
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/840/YaRDybiX5I-TiBh-94M5qu7L3iE.roa
File: YaRDybiX5I-TiBh-94M5qu7L3iE.roa (raw, json)
Hash identifier: ciBX5iraooepa3ifazOQLP9kg2NEyA8KbemSYGiNYJE=
Subject key identifier: 61:A4:43:C9:B8:97:E4:8F:93:88:18:7E:F7:83:39:AA:EE:CB:DE:21
Certificate issuer: /CN=D79B3890C2DA3795148976B954C2024056797554
Certificate serial: 63
Authority key identifier: D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/YaRDybiX5I-TiBh-94M5qu7L3iE.roa
Signing time: Tue 31 Mar 2026 08:15:35 +0000
ROA not before: Tue 31 Mar 2026 08:15:35 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 131934
IP address blocks: 14.192.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99 (0x63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D79B3890C2DA3795148976B954C2024056797554
Validity
Not Before: Mar 31 08:15:35 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=61A443C9B897E48F9388187EF78339AAEECBDE21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3c:2a:8c:f9:90:6b:ae:5c:48:2c:d5:6e:2d:
c4:a0:84:37:07:bd:91:2f:21:93:09:f8:2d:59:7c:
93:ee:ce:05:fa:48:b0:0d:bc:31:7a:a5:7c:84:d2:
10:94:12:08:f8:40:4a:7f:43:e9:b6:20:2b:bd:7b:
a3:9b:3c:e3:d5:d6:a5:b4:c2:94:9b:92:51:aa:37:
80:c5:cd:b7:c5:1f:e3:06:e2:e5:a6:4c:00:7f:96:
8c:58:45:ab:a6:a5:42:00:59:74:e8:40:63:b6:55:
b4:d9:54:18:e1:f1:bd:15:b1:c1:ca:fd:ea:09:5d:
d8:a5:d0:c5:f4:88:36:05:e9:51:3f:cc:d5:0e:83:
a1:68:d8:ff:fa:49:28:3e:09:6d:3f:40:25:83:7d:
48:92:5f:33:0e:19:39:eb:53:3f:f3:3d:01:0b:de:
d2:fc:49:fc:cc:1e:08:e4:16:b1:f4:51:e5:57:95:
2a:67:3c:05:32:b7:68:9e:73:67:9e:2b:be:d4:11:
64:3b:a9:08:dd:54:95:d9:3d:d8:fd:48:85:73:95:
88:55:fc:c2:7b:21:8a:53:e5:37:bb:36:3c:3f:de:
8e:4a:09:25:82:65:a4:f6:9d:5c:45:45:4b:fd:1a:
ff:d4:a3:bd:8d:34:a3:d6:d7:d7:d6:2f:39:34:94:
34:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A4:43:C9:B8:97:E4:8F:93:88:18:7E:F7:83:39:AA:EE:CB:DE:21
X509v3 Authority Key Identifier:
keyid:D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/YaRDybiX5I-TiBh-94M5qu7L3iE.roa
sbgp-ipAddrBlock: critical
IPv4:
14.192.96.0/19
Signature Algorithm: sha256WithRSAEncryption
34:a7:a5:29:6b:9e:28:7b:be:cb:19:cf:22:73:31:b8:c3:d8:
63:e0:74:11:aa:68:16:2b:db:69:1e:3b:0a:60:d6:c1:9c:dc:
60:0d:40:e8:b7:68:2d:47:05:87:5d:55:3e:fd:ac:24:d9:fc:
80:20:c7:fb:ce:b9:12:74:ca:ad:e7:a7:65:2f:cd:e7:a2:50:
9e:7b:08:a8:3c:ce:4e:36:af:dc:b0:30:5f:a5:2b:f0:e1:12:
d4:29:6d:bd:0e:1b:cb:64:32:d3:db:af:31:49:ce:7c:d3:3e:
f9:d0:bd:b9:d2:86:ca:ea:7d:70:f0:20:d1:3c:13:7f:94:e4:
ed:7d:cb:95:ba:ec:4b:88:84:dc:fa:b3:b6:f9:bd:0c:dd:cb:
ef:fa:c9:4d:2b:58:d0:6f:ae:4f:e2:9e:4f:1b:d8:80:16:f5:
98:16:54:61:e6:08:e9:ff:bb:4f:fd:3b:22:2a:04:54:20:e2:
f2:df:1b:fd:a8:46:bc:75:30:62:94:12:60:f7:ff:1d:20:a9:
95:f9:5f:a1:b5:c2:b7:1f:1f:b1:d6:f7:fa:75:a1:8e:a0:f6:
c7:2f:30:11:81:2d:18:89:be:9c:f1:b2:0c:05:fb:f5:ed:b2:
49:ff:f2:6a:57:5c:8b:01:4f:6b:84:a4:57:c0:e9:f1:27:cb:
20:3e:a1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:35:11 2026 by rpki-client