
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/891/QQG_uxRC45Sqxyqiz5ZJdpGYsr8.roa
File: QQG_uxRC45Sqxyqiz5ZJdpGYsr8.roa (raw, json)
Hash identifier: z0hnVyxeBZBI6+r2MzAY3/P1rqO4IAaOj9zc3aJVLjg=
Subject key identifier: 41:01:BF:BB:14:42:E3:94:AA:C7:2A:A2:CF:96:49:76:91:98:B2:BF
Certificate issuer: /CN=DD829D646D53ECF298950B687532DE926EC7EBC0
Certificate serial: 31
Authority key identifier: DD:82:9D:64:6D:53:EC:F2:98:95:0B:68:75:32:DE:92:6E:C7:EB:C0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3YKdZG1T7PKYlQtodTLekm7H68A.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/QQG_uxRC45Sqxyqiz5ZJdpGYsr8.roa
Signing time: Tue 31 Mar 2026 08:38:57 +0000
ROA not before: Tue 31 Mar 2026 08:38:57 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 23827
IP address blocks: 202.84.48.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3YKdZG1T7PKYlQtodTLekm7H68A.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD829D646D53ECF298950B687532DE926EC7EBC0
Validity
Not Before: Mar 31 08:38:57 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=4101BFBB1442E394AAC72AA2CF9649769198B2BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:53:cc:8a:9e:06:33:42:f0:3e:fe:ad:29:db:
74:56:7c:c5:67:d7:b0:21:5d:9c:08:66:d5:aa:ba:
62:a4:1d:1a:79:35:d9:cf:f3:7e:39:da:cc:c7:59:
c9:98:d1:a5:27:bf:c8:40:a4:47:bd:93:b7:87:07:
39:ba:27:d2:47:a3:d3:bc:5f:77:45:77:e7:45:89:
60:70:f9:ab:be:ac:5a:56:52:41:40:2f:95:04:a5:
0d:6c:2b:07:f0:c0:da:fb:d8:5a:48:e0:ad:39:84:
3e:41:2c:1e:25:8d:19:aa:63:0a:aa:e3:27:b9:94:
f4:1a:5d:5b:0a:5d:2b:fc:a2:a1:67:02:1e:5f:ec:
46:e5:46:4d:92:ca:7c:2f:9f:73:61:11:fe:b7:b6:
1c:88:b2:25:6d:4f:69:90:35:12:8f:01:d9:ca:d6:
e0:c7:ac:16:b9:30:32:88:f3:18:af:48:39:1e:f2:
ee:d1:21:5a:b2:83:8a:b8:e7:1f:92:75:9c:bd:33:
0e:21:a2:6b:4a:3f:da:35:d5:48:f0:b2:cb:d3:08:
b8:ae:e0:d8:20:99:ab:13:1c:7f:07:84:3b:1a:1c:
a3:93:77:4b:0e:e3:19:07:e2:70:84:b3:26:a0:bb:
71:3d:be:6c:fa:f4:75:3d:69:92:42:5b:4d:87:5d:
d4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:01:BF:BB:14:42:E3:94:AA:C7:2A:A2:CF:96:49:76:91:98:B2:BF
X509v3 Authority Key Identifier:
keyid:DD:82:9D:64:6D:53:EC:F2:98:95:0B:68:75:32:DE:92:6E:C7:EB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3YKdZG1T7PKYlQtodTLekm7H68A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/QQG_uxRC45Sqxyqiz5ZJdpGYsr8.roa
sbgp-ipAddrBlock: critical
IPv4:
202.84.48.0/20
Signature Algorithm: sha256WithRSAEncryption
33:ff:5e:40:f6:f4:2f:32:33:39:21:0d:5f:9c:d2:fb:d1:12:
e2:a9:78:46:60:2a:49:a4:ff:4b:ef:64:37:9a:eb:9c:ae:b8:
3e:d4:63:71:08:6a:10:4e:28:52:d9:ed:0f:8a:e4:57:ed:f0:
4a:5f:90:41:b7:10:ce:ad:8d:d3:9f:a8:86:37:7b:b3:9d:fd:
e6:da:9c:8c:ba:f7:14:8e:f4:89:d2:4d:d7:d0:80:e9:44:ed:
a0:8a:79:76:fa:5d:d1:55:b4:e3:9b:6c:4f:f9:1c:52:3c:d9:
79:8e:76:04:29:7d:90:0d:be:f9:1a:88:db:c7:e2:8f:06:e9:
fd:c8:c9:93:95:16:ae:eb:d7:df:87:d8:5d:22:6b:b5:96:31:
5b:77:58:54:81:a4:ae:60:16:ed:34:1b:ce:38:bb:26:01:27:
de:8d:a2:65:f5:bc:1e:4d:cd:8a:74:1d:ae:e9:6a:ee:88:4d:
61:52:8e:8d:5a:86:db:1f:0a:a5:83:9b:ac:38:41:a2:52:71:
c4:b3:64:53:90:58:39:a6:d2:3b:dc:a8:78:d1:47:fa:bc:39:
93:04:38:a0:92:13:d0:8a:c0:0a:53:ac:fb:b1:34:b1:4c:56:
28:87:fd:2c:f2:e7:eb:73:e3:c4:7d:41:6c:bd:77:fc:52:ce:
8b:d0:5e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:34 2026 by rpki-client