
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/881/-7AjrQNvjkni8YasrAfT6W_LJJ0.roa
File: -7AjrQNvjkni8YasrAfT6W_LJJ0.roa (raw, json)
Hash identifier: c+eVuu2LzSHsulOMVfFUB+826AYgRUbrvHbeL4jMNoQ=
Subject key identifier: FB:B0:23:AD:03:6F:8E:49:E2:F1:86:AC:AC:07:D3:E9:6F:CB:24:9D
Certificate issuer: /CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0
Certificate serial: 67
Authority key identifier: D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/-7AjrQNvjkni8YasrAfT6W_LJJ0.roa
Signing time: Tue 31 Mar 2026 07:50:36 +0000
ROA not before: Tue 31 Mar 2026 07:50:36 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 23805
IP address blocks: 202.76.192.0/19 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103 (0x67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0
Validity
Not Before: Mar 31 07:50:36 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=FBB023AD036F8E49E2F186ACAC07D3E96FCB249D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1e:5e:01:5c:42:94:57:cf:63:34:4a:55:09:
14:21:eb:23:54:45:bd:66:4c:2f:fc:f6:52:f4:da:
1b:2c:20:b3:52:b2:6b:ce:11:a2:95:6f:7e:0f:4e:
a4:3c:39:bc:f5:e4:52:01:fb:1b:e1:fa:95:8c:2d:
c2:76:33:c7:f4:0e:d9:71:3b:f6:a6:6e:97:c9:76:
54:00:78:50:6d:48:5f:0c:68:ce:31:01:8b:02:62:
df:85:eb:cb:cb:e7:9b:97:85:85:bd:b2:a6:fa:90:
e3:bd:d4:5b:d3:c1:79:9f:40:6b:a4:1e:d0:69:6c:
dc:e1:69:72:30:88:df:39:d9:91:ca:e5:59:0b:f1:
94:a9:49:0f:b4:db:8e:6b:09:b9:fe:c0:3b:59:e3:
d1:b6:0d:2f:e3:ff:fe:7d:13:0d:d8:6c:f7:88:49:
7e:06:91:89:bf:52:40:31:0d:d0:3f:c5:e7:70:ed:
b1:fb:88:dd:a4:36:d3:8c:1a:37:7d:0f:ce:db:27:
ed:d7:c3:3f:87:d2:d5:d4:5b:57:78:3f:e3:03:b6:
63:69:20:5c:5d:b6:c1:7e:6c:aa:81:c2:aa:bb:e0:
ec:70:de:3d:7a:ea:8e:da:68:20:1a:09:57:c2:62:
7b:5a:8d:13:a2:c3:d5:70:04:bc:94:d7:ef:cc:fd:
12:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B0:23:AD:03:6F:8E:49:E2:F1:86:AC:AC:07:D3:E9:6F:CB:24:9D
X509v3 Authority Key Identifier:
keyid:D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/-7AjrQNvjkni8YasrAfT6W_LJJ0.roa
sbgp-ipAddrBlock: critical
IPv4:
202.76.192.0/19
Signature Algorithm: sha256WithRSAEncryption
68:42:35:60:e8:5a:3b:64:75:f1:a3:dd:b8:99:eb:49:e6:b4:
08:1f:e5:fc:0c:fa:35:2d:25:a2:aa:34:80:16:35:d1:f6:af:
f4:5d:ee:cc:47:8e:9c:c1:19:76:75:ee:08:37:43:e5:a3:dc:
19:14:89:da:ab:e2:f3:6f:f8:d5:3c:27:b7:59:50:19:5d:87:
99:48:77:69:07:70:a5:d0:cd:b7:75:b7:0c:86:ad:07:65:44:
a1:fa:ee:f4:f8:22:b3:06:0d:ca:ac:fc:83:39:7a:e6:c7:76:
73:c9:5e:94:4a:ea:1c:d2:34:ed:e4:10:e1:e9:64:1d:ce:92:
ab:16:b7:11:0e:f7:07:88:0e:21:a8:ab:cd:f6:4f:40:81:da:
2b:55:03:8b:7b:aa:e2:84:83:2f:fa:63:3e:25:97:ba:26:ba:
7c:19:84:8b:21:b6:1d:7d:77:6b:4f:1a:e4:ec:67:e5:f9:7f:
46:62:87:b2:42:75:1d:56:b5:21:f3:fe:93:e0:68:83:2d:29:
3d:a0:17:4b:8e:c5:36:e3:65:14:f3:07:9e:7c:e1:22:88:9b:
54:7b:29:4f:c2:ca:10:57:78:d6:bc:48:cd:0f:57:e6:54:57:
f9:03:37:75:63:15:2c:a0:fe:d7:8a:fe:40:a1:ca:3f:f4:5d:
0a:64:d6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:48:07 2026 by rpki-client