
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/820/cUtgT2VPS6tZ8fZ73icpB3nq-B4.roa
File: cUtgT2VPS6tZ8fZ73icpB3nq-B4.roa (raw, json)
Hash identifier: 3pVMXmCLriTZ56V6V111c/s+b4JUSH4Vz+e8XgemENs=
Subject key identifier: 71:4B:60:4F:65:4F:4B:AB:59:F1:F6:7B:DE:27:29:07:79:EA:F8:1E
Certificate issuer: /CN=9FEB105C67E5FD5C9E1AFD06A343C841F05A7F15
Certificate serial: 4A
Authority key identifier: 9F:EB:10:5C:67:E5:FD:5C:9E:1A:FD:06:A3:43:C8:41:F0:5A:7F:15
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n-sQXGfl_VyeGv0Go0PIQfBafxU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/cUtgT2VPS6tZ8fZ73icpB3nq-B4.roa
Signing time: Tue 31 Mar 2026 08:22:54 +0000
ROA not before: Tue 31 Mar 2026 08:22:54 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 23614
IP address blocks: 210.158.182.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/n-sQXGfl_VyeGv0Go0PIQfBafxU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/n-sQXGfl_VyeGv0Go0PIQfBafxU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n-sQXGfl_VyeGv0Go0PIQfBafxU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74 (0x4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9FEB105C67E5FD5C9E1AFD06A343C841F05A7F15
Validity
Not Before: Mar 31 08:22:54 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=714B604F654F4BAB59F1F67BDE27290779EAF81E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:67:af:b4:c1:b6:97:41:3f:5d:53:b8:e6:f0:
8a:0c:98:19:12:83:2b:b5:f0:47:7b:33:46:2d:aa:
09:99:80:87:7d:c7:ab:ec:b3:83:30:ba:7f:28:ee:
a8:5e:99:dd:76:4c:cb:03:85:6b:97:b2:61:44:93:
4b:bc:c3:03:2c:a3:8b:09:4a:fb:dd:11:04:a6:ec:
1a:26:7b:ea:f4:cd:2b:ca:a2:a4:c2:27:59:87:3f:
79:cd:e9:b4:5a:d6:d9:56:68:17:4a:1d:8c:be:ba:
35:fc:97:28:fa:16:5e:e5:d7:7f:52:ea:24:33:ff:
c2:4a:5c:35:6f:35:b0:a9:f9:df:c6:66:ee:65:c2:
45:10:67:48:5b:77:37:d7:e5:80:90:a5:0b:b3:7a:
85:a1:13:97:8c:e7:22:8b:e0:3e:d9:ec:f0:71:be:
3c:6a:33:27:49:f5:e5:0c:ef:de:85:5d:df:f8:ef:
05:d9:3b:40:07:a2:d7:7e:89:31:57:d9:54:a6:57:
3f:15:57:b3:69:80:55:66:ff:39:5a:fe:ca:84:6b:
89:0e:bf:34:73:18:4c:dd:38:fd:2c:af:36:35:eb:
91:46:1b:b2:9b:52:a7:4e:c9:a6:9e:bd:98:9f:d0:
ee:e8:3f:7b:74:a4:dd:b1:cc:5e:f0:e5:f3:02:07:
f8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4B:60:4F:65:4F:4B:AB:59:F1:F6:7B:DE:27:29:07:79:EA:F8:1E
X509v3 Authority Key Identifier:
keyid:9F:EB:10:5C:67:E5:FD:5C:9E:1A:FD:06:A3:43:C8:41:F0:5A:7F:15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/n-sQXGfl_VyeGv0Go0PIQfBafxU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n-sQXGfl_VyeGv0Go0PIQfBafxU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/cUtgT2VPS6tZ8fZ73icpB3nq-B4.roa
sbgp-ipAddrBlock: critical
IPv4:
210.158.182.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:b1:78:ed:fd:f3:1e:28:5e:60:77:25:ec:55:41:37:fa:df:
53:75:8a:da:00:41:8e:8b:0b:f8:65:97:cb:d5:93:f2:ed:52:
12:54:9f:20:79:15:9e:92:f2:50:40:2c:a3:84:4d:42:92:fe:
2d:5d:66:57:9c:bf:94:a1:16:55:79:cf:5c:19:a9:b2:34:5d:
88:a8:59:44:5c:63:96:21:37:1b:63:5d:a8:bd:9b:b0:16:bc:
79:0d:f5:d9:80:1a:cf:33:96:44:d4:98:4e:f0:f7:3b:5d:99:
23:6e:29:95:68:98:0d:d6:1f:2f:c3:22:fa:a4:e6:1a:b0:6a:
5a:27:11:40:59:34:04:af:08:d0:3b:c2:96:82:bc:a4:c8:ea:
b2:3e:a4:46:56:7f:48:30:c9:3f:8d:80:38:f7:bf:02:49:4b:
d7:98:2d:0a:48:b6:29:1e:3d:4d:8d:b1:b4:1d:ee:6e:32:dd:
c3:f1:ca:28:21:20:04:b8:88:19:bd:5a:d1:a2:3b:b1:80:65:
1e:d4:87:04:f5:74:85:72:d2:1e:8f:18:56:8d:6e:57:aa:b3:
7c:50:d1:3b:f9:f8:2c:22:c9:3a:0a:ae:51:72:66:ec:21:7d:
50:13:a7:dd:52:10:a0:42:73:29:63:77:5b:d6:0f:3e:c8:6d:
0c:9f:96:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:15 2026 by rpki-client