
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/903/UPNgjWcLsnQub0NWgPIez47sPcI.roa
File: UPNgjWcLsnQub0NWgPIez47sPcI.roa (raw, json)
Hash identifier: eWtTDUtctIcBquKFs7JV04XfjF/yAMEszz49cX/5YGM=
Subject key identifier: 50:F3:60:8D:67:0B:B2:74:2E:6F:43:56:80:F2:1E:CF:8E:EC:3D:C2
Certificate issuer: /CN=94C2F0BE180089A7593D9ED37D04E852ED5A259A
Certificate serial: 1F
Authority key identifier: 94:C2:F0:BE:18:00:89:A7:59:3D:9E:D3:7D:04:E8:52:ED:5A:25:9A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lMLwvhgAiadZPZ7TfQToUu1aJZo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/UPNgjWcLsnQub0NWgPIez47sPcI.roa
Signing time: Tue 31 Mar 2026 08:44:53 +0000
ROA not before: Tue 31 Mar 2026 08:44:53 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 0
IP address blocks: 210.134.128.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lMLwvhgAiadZPZ7TfQToUu1aJZo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94C2F0BE180089A7593D9ED37D04E852ED5A259A
Validity
Not Before: Mar 31 08:44:53 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=50F3608D670BB2742E6F435680F21ECF8EEC3DC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9f:0d:1a:4c:f7:1d:35:1d:d1:25:ee:b8:fe:
2a:26:5b:d0:c0:0b:af:e1:50:12:e2:69:77:34:b7:
7c:5a:de:51:20:94:69:fb:66:84:da:55:10:5a:39:
23:74:5f:cd:8d:8e:41:79:2d:c3:86:33:69:13:85:
7a:b3:a1:39:86:f9:08:2a:d0:e4:c7:53:ba:22:cd:
ad:0c:07:31:3f:14:23:52:3d:73:60:7a:b7:63:85:
0a:67:22:35:27:b1:ea:87:3b:5a:8f:da:53:32:fa:
c1:29:60:93:03:45:7c:ab:5d:18:92:c2:e8:7d:3c:
73:11:da:b6:68:5b:a3:21:07:55:ce:82:f3:03:6a:
c3:3e:db:ef:e6:0b:7d:68:ca:c0:60:bf:11:8a:7e:
fc:0c:ca:8c:ee:00:20:bb:b7:3d:67:c9:ad:36:c6:
ee:4d:d7:8a:30:0a:f9:20:d7:14:5b:cb:ad:d4:98:
18:07:65:e7:d2:1e:d9:f6:ed:35:0c:0b:05:df:a2:
f3:13:af:50:96:1e:bd:5f:ff:1c:b5:2f:77:b0:10:
bf:9e:11:73:23:6a:96:bb:0c:b3:88:06:2b:3a:bc:
53:a6:b3:55:bd:bc:09:18:6b:8b:26:21:17:bd:e8:
f7:ce:e6:c1:ed:69:84:9c:df:39:68:1c:5d:f2:b0:
3f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F3:60:8D:67:0B:B2:74:2E:6F:43:56:80:F2:1E:CF:8E:EC:3D:C2
X509v3 Authority Key Identifier:
keyid:94:C2:F0:BE:18:00:89:A7:59:3D:9E:D3:7D:04:E8:52:ED:5A:25:9A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lMLwvhgAiadZPZ7TfQToUu1aJZo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/UPNgjWcLsnQub0NWgPIez47sPcI.roa
sbgp-ipAddrBlock: critical
IPv4:
210.134.128.0/20
Signature Algorithm: sha256WithRSAEncryption
1c:62:86:55:89:b9:a6:14:33:5d:f0:a1:0a:80:20:3a:eb:75:
b5:18:63:b4:e1:9d:1c:e1:60:2a:69:a8:a1:61:40:54:84:33:
82:95:1b:92:0d:3c:db:d1:65:16:df:05:cc:4a:a9:20:12:a1:
ad:57:17:23:03:ac:d8:93:34:15:b4:fb:c1:01:71:39:07:7f:
3f:47:90:c6:bc:cb:19:73:3b:fa:4e:08:c0:a9:53:43:b3:a0:
ad:14:d8:ac:0f:76:ce:26:4c:6d:85:ba:21:84:d0:a8:a3:0b:
26:5c:e2:b5:e7:bf:18:52:50:8c:7d:46:c4:4f:85:97:ce:67:
0d:df:5b:5e:01:07:ec:41:43:cd:85:99:56:86:42:49:21:45:
17:76:4e:5b:1c:de:3c:51:1a:a7:dd:9f:fc:be:76:c7:94:8c:
6d:f1:67:97:0b:87:37:b8:72:b2:a0:de:15:2f:43:10:b9:c6:
f1:ac:93:57:45:0d:c2:cf:67:bc:a3:04:ab:a7:32:63:24:08:
e7:e4:61:b4:b5:5e:ad:f0:38:4a:a3:be:b0:58:b5:2b:8b:00:
ad:20:55:d7:4e:8e:f8:61:a9:49:3e:f9:fc:f2:fa:c1:b5:f7:
96:ea:2b:90:39:44:de:ba:54:a5:a1:c0:32:f0:31:2c:4d:ad:
e1:49:91:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:22 2026 by rpki-client