
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/882/AMyMmAK8r1Ymmfqg-nREQnxzbbQ.roa
File: AMyMmAK8r1Ymmfqg-nREQnxzbbQ.roa (raw, json)
Hash identifier: NmsSGoyiVyqjd/kgyxxK3tuNmGQFfaDD7bLy+UzXrwI=
Subject key identifier: 00:CC:8C:98:02:BC:AF:56:26:99:FA:A0:FA:74:44:42:7C:73:6D:B4
Certificate issuer: /CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
Certificate serial: 5E
Authority key identifier: B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/AMyMmAK8r1Ymmfqg-nREQnxzbbQ.roa
Signing time: Tue 31 Mar 2026 08:32:02 +0000
ROA not before: Tue 31 Mar 2026 08:32:02 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 59127
IP address blocks: 116.199.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94 (0x5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
Validity
Not Before: Mar 31 08:32:02 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=00CC8C9802BCAF562699FAA0FA7444427C736DB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4b:67:eb:d0:1e:de:38:c4:8f:08:37:4e:59:
fa:2b:a9:62:1a:5a:42:b3:a4:be:00:1b:ee:fb:ad:
8e:c5:80:87:da:24:41:bb:52:92:7a:0d:7c:30:3a:
a8:49:db:79:ba:40:40:9e:7e:08:8f:29:64:09:f6:
fd:7f:92:da:b3:12:bf:fe:67:aa:8c:36:d3:59:f5:
4a:e1:bd:1c:73:b2:87:3f:f1:55:1f:20:96:5d:66:
58:3c:ad:18:8f:23:1a:8b:b1:d6:35:4e:bc:37:88:
26:7c:4e:f5:63:f5:66:aa:3b:6e:b2:83:4e:34:43:
1c:db:6d:04:a5:d2:9f:8b:fa:3c:50:cd:d1:04:f6:
b8:04:28:31:ea:a3:1a:e4:6a:e7:1a:b9:2d:b4:d7:
9f:a6:1b:e6:65:52:b5:62:71:96:61:c8:90:f3:25:
1f:c8:af:dd:ef:af:f1:a5:70:54:02:49:a1:bb:5c:
67:6b:dd:5d:76:8c:f9:d4:00:77:05:61:49:fe:9a:
3c:56:47:8e:06:1b:5d:71:30:3d:0d:91:7f:97:cf:
98:bc:ca:62:d5:5c:9f:25:36:97:73:6b:ec:c7:eb:
92:18:d1:45:c0:e4:c0:94:23:ad:1f:5f:8a:60:12:
50:2e:97:e1:6e:de:aa:46:9d:59:1a:d2:c5:bf:d0:
9f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CC:8C:98:02:BC:AF:56:26:99:FA:A0:FA:74:44:42:7C:73:6D:B4
X509v3 Authority Key Identifier:
keyid:B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/AMyMmAK8r1Ymmfqg-nREQnxzbbQ.roa
sbgp-ipAddrBlock: critical
IPv4:
116.199.240.0/20
Signature Algorithm: sha256WithRSAEncryption
7d:fb:e0:b0:f5:01:2c:7c:7f:aa:fb:5a:f0:2b:b9:6e:86:81:
b7:b5:5f:35:4d:fe:02:da:39:41:01:a7:52:03:fd:8f:ce:96:
d8:e3:35:20:23:0d:2d:10:88:b0:f1:36:7e:0f:8d:63:3c:ee:
29:04:b3:c3:2e:07:01:48:b7:1a:a7:73:b6:3a:66:14:56:b3:
93:ad:17:47:7d:45:57:85:97:c3:1c:28:74:8c:33:ca:6c:60:
34:79:f9:dc:b2:37:40:e7:e3:da:2e:d9:c9:a3:15:96:80:03:
2d:49:3f:57:1b:69:e8:91:b9:b9:ac:58:a5:a8:a2:fd:00:8c:
c1:21:05:e0:ba:42:a3:6e:fd:03:33:06:6d:d3:88:51:e8:f9:
52:57:c4:13:2e:e6:f2:87:24:04:f0:05:67:00:c7:25:af:bb:
a9:ce:22:44:80:b9:44:40:65:d4:bd:3d:60:d6:4b:8f:3a:4a:
2a:d7:53:7b:f4:59:b5:53:2f:1b:f9:7b:5d:70:8b:90:6b:52:
e7:d2:1d:2d:2f:a1:78:27:85:1b:bf:b2:36:ae:4d:1b:45:64:
81:b6:14:af:a7:ea:1b:34:ae:40:72:e6:38:aa:ea:47:ad:ee:
eb:87:ff:de:38:c3:7b:9d:1b:48:da:62:fa:72:ca:da:4f:4f:
c4:00:4c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:00 2026 by rpki-client