
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/857/pYlg2BdIBs9wQIx3SFz-673TE7s.roa
File: pYlg2BdIBs9wQIx3SFz-673TE7s.roa (raw, json)
Hash identifier: O5FKyI+I4FZSmtc7GXqaW6/abb7wl2xAfr3w6orB3yQ=
Subject key identifier: A5:89:60:D8:17:48:06:CF:70:40:8C:77:48:5C:FE:EB:BD:D3:13:BB
Certificate issuer: /CN=A9DE7C13381237C5B898D5A24F2C9A6CB3C1971B
Certificate serial: 58
Authority key identifier: A9:DE:7C:13:38:12:37:C5:B8:98:D5:A2:4F:2C:9A:6C:B3:C1:97:1B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qd58EzgSN8W4mNWiTyyabLPBlxs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/pYlg2BdIBs9wQIx3SFz-673TE7s.roa
Signing time: Tue 31 Mar 2026 07:49:55 +0000
ROA not before: Tue 31 Mar 2026 07:49:55 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 23780
IP address blocks: 211.19.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/qd58EzgSN8W4mNWiTyyabLPBlxs.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/qd58EzgSN8W4mNWiTyyabLPBlxs.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qd58EzgSN8W4mNWiTyyabLPBlxs.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9DE7C13381237C5B898D5A24F2C9A6CB3C1971B
Validity
Not Before: Mar 31 07:49:55 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=A58960D8174806CF70408C77485CFEEBBDD313BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ef:92:35:60:b7:1e:9b:78:c5:3a:bc:58:9a:
d1:cf:06:72:16:1d:ac:6d:fc:35:0d:65:33:6f:46:
a1:ef:91:97:40:1a:00:56:fc:be:16:29:83:74:e7:
1f:f9:6f:c9:15:b5:5d:b8:f5:73:ec:a6:6d:0f:c4:
5c:7e:3b:97:19:82:d4:52:f4:50:ab:cc:28:2c:16:
6e:34:1a:2f:09:f9:54:e2:23:8b:14:0f:0c:18:f1:
da:8b:2d:95:5c:08:62:42:79:f1:91:6e:75:fe:e3:
d9:a1:8f:dc:43:4f:ae:07:10:c5:12:26:2c:f3:a5:
3b:b0:79:74:87:36:f0:12:f8:ae:3b:7a:bb:80:d7:
01:32:b7:3f:2b:03:4b:53:f4:ee:35:71:2b:f0:cf:
3a:31:f9:9a:44:c9:41:cd:f4:05:8d:66:e9:48:1f:
6e:01:2f:e2:b6:2e:e9:5a:7b:11:ca:3d:af:79:22:
63:22:79:bd:24:10:5b:85:ab:48:2d:93:1b:41:fb:
af:12:d2:95:2d:1a:cb:90:54:2a:e0:57:55:2b:ff:
32:d2:76:06:f8:b1:d9:7b:26:33:24:57:07:af:78:
02:a9:13:14:9e:c4:00:a5:b1:c2:d7:4b:84:15:7d:
72:df:e5:55:e6:6e:e9:51:1e:cb:84:77:22:d8:1e:
eb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:89:60:D8:17:48:06:CF:70:40:8C:77:48:5C:FE:EB:BD:D3:13:BB
X509v3 Authority Key Identifier:
keyid:A9:DE:7C:13:38:12:37:C5:B8:98:D5:A2:4F:2C:9A:6C:B3:C1:97:1B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/qd58EzgSN8W4mNWiTyyabLPBlxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qd58EzgSN8W4mNWiTyyabLPBlxs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/pYlg2BdIBs9wQIx3SFz-673TE7s.roa
sbgp-ipAddrBlock: critical
IPv4:
211.19.224.0/19
Signature Algorithm: sha256WithRSAEncryption
52:cb:b0:cd:1d:3b:f0:40:02:86:a5:4e:5e:b3:79:46:41:4d:
4f:66:97:c9:23:f3:4d:e6:95:51:1e:25:a8:11:8b:bb:d2:a2:
80:dc:9b:c1:59:fb:44:89:07:f0:43:d7:f3:a1:ce:3c:47:ba:
fe:05:6c:f8:40:b5:de:b7:06:2c:72:78:ca:89:84:35:ae:43:
f7:2c:72:96:8d:e8:d4:bb:d9:41:9d:dc:6b:ce:41:7b:e6:53:
26:4e:02:02:0f:ce:e5:22:c7:e2:12:a9:07:83:12:1f:59:04:
e9:b2:2e:ec:80:ee:ea:c1:8a:f9:48:cc:9a:01:09:f0:08:39:
21:b0:a3:48:9d:7e:91:66:7a:62:a7:86:48:a2:b3:68:20:a6:
1c:65:a9:df:83:c2:14:65:18:6d:52:b3:0a:60:4a:66:af:c8:
c7:a2:7e:06:f4:3b:f1:44:7a:b4:cc:31:97:2d:0b:82:10:2d:
e8:6b:69:1d:37:ba:c3:70:63:3a:38:ff:02:f1:7d:8d:56:bd:
99:56:60:69:31:c7:0d:3a:f9:a4:90:d9:95:e9:10:25:f3:c3:
93:6c:d4:a2:25:ae:8b:48:81:89:96:0b:6c:ec:0b:f9:7e:d3:
b7:13:31:a4:ea:69:0f:f4:39:4b:e3:8e:56:dc:96:53:59:e6:
c4:9f:81:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:41 2026 by rpki-client