
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/882/RPYM3OkAPtgD14_Ae57nLtJv70E.roa
File: RPYM3OkAPtgD14_Ae57nLtJv70E.roa (raw, json)
Hash identifier: KSOy3fTR2BQ6GoSnTs3my1OA6ZKOU6tRm5kJD8BATKQ=
Subject key identifier: 44:F6:0C:DC:E9:00:3E:D8:03:D7:8F:C0:7B:9E:E7:2E:D2:6F:EF:41
Certificate issuer: /CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
Certificate serial: 5C
Authority key identifier: B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/RPYM3OkAPtgD14_Ae57nLtJv70E.roa
Signing time: Tue 31 Mar 2026 08:32:00 +0000
ROA not before: Tue 31 Mar 2026 08:32:00 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 59127
IP address blocks: 223.223.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
Validity
Not Before: Mar 31 08:32:00 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=44F60CDCE9003ED803D78FC07B9EE72ED26FEF41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:af:c8:77:90:d6:19:b2:75:55:be:af:76:fe:
78:04:c3:99:6e:c4:5f:f6:ff:df:94:d6:5a:28:1c:
f9:56:12:71:9b:e6:5b:1f:a3:7f:f4:5c:db:b5:4c:
4d:f5:14:7c:3b:f9:4f:f5:19:1e:66:86:b4:cf:4f:
8f:2a:ae:18:ed:fd:6e:c9:8e:c4:7f:7d:da:91:ac:
3e:cd:08:4e:98:f7:f6:6f:51:ae:a8:53:84:b3:43:
62:d0:3f:fd:57:1a:51:0b:76:d5:ad:86:39:b5:62:
0d:1a:6a:4b:9e:e8:72:e5:5f:ca:92:1f:b6:50:d9:
da:e6:ea:ec:b2:44:32:3f:d5:63:49:74:c0:97:e0:
4e:b4:e6:e6:93:57:99:29:4c:24:fa:58:b3:5c:39:
40:7b:10:6d:dd:87:da:35:97:e9:67:16:1e:9b:11:
3e:1a:90:5b:d4:85:e0:2c:42:91:14:93:a7:f9:02:
05:31:ff:8a:ea:8f:0a:d6:47:22:ee:35:5d:e5:b5:
b3:d3:6d:c1:ad:d6:a9:69:00:e8:05:a8:11:13:c5:
57:20:8e:98:79:b8:ed:29:ee:de:b6:f1:94:8b:98:
1f:ac:70:3d:c9:de:d5:ce:3a:74:6a:0b:0e:91:5f:
b1:6e:fd:de:a8:a5:3a:c8:d0:24:27:e3:c1:b5:70:
53:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F6:0C:DC:E9:00:3E:D8:03:D7:8F:C0:7B:9E:E7:2E:D2:6F:EF:41
X509v3 Authority Key Identifier:
keyid:B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/RPYM3OkAPtgD14_Ae57nLtJv70E.roa
sbgp-ipAddrBlock: critical
IPv4:
223.223.224.0/20
Signature Algorithm: sha256WithRSAEncryption
2a:08:b5:4d:e8:24:9b:36:bc:d1:00:8e:95:0d:65:a4:a7:0a:
cb:1b:7c:d2:76:16:8f:9e:96:b1:1b:32:29:c4:73:79:77:99:
18:d2:03:4b:e5:ca:f4:ba:9f:8e:1a:51:c5:7a:03:aa:50:e4:
ed:02:4d:e7:89:6c:26:77:d8:b6:9e:d1:11:34:b1:7d:3f:03:
41:9c:20:4c:2b:59:0e:f7:2e:3f:bc:e8:07:ba:27:fc:21:dd:
d8:90:3b:00:f3:92:0a:c2:1d:21:71:7b:b6:d6:1e:84:a5:73:
de:04:7f:53:a8:95:5e:1e:2e:1e:54:90:f2:c4:99:bf:d4:65:
e0:7e:71:6b:a9:b6:b6:32:a2:63:13:f9:b4:11:11:c6:ec:a3:
6a:93:e1:e8:7e:9d:65:3a:f2:95:c8:c0:26:55:37:1b:1d:9d:
16:87:1a:9f:eb:3e:c5:ba:1b:3c:f1:6f:c3:d5:94:25:0c:cb:
ec:b1:aa:4d:10:20:07:62:be:cf:a3:35:a8:56:20:c5:3e:b6:
b4:35:1c:63:39:4c:99:64:05:93:f4:83:1c:b8:fd:fe:38:a4:
d5:71:16:6c:51:d2:2c:8a:7e:5c:b3:86:29:60:55:e6:0d:24:
c3:34:0b:8d:a5:1b:85:a3:e8:9d:eb:48:59:7b:1a:1d:93:66:
5a:81:be:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:24:58 2026 by rpki-client