
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/840/ZioIOg5nGXDGMsw-z4KOpPgY_GQ.roa
File: ZioIOg5nGXDGMsw-z4KOpPgY_GQ.roa (raw, json)
Hash identifier: Jas7oUse4ODxMEA604PgYytc/MiVT9X+Llenm8sQog8=
Subject key identifier: 66:2A:08:3A:0E:67:19:70:C6:32:CC:3E:CF:82:8E:A4:F8:18:FC:64
Certificate issuer: /CN=D79B3890C2DA3795148976B954C2024056797554
Certificate serial: 69
Authority key identifier: D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/ZioIOg5nGXDGMsw-z4KOpPgY_GQ.roa
Signing time: Tue 31 Mar 2026 08:15:38 +0000
ROA not before: Tue 31 Mar 2026 08:15:38 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 131934
IP address blocks: 219.100.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105 (0x69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D79B3890C2DA3795148976B954C2024056797554
Validity
Not Before: Mar 31 08:15:38 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=662A083A0E671970C632CC3ECF828EA4F818FC64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cf:d7:93:c3:82:07:b8:f5:80:88:56:79:3a:
66:2a:8f:3b:80:e6:90:24:48:4f:5f:1d:e6:40:c0:
3b:15:72:2b:89:e3:d9:cb:7d:b5:78:7f:01:a4:05:
52:a7:19:8f:8c:0b:8f:33:55:ea:0c:64:9c:74:69:
91:39:bf:8f:e6:51:6a:90:53:42:1a:d0:37:a6:32:
a3:0f:80:5f:f8:40:06:70:9c:da:8f:7f:bf:74:29:
e7:8d:37:80:67:71:f1:31:29:14:43:e5:e7:3f:8a:
26:e9:57:ad:6e:fe:b2:95:29:94:44:51:cb:1e:14:
1d:2d:3e:ef:37:ac:d2:c8:f6:d9:da:a1:23:fc:14:
24:ba:56:7c:b8:25:68:cd:32:2f:3e:3b:fa:54:32:
0e:04:c3:61:d4:fb:5b:49:a1:a9:63:b9:1b:de:f0:
20:eb:a4:8c:5b:95:c3:64:43:1b:b0:77:a5:f6:34:
f2:b6:1c:68:b9:50:db:cc:ba:4c:e9:fc:f3:ce:9c:
5e:d1:3f:29:d1:84:ef:f6:e8:c9:5c:3b:e1:e9:53:
54:1f:5e:3c:1e:73:e3:35:09:4e:8f:29:d0:ff:45:
58:63:80:cb:29:94:ec:2b:09:64:76:d2:e1:b1:b4:
5c:10:72:d0:ec:30:68:92:69:de:c2:fb:57:de:88:
dc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2A:08:3A:0E:67:19:70:C6:32:CC:3E:CF:82:8E:A4:F8:18:FC:64
X509v3 Authority Key Identifier:
keyid:D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/ZioIOg5nGXDGMsw-z4KOpPgY_GQ.roa
sbgp-ipAddrBlock: critical
IPv4:
219.100.16.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:de:1a:6e:c3:2d:f8:d1:8b:5b:64:19:f9:d0:f6:43:39:4b:
9d:e0:91:c5:4c:7a:f5:a3:ed:6c:c5:6b:4b:5a:65:58:18:c3:
30:02:47:11:29:66:96:a2:ad:41:17:66:90:cb:a1:9d:b3:a1:
2c:ff:01:09:b6:d4:d5:16:e8:7c:6e:a3:17:10:c7:41:46:ce:
de:78:3c:1a:01:e8:a6:2e:3e:1a:10:c9:cd:c3:cf:46:12:69:
49:cf:8d:f2:61:ef:59:a2:67:64:e3:c8:89:40:fe:34:47:e6:
61:bb:93:8e:34:f5:ed:7f:12:2d:cf:0b:34:62:cc:64:73:7a:
80:1f:48:e5:f5:89:6b:67:d7:54:9c:0c:b3:87:bf:2f:a0:1a:
12:5f:b6:ca:ec:be:90:5f:0a:3b:5a:3b:e9:e0:de:93:6c:a3:
c8:08:50:cb:75:e2:7a:0f:7f:05:a1:c6:e8:a2:e2:3c:ca:c0:
7f:a7:13:1e:aa:9a:78:1f:77:18:79:ea:d8:38:16:3f:a4:fe:
20:f8:2f:bc:9f:5d:8b:db:3a:d6:9b:cb:66:26:19:38:a5:47:
9c:84:d9:aa:7a:92:ff:50:e6:46:5d:44:cb:3e:ad:59:2f:09:
83:0d:6a:31:de:ad:72:06:a9:99:ec:e7:2b:97:c3:5d:bd:22:
3b:b1:c7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:35:07 2026 by rpki-client