
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/882/sCGVR211dlO69E0bbqcfhqonsKI.roa
File: sCGVR211dlO69E0bbqcfhqonsKI.roa (raw, json)
Hash identifier: 2x5+qAivK8WFKMo7rPnv+iIAu5fEKqT5V131F1Hu/LY=
Subject key identifier: B0:21:95:47:6D:75:76:53:BA:F4:4D:1B:6E:A7:1F:86:AA:27:B0:A2
Certificate issuer: /CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
Certificate serial: 5D
Authority key identifier: B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/sCGVR211dlO69E0bbqcfhqonsKI.roa
Signing time: Tue 31 Mar 2026 08:32:01 +0000
ROA not before: Tue 31 Mar 2026 08:32:01 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 59127
IP address blocks: 180.148.144.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
Validity
Not Before: Mar 31 08:32:01 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=B02195476D757653BAF44D1B6EA71F86AA27B0A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4f:ab:99:8f:b5:bf:28:25:5a:89:8e:57:9a:
4b:77:a9:fa:7d:98:98:97:ff:21:de:84:15:03:b2:
20:ad:2d:1c:95:54:93:bf:e2:5b:06:1a:2b:63:c5:
84:61:29:af:d8:20:a8:87:05:03:35:b8:21:44:cf:
44:07:a7:2a:da:c0:0e:ab:cd:96:ee:f8:27:d3:72:
b0:16:44:17:ad:d9:29:6f:b6:45:43:73:eb:9d:c5:
3a:16:7c:ae:00:3f:f2:79:42:b7:87:19:91:24:77:
b6:84:51:93:45:20:bf:9d:bc:5a:c2:77:f8:27:c9:
6f:b7:48:75:b1:da:b9:59:83:01:21:4f:a7:cc:01:
8d:b3:7e:e7:1c:cd:57:b7:e0:6e:57:74:3e:30:af:
33:3f:fe:a5:be:b0:80:60:87:b3:ae:bf:c6:24:53:
0a:03:97:be:91:3e:91:37:06:c8:22:de:d1:b5:2f:
c9:10:51:62:2e:4a:66:0e:eb:4b:ad:74:a4:63:6c:
0b:70:76:35:83:33:44:c5:76:a9:44:0c:14:01:d7:
6e:36:56:d2:43:5f:23:b4:52:26:ff:ae:63:4b:33:
6e:c8:19:12:f5:aa:c4:86:f0:bc:13:69:a5:80:b2:
5c:04:6d:7e:32:10:0f:e9:0a:90:ec:cd:7c:82:01:
80:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:21:95:47:6D:75:76:53:BA:F4:4D:1B:6E:A7:1F:86:AA:27:B0:A2
X509v3 Authority Key Identifier:
keyid:B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/sCGVR211dlO69E0bbqcfhqonsKI.roa
sbgp-ipAddrBlock: critical
IPv4:
180.148.144.0/21
Signature Algorithm: sha256WithRSAEncryption
8f:b8:63:2a:88:a4:c4:05:3c:d2:77:b9:eb:cd:63:16:03:67:
bc:f6:64:c6:ae:6f:75:db:31:cf:7e:86:99:4d:32:df:db:50:
87:1b:6b:04:1b:e4:e2:a4:7f:43:15:7a:52:af:90:d0:72:9a:
94:a0:1b:7e:42:7c:3a:5d:e1:92:b6:12:23:1b:cf:76:11:2e:
29:c9:d3:66:11:9e:b9:5e:3a:37:91:04:e5:18:7a:e0:cc:8a:
1d:d1:6f:5f:44:5a:a2:e1:52:34:20:8c:a5:69:4b:35:39:b8:
26:29:cd:30:8d:91:e4:6d:09:4a:d1:4d:5d:33:49:2f:eb:9a:
36:e5:b1:9e:c0:75:7c:75:3e:25:b2:2e:76:86:e6:9b:2e:a0:
cb:a1:2b:4e:69:9f:11:60:b4:ff:0c:9c:f4:14:6d:8d:9f:35:
5d:2f:4e:c7:d6:23:55:f6:81:88:71:fd:28:5f:1b:a6:92:c1:
bd:a3:4e:da:29:1e:a3:ea:eb:c8:0a:c2:36:dd:ed:80:c5:dc:
c8:05:71:59:88:7e:80:44:26:5a:b6:04:2c:b3:53:0f:5c:2b:
14:a0:9e:a2:6f:23:f8:b9:f9:f6:22:c3:43:71:9f:3c:cd:a0:
dd:04:9a:8b:c7:ce:9f:80:92:ad:48:e0:52:e4:21:5f:7f:51:
a6:0a:ac:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:52 2026 by rpki-client