
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/882/e2DJjYUQF9joZX-Jj4HrJ5J8a6w.roa
File: e2DJjYUQF9joZX-Jj4HrJ5J8a6w.roa (raw, json)
Hash identifier: Gdllv1Q/VMAN5044n2oyIrPuPxSBTvLAUBOpWGOPKhY=
Subject key identifier: 7B:60:C9:8D:85:10:17:D8:E8:65:7F:89:8F:81:EB:27:92:7C:6B:AC
Certificate issuer: /CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
Certificate serial: 64
Authority key identifier: B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/e2DJjYUQF9joZX-Jj4HrJ5J8a6w.roa
Signing time: Tue 31 Mar 2026 08:32:04 +0000
ROA not before: Tue 31 Mar 2026 08:32:04 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 59127
IP address blocks: 101.203.24.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100 (0x64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
Validity
Not Before: Mar 31 08:32:04 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=7B60C98D851017D8E8657F898F81EB27927C6BAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d1:b3:6e:62:bf:19:c0:e7:2c:c4:ab:4a:7e:
13:63:e0:94:4b:32:92:34:72:04:a1:4e:8c:80:a0:
2a:3d:e2:b2:e2:e4:67:c7:8f:19:d9:72:68:56:97:
ef:4f:3d:04:62:84:0d:07:f1:28:2f:17:f1:94:c4:
3a:f9:34:b4:16:32:c0:17:7f:ae:e0:5e:c7:c6:12:
75:7a:34:69:83:0d:7d:c1:0f:10:b9:fa:4c:62:4f:
0c:bb:fd:6f:71:0e:94:1c:34:7d:a1:b3:f3:e8:95:
b3:10:a2:da:d4:23:bf:3f:cb:e5:6f:e5:b9:9e:0f:
53:d9:dc:86:54:c9:49:c1:f0:12:80:1d:12:cd:64:
a5:59:a9:16:d5:c0:23:06:d1:6b:20:9f:1d:7f:c6:
9f:ac:8f:34:60:3d:59:6e:e0:59:e0:eb:92:64:e2:
c8:9e:b9:e9:d5:f5:aa:ef:8e:9a:9a:10:21:74:91:
d0:95:24:9e:6e:0b:1b:de:7c:c3:86:5f:b5:e3:d9:
3d:3b:ac:61:1e:2f:f3:a1:c7:95:d6:65:c6:2a:b7:
30:28:f5:70:a5:97:d0:02:03:7d:e4:0f:ca:0e:8b:
30:41:5d:bf:8c:1e:f8:bb:e5:17:5e:fd:d4:0b:a5:
c7:0c:8a:bb:e6:82:e2:51:b9:b7:d3:9a:2f:e5:41:
ab:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:60:C9:8D:85:10:17:D8:E8:65:7F:89:8F:81:EB:27:92:7C:6B:AC
X509v3 Authority Key Identifier:
keyid:B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/e2DJjYUQF9joZX-Jj4HrJ5J8a6w.roa
sbgp-ipAddrBlock: critical
IPv4:
101.203.24.0/21
Signature Algorithm: sha256WithRSAEncryption
4b:d3:af:91:e4:48:36:c1:c6:4a:dd:64:af:f6:71:89:bd:72:
a1:a0:5c:4b:b6:69:9c:b9:11:15:8c:66:85:85:6e:ba:72:45:
68:51:ad:fc:a4:60:64:1b:9c:e7:26:b7:e7:3f:83:30:36:4b:
03:0f:7f:5a:21:22:8f:8b:72:0f:b9:01:82:d6:32:e4:6a:71:
02:a9:54:ee:2d:8a:65:e6:4a:4a:dd:19:5b:24:fd:bc:28:67:
f7:00:e2:bb:89:5d:19:d6:13:e4:06:d2:e2:b5:e0:5f:34:94:
a2:81:56:9d:97:e5:47:ae:4c:42:af:c3:4a:2b:d6:d7:80:b3:
14:54:50:b5:25:ea:cb:59:46:6e:12:6a:ac:0a:f2:ac:95:e8:
7a:d8:ee:43:c1:d2:69:4e:3d:bf:dd:82:0a:6f:10:c2:4d:ba:
63:6a:8e:03:e7:e2:01:44:9d:fb:be:fc:15:89:c8:f0:96:d0:
59:b3:f7:d5:69:dc:ed:16:5c:f8:60:5c:d1:d4:2c:0e:04:c2:
1f:99:c1:2c:6e:dd:8f:4e:ae:cd:30:83:36:e9:33:a2:ab:8d:
24:8c:43:bf:40:73:e8:35:d3:e0:6b:3a:43:af:e5:5d:17:3b:
09:15:b1:c9:f7:64:61:c8:5b:2e:28:14:57:88:79:10:9b:17:
44:c1:0d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:11 2026 by rpki-client