
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/908/vFjyvTF5wI8ooiYOkdESQMG_KYw.roa
File: vFjyvTF5wI8ooiYOkdESQMG_KYw.roa (raw, json)
Hash identifier: aEUQvRa1BWHlaxn1dcQDugEHf2YXsa9TsecU0pnbSkw=
Subject key identifier: BC:58:F2:BD:31:79:C0:8F:28:A2:26:0E:91:D1:12:40:C1:BF:29:8C
Certificate issuer: /CN=D309646925B27B03DA591350A2DB39E49BF79E5D
Certificate serial: 15
Authority key identifier: D3:09:64:69:25:B2:7B:03:DA:59:13:50:A2:DB:39:E4:9B:F7:9E:5D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0wlkaSWyewPaWRNQots55Jv3nl0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/908/vFjyvTF5wI8ooiYOkdESQMG_KYw.roa
Signing time: Tue 31 Mar 2026 08:45:21 +0000
ROA not before: Tue 31 Mar 2026 08:45:21 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9607
IP address blocks: 202.183.80.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/908/0wlkaSWyewPaWRNQots55Jv3nl0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/908/0wlkaSWyewPaWRNQots55Jv3nl0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0wlkaSWyewPaWRNQots55Jv3nl0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D309646925B27B03DA591350A2DB39E49BF79E5D
Validity
Not Before: Mar 31 08:45:21 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=BC58F2BD3179C08F28A2260E91D11240C1BF298C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5f:53:0d:6f:d9:51:ba:39:e9:9a:f4:ca:38:
e2:2c:48:72:35:d2:ae:3b:18:6f:3c:8e:c6:be:04:
29:d2:3b:d5:64:5f:79:da:21:32:1e:47:d3:fa:ba:
52:49:46:6d:18:51:d1:fd:bb:8c:1a:d0:ec:1e:b3:
6a:f6:a5:0c:24:cb:7a:c9:82:a3:d8:9a:d6:fe:3e:
b2:95:05:9b:d2:e0:21:1f:b0:69:3c:27:ce:f8:34:
cc:e4:c3:3f:a6:47:ce:00:c4:54:4a:1e:2b:e7:02:
58:0b:58:5b:4a:b9:0c:1f:4e:9a:1d:40:1b:fd:ac:
9a:f6:7f:99:68:65:5a:ec:40:bf:53:18:2f:db:27:
0a:71:ba:bc:8a:25:31:2b:d5:48:d2:84:05:ee:34:
f4:8c:3c:d9:19:ac:8c:58:70:f5:ff:bd:d6:85:62:
55:0b:3a:70:72:dc:e1:b4:39:de:3c:99:bf:3e:94:
ab:56:d9:93:d2:03:a4:12:55:11:67:da:28:48:fd:
da:78:93:06:b2:78:79:76:43:31:51:f8:f1:e6:c5:
75:dc:40:7f:5f:03:3c:45:4c:b9:40:8e:4b:6c:8a:
ad:f6:b2:af:94:42:db:67:4e:a7:da:bc:92:42:4f:
b7:7a:e5:2f:94:7b:06:14:9e:48:f4:eb:5d:e2:25:
b1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:58:F2:BD:31:79:C0:8F:28:A2:26:0E:91:D1:12:40:C1:BF:29:8C
X509v3 Authority Key Identifier:
keyid:D3:09:64:69:25:B2:7B:03:DA:59:13:50:A2:DB:39:E4:9B:F7:9E:5D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/908/0wlkaSWyewPaWRNQots55Jv3nl0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0wlkaSWyewPaWRNQots55Jv3nl0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/908/vFjyvTF5wI8ooiYOkdESQMG_KYw.roa
sbgp-ipAddrBlock: critical
IPv4:
202.183.80.0/21
Signature Algorithm: sha256WithRSAEncryption
28:7c:a8:92:d7:8f:67:2f:a7:8f:7e:6c:51:c5:ae:9d:2a:f8:
56:6e:67:88:53:ef:ab:6f:15:91:7f:fb:73:6d:34:3f:23:82:
19:9f:57:fb:28:6f:33:f9:ce:ef:0b:cc:c9:6d:63:f1:e1:74:
61:af:e8:e2:1c:88:d8:3f:da:21:06:a5:df:4d:06:e7:2d:ed:
74:ea:04:d0:7a:3c:70:f3:90:0f:d5:82:1f:89:1a:3d:52:9d:
43:71:58:6d:a0:05:80:bc:98:a9:a2:28:fa:bb:99:ca:66:93:
cc:45:c8:2d:c7:fe:0e:cc:62:4f:4b:49:e1:66:98:ac:e9:0e:
12:05:1d:21:73:69:4f:24:69:39:95:fa:d4:ad:b3:d0:b8:5d:
5e:5c:08:a5:54:7f:28:f1:9f:09:3e:79:91:dd:ed:10:a8:b0:
b4:8a:17:54:ab:c4:ac:22:2a:69:cb:9c:24:9b:65:05:7a:20:
a1:7e:db:d4:a5:6d:44:e0:3d:6a:9d:47:27:2b:22:e0:81:0a:
96:fb:a0:43:17:40:9d:be:14:a0:92:c6:c7:f4:c2:43:f1:9d:
61:cc:b3:02:6f:0f:c5:38:e8:5a:57:83:44:63:46:a5:f4:1a:
7a:ca:3a:72:7a:60:91:d5:ef:7b:c3:51:d1:31:8d:18:eb:01:
7e:47:70:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:03 2026 by rpki-client