
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/924/rW1RoZGzi7ZacgPELCGTYtIqggc.roa
File: rW1RoZGzi7ZacgPELCGTYtIqggc.roa (raw, json)
Hash identifier: KmKrNt/7I1cHzqfdDlgicsUL6zx8NilTfxcMBnkjhSA=
Subject key identifier: AD:6D:51:A1:91:B3:8B:B6:5A:72:03:C4:2C:21:93:62:D2:2A:82:07
Certificate issuer: /CN=06A8484DF4FBAFE5C48D988A046B6AB6A81B2DF3
Certificate serial: 60
Authority key identifier: 06:A8:48:4D:F4:FB:AF:E5:C4:8D:98:8A:04:6B:6A:B6:A8:1B:2D:F3
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BqhITfT7r-XEjZiKBGtqtqgbLfM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/rW1RoZGzi7ZacgPELCGTYtIqggc.roa
Signing time: Tue 31 Mar 2026 07:40:38 +0000
ROA not before: Tue 31 Mar 2026 07:40:38 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 63790
IP address blocks: 103.167.206.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BqhITfT7r-XEjZiKBGtqtqgbLfM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 10:39:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96 (0x60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06A8484DF4FBAFE5C48D988A046B6AB6A81B2DF3
Validity
Not Before: Mar 31 07:40:38 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=AD6D51A191B38BB65A7203C42C219362D22A8207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3e:97:54:3b:97:d8:e2:74:c8:50:b9:c1:2f:
f6:c6:ba:44:66:0c:24:a3:7a:93:42:1a:51:d8:bd:
ad:1a:66:3d:9f:df:4f:54:67:6c:5e:61:af:6e:ec:
8a:39:eb:48:8d:f1:2d:2e:05:c9:53:aa:ed:05:5a:
0b:c2:a2:72:bd:30:b6:20:e2:13:d3:8e:18:41:cf:
1a:bd:41:c0:a3:7e:46:8c:55:de:04:8a:35:51:d8:
ff:1e:0a:ae:8b:4d:9b:3a:ab:77:07:20:29:bb:99:
97:3d:23:26:18:c8:95:76:d1:5c:4d:23:be:63:e5:
31:73:b4:b1:d5:02:24:49:9c:27:25:bd:f5:de:ec:
78:89:ee:40:41:96:bf:1b:98:79:b3:36:ec:3c:a3:
0d:b2:88:26:c8:f4:fb:95:07:06:ab:7d:ca:46:d1:
3a:8f:f4:d8:4e:6d:19:42:ab:64:5b:e5:f2:02:66:
70:20:c3:cd:4b:01:a6:ec:a1:93:a2:51:85:13:4a:
be:b8:a2:ce:c0:55:b1:10:ac:1e:57:96:78:69:11:
62:d7:8e:17:51:48:27:f1:81:6e:dc:41:75:e3:f7:
c7:9c:61:b5:18:28:d4:8e:d7:ad:0e:3e:39:09:3e:
45:15:5e:91:56:c7:4f:48:d9:03:a6:f8:3b:de:00:
8c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:6D:51:A1:91:B3:8B:B6:5A:72:03:C4:2C:21:93:62:D2:2A:82:07
X509v3 Authority Key Identifier:
keyid:06:A8:48:4D:F4:FB:AF:E5:C4:8D:98:8A:04:6B:6A:B6:A8:1B:2D:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BqhITfT7r-XEjZiKBGtqtqgbLfM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/rW1RoZGzi7ZacgPELCGTYtIqggc.roa
sbgp-ipAddrBlock: critical
IPv4:
103.167.206.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:1e:24:36:08:ec:06:12:4f:63:b9:db:82:ae:bb:a4:52:e7:
f8:5b:f5:44:19:96:27:cc:09:53:86:e5:b0:09:67:1f:2f:9e:
e4:a7:65:7d:a5:2f:05:f5:85:3d:81:ca:1d:da:4b:81:b7:b9:
02:e9:09:cf:b6:45:a9:3a:7c:a7:32:07:48:c9:e5:2b:21:73:
f5:40:f7:fb:a9:61:3e:2e:7b:d0:4b:c1:75:cd:8f:24:b7:95:
6d:90:64:f3:dd:0a:60:f0:f5:a6:17:0f:8b:68:25:3e:0a:a5:
e9:44:fd:ed:de:e2:e1:f1:53:bb:f8:87:65:98:ca:62:df:8e:
a8:b7:5d:6e:db:13:c3:ee:92:01:85:f4:ad:c6:46:b6:60:0e:
ba:f0:95:38:69:c7:6e:5a:65:57:61:cf:a1:69:c8:a0:c5:d9:
30:c0:00:89:ab:48:14:c4:bc:db:81:3b:95:42:df:76:6d:c5:
a8:3f:e2:55:d2:bb:e3:f1:6f:8f:40:5b:4b:e3:d9:56:82:22:
e0:74:52:31:66:c0:d1:38:99:d5:3a:db:29:c4:79:35:8a:8e:
b6:c4:43:55:92:94:c6:b3:75:4d:af:ac:18:1c:14:4e:28:39:
75:ef:96:bf:02:d4:6b:b7:02:1b:49:79:6a:f3:24:e6:9b:b4:
22:41:49:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:25:13 2026 by rpki-client