2:49:e3:f5:cb:26:84:d7:53:99:2e:
e4:8d:59:c5:58:ed:5d:70:54:7e:10:6c:1f:23:56:9b:21:a7:
99:59:a6:d8:47:52:80:9c:f0:30:c4:5d:2e:92:a9:30:01:92:
aa:b7:6c:15:33:2f:3d:6b:17:1a:72:ce:ad:a5:8d:a4:e6:11:
8e:6d:39:57:60:9a:e3:28:b7:a9:bc:50:e2:b7:22:68:d3:6d:
f8:2d:ab:a1:e1:ee:63:73:6c:6c:98:54:3f:d3:d2:f6:81:3f:
23:9f:3b:a2:2f:60:ca:39:ff:1a:fc:5c:33:fa:97:30:54:0b:
e5:92:e5:ac:9b:54:7f:9c:2d:9e:9b:3e:8d:36:ac:f4:a5:4f:
e6:95:e8:31:cf:e9:8e:0f:0e:b2:f3:bb:62:04:7f:91:01:ce:
74:5f:45:01:25:14:97:d8:d2:46:48:34:be:37:0e:1d:3e:7a:
f4:3c:84:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:07:03 2026 by rpki-client