
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/873/CyFRYhhYeXkI_qR1qkTFcU5EpX0.roa
File: CyFRYhhYeXkI_qR1qkTFcU5EpX0.roa (raw, json)
Hash identifier: K6sLjBS/65qIj7Z0vbtpclfgYNas/4gb1gsyMMQqhSA=
Subject key identifier: 0B:21:51:62:18:58:79:79:08:FE:A4:75:AA:44:C5:71:4E:44:A5:7D
Certificate issuer: /CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36
Certificate serial: 38
Authority key identifier: 80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/CyFRYhhYeXkI_qR1qkTFcU5EpX0.roa
Signing time: Tue 31 Mar 2026 08:38:18 +0000
ROA not before: Tue 31 Mar 2026 08:38:18 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 23831
IP address blocks: 103.235.112.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36
Validity
Not Before: Mar 31 08:38:18 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=0B2151621858797908FEA475AA44C5714E44A57D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:88:d7:e8:8b:f4:bf:29:08:d0:91:85:50:05:
53:8e:6c:a2:06:0f:a0:0f:69:06:1c:b8:1a:dd:cd:
0b:ba:3d:bd:10:bd:6c:f5:29:93:13:70:49:e7:4d:
e6:cd:f2:b6:1b:7e:bc:38:c3:2c:af:76:49:d8:17:
32:7e:a4:39:f0:5d:2a:c0:82:de:de:09:f6:3a:97:
9c:37:d6:42:ed:e9:95:0f:2e:a8:aa:39:c2:8e:6d:
cf:5d:f5:7e:22:93:dc:08:a6:2c:2f:41:a0:0d:06:
56:ee:87:c7:74:1b:d8:10:52:ba:f2:bc:51:01:6d:
02:a8:0f:a3:e3:c9:dc:d8:46:a8:97:bc:9b:11:23:
a1:17:13:8b:e0:8c:60:7b:9e:a5:2d:a8:cb:fa:e1:
d5:59:23:be:83:50:58:c0:33:20:eb:b7:31:92:68:
e7:2a:7e:42:99:42:bb:61:62:24:81:6c:96:69:f9:
8b:55:70:1a:52:f5:c5:ce:7e:77:8f:c1:a4:4f:17:
0d:40:82:46:b5:21:f3:e7:99:cd:3d:56:c7:19:96:
6e:d4:59:88:a3:99:08:a7:77:68:fd:5f:71:13:6f:
ef:0e:70:fc:35:3d:f3:0c:0c:4d:c0:e8:e0:de:39:
b7:52:12:6f:34:30:bd:68:7c:b9:4b:0f:e1:c1:29:
cb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:21:51:62:18:58:79:79:08:FE:A4:75:AA:44:C5:71:4E:44:A5:7D
X509v3 Authority Key Identifier:
keyid:80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/CyFRYhhYeXkI_qR1qkTFcU5EpX0.roa
sbgp-ipAddrBlock: critical
IPv4:
103.235.112.0/22
Signature Algorithm: sha256WithRSAEncryption
65:38:e4:22:53:ec:86:3b:27:13:4e:d9:b1:53:b0:66:77:87:
ea:ce:5f:6c:1d:f1:fe:c2:17:b8:d5:f7:03:7a:d1:e3:f7:dd:
0f:7a:ca:8a:40:01:39:d0:2a:6b:78:68:8b:48:7d:27:f6:1e:
f5:c7:6b:40:58:d1:cd:95:6c:08:f9:d1:c5:fe:e0:80:ee:30:
a0:27:49:d5:bb:7b:7c:85:1f:39:5a:b9:1d:91:90:ee:70:1b:
93:13:6d:ae:3a:24:15:8f:9a:f3:62:73:24:d0:bd:00:47:9b:
51:0e:48:7b:e9:d6:97:69:50:e0:ac:dd:d5:02:c0:c0:fa:e4:
b7:e1:89:47:4b:7c:a4:40:fa:b1:70:22:85:49:5d:c9:10:64:
18:71:66:05:d8:dd:c3:d6:31:1f:d6:a7:af:3a:83:e5:78:e4:
dc:3e:b0:79:b8:a5:ea:ee:6e:8b:65:2c:cd:04:47:05:1b:22:
41:c5:d8:c0:73:31:eb:ce:09:d4:25:c2:50:24:7a:60:6b:92:
ce:84:d1:25:00:06:96:7a:69:be:dd:ab:f2:df:3c:5b:e7:7e:
5e:88:67:8c:e5:17:64:0e:87:1b:ee:4a:1b:33:17:9a:ae:ef:
c5:1f:cd:f0:43:5d:64:df:f2:c7:04:13:73:5e:3a:95:0b:d9:
61:61:f9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:41:53 2026 by rpki-client