
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/877/Fo0zDMdP4qqlxDkPm6vKQb6wShA.roa
File: Fo0zDMdP4qqlxDkPm6vKQb6wShA.roa (raw, json)
Hash identifier: PEFg/I9V2OxfqQoyqCZAjfDmF//4RAL5sQ441gPik/w=
Subject key identifier: 16:8D:33:0C:C7:4F:E2:AA:A5:C4:39:0F:9B:AB:CA:41:BE:B0:4A:10
Certificate issuer: /CN=1933DE3EF96450CA120C77A5EA826434DD149549
Certificate serial: 5E
Authority key identifier: 19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/Fo0zDMdP4qqlxDkPm6vKQb6wShA.roa
Signing time: Tue 31 Mar 2026 08:15:20 +0000
ROA not before: Tue 31 Mar 2026 08:15:20 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 55385
IP address blocks: 202.174.56.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94 (0x5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1933DE3EF96450CA120C77A5EA826434DD149549
Validity
Not Before: Mar 31 08:15:20 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=168D330CC74FE2AAA5C4390F9BABCA41BEB04A10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bd:60:47:c5:1f:e4:8b:ac:c0:56:9f:81:b4:
44:8b:07:6a:3f:66:d8:1b:55:0c:e7:be:ad:05:89:
5a:f8:47:11:14:3f:22:2d:f3:97:c6:6b:2f:0d:c4:
68:c0:38:91:69:42:1f:00:33:95:88:0e:b5:bf:99:
91:29:98:90:fd:30:4d:ae:e9:2b:3e:98:b5:d9:fd:
93:30:e8:57:33:b1:a8:a7:5b:a6:a5:43:7d:df:74:
13:be:fc:6a:b9:a0:2a:65:f1:8a:54:ee:c6:fd:c7:
77:02:ac:c2:9a:aa:30:34:52:2d:24:7a:e2:e5:2d:
22:ad:14:15:93:27:45:0a:20:15:11:28:6f:25:31:
fe:ad:38:bc:f3:36:64:0e:4b:57:98:cd:50:f5:ca:
db:77:51:1e:82:d4:68:e2:c2:3c:92:0e:a7:76:82:
b0:5a:78:c9:5d:34:34:e1:4c:9a:85:7a:2d:42:d2:
ec:03:48:55:1e:d8:2d:e0:d2:44:49:db:bb:97:62:
21:e7:1c:52:4e:8f:7c:ed:ff:d5:04:7a:b4:e9:c9:
00:fa:ae:dd:ae:a3:37:2c:fa:56:70:04:1e:8a:96:
a6:1b:15:fe:67:d7:53:6d:9c:bb:17:d3:4d:a7:33:
ae:d3:02:1b:af:82:65:7d:5f:d1:88:fc:60:c8:11:
44:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8D:33:0C:C7:4F:E2:AA:A5:C4:39:0F:9B:AB:CA:41:BE:B0:4A:10
X509v3 Authority Key Identifier:
keyid:19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/Fo0zDMdP4qqlxDkPm6vKQb6wShA.roa
sbgp-ipAddrBlock: critical
IPv4:
202.174.56.0/23
Signature Algorithm: sha256WithRSAEncryption
54:90:6f:36:f3:2d:52:f2:4a:12:53:8e:e6:2c:90:1a:fa:46:
3f:42:56:2b:e9:e0:28:00:5a:cb:cc:6e:8c:3e:d5:88:6d:80:
fc:94:91:b4:23:b1:48:ee:2c:a9:4b:e0:da:2a:05:f0:5c:47:
32:cb:3f:fe:81:d4:0a:30:1a:ee:ab:2c:6c:3f:a4:33:ac:38:
66:b0:a9:5c:a0:87:be:08:b5:7e:c9:de:ad:98:c0:c9:51:19:
76:93:04:e4:ad:9c:a9:f3:52:d2:dc:db:b2:94:b1:ce:ac:be:
92:e6:46:87:f8:61:70:70:8c:4f:59:c6:45:ee:3a:d8:31:df:
66:33:c3:fa:e9:f7:31:31:44:5c:e7:b0:a5:5b:21:93:79:c8:
65:32:4f:7a:c8:09:47:48:52:c9:dd:48:1d:b5:26:d2:09:98:
f1:e8:01:e5:ff:08:83:5c:fa:48:2f:01:7e:76:34:12:de:73:
27:95:f0:49:57:c8:72:26:87:67:04:e2:e9:59:cf:03:e6:a1:
7e:6f:5b:ac:1d:0c:8e:d7:d9:e4:19:37:bc:53:38:45:10:c9:
89:e7:a1:11:f5:53:51:78:56:43:ed:7f:6a:a4:f1:dd:78:63:
99:9c:63:a4:5e:d7:b4:a6:8c:ce:62:fc:c8:4e:fc:bd:62:5d:
85:5f:a8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:49 2026 by rpki-client