
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/840/4979LvpzV38HN7h_rSegRN-RbGM.roa
File: 4979LvpzV38HN7h_rSegRN-RbGM.roa (raw, json)
Hash identifier: LfKArFp71mKNaeHM7HGB4PBqdoyKS3tpR0UrRKdjpBg=
Subject key identifier: E3:DE:FD:2E:FA:73:57:7F:07:37:B8:7F:AD:27:A0:44:DF:91:6C:63
Certificate issuer: /CN=D79B3890C2DA3795148976B954C2024056797554
Certificate serial: 68
Authority key identifier: D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/4979LvpzV38HN7h_rSegRN-RbGM.roa
Signing time: Tue 31 Mar 2026 08:15:37 +0000
ROA not before: Tue 31 Mar 2026 08:15:37 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 131934
IP address blocks: 103.28.96.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104 (0x68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D79B3890C2DA3795148976B954C2024056797554
Validity
Not Before: Mar 31 08:15:37 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=E3DEFD2EFA73577F0737B87FAD27A044DF916C63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6e:19:ae:e8:47:69:10:61:41:4d:b6:7e:4f:
8a:3d:50:8f:60:65:6e:26:d5:8b:f1:8e:cd:2a:23:
db:df:af:46:33:b9:bd:b4:e3:22:45:1d:7c:7f:c2:
22:e3:d8:70:f1:19:8d:40:6d:6c:1b:be:6f:f9:f2:
f0:81:15:9f:27:7b:41:99:7e:a5:b8:cd:8b:7c:13:
23:41:4a:73:6c:c6:62:7b:0c:ca:4a:08:15:7e:b2:
90:57:7b:00:dd:e5:42:67:14:6d:32:61:e9:c3:e6:
a0:12:29:71:28:59:64:17:4c:a1:ff:00:2c:25:a6:
56:19:8f:08:dd:04:ea:31:6f:1a:76:0d:65:ae:29:
b7:9e:6a:9d:20:cc:25:48:9c:0f:77:56:43:1b:ea:
b8:a1:09:2f:77:8e:ee:c4:e4:9a:d2:d0:32:de:bc:
c6:f5:99:ba:91:a4:ac:d0:ee:08:cf:89:aa:fa:2c:
ce:5d:63:42:ee:19:52:e3:9a:5a:fd:e8:dc:d7:19:
58:05:d5:9e:68:fd:21:a1:92:9a:b2:c7:9d:d5:21:
dc:69:85:46:17:db:d9:7b:0d:ec:84:fb:a0:9f:45:
7f:5b:12:25:54:f3:28:e8:f1:4c:13:b0:c8:e0:2f:
e3:c2:d3:4b:2d:57:4a:4a:b7:a4:5d:7f:73:9b:3a:
be:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:DE:FD:2E:FA:73:57:7F:07:37:B8:7F:AD:27:A0:44:DF:91:6C:63
X509v3 Authority Key Identifier:
keyid:D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/4979LvpzV38HN7h_rSegRN-RbGM.roa
sbgp-ipAddrBlock: critical
IPv4:
103.28.96.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:78:2b:3b:ec:f2:55:54:af:1a:a5:8b:86:6e:91:54:dc:18:
f4:9c:a7:ae:a5:3e:43:2d:c4:8d:e6:d3:3d:0e:87:74:89:4c:
6b:3f:0c:7f:d5:72:31:71:66:b4:49:02:26:5d:5c:5b:4c:a5:
0e:44:e5:55:dc:71:6e:dc:a7:da:43:3b:cc:84:58:a7:f7:1c:
52:3c:c5:15:44:bf:4e:41:b4:d6:b7:d5:a0:5f:35:35:47:e4:
7f:21:c1:cb:9d:b1:24:00:cc:77:e0:98:ac:35:3e:58:cf:41:
91:a7:98:a1:4a:82:b7:89:9e:bf:c9:bf:b9:cf:ab:a5:f2:d2:
9b:6a:ef:19:67:33:46:c3:cc:da:fe:30:b2:21:e2:34:be:a8:
9b:85:00:ac:47:d4:c9:e5:f3:b3:17:fc:5e:87:bc:2e:c1:ae:
b7:88:32:23:37:56:15:cf:06:78:ae:bf:02:1f:7d:6c:ac:6d:
24:b9:75:6a:c2:3a:d7:96:2e:ef:eb:b9:79:3f:2a:a3:40:1d:
80:a3:f2:e6:ca:51:3b:c8:58:5f:4e:82:36:17:ba:59:42:5b:
98:f1:cd:f8:f8:7a:1d:7e:32:5c:05:c4:76:c1:22:10:71:e4:
9d:05:bb:fe:fa:ad:6d:21:e8:5a:3b:36:28:5e:ab:68:45:41:
32:d2:c4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:33:52 2026 by rpki-client