
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/942/HgICBi7AoCs2n4dhD4mAVak8-h8.roa
File: HgICBi7AoCs2n4dhD4mAVak8-h8.roa (raw, json)
Hash identifier: Q4Hv3W/Gyfarmg31kavFmC9JYf08iMeuWqixJXQ03Sk=
Subject key identifier: 1E:02:02:06:2E:C0:A0:2B:36:9F:87:61:0F:89:80:55:A9:3C:FA:1F
Certificate issuer: /CN=8A1E725176BFD9ABDA5CCB7B21A10B8F8DB7D578
Certificate serial: 5D
Authority key identifier: 8A:1E:72:51:76:BF:D9:AB:DA:5C:CB:7B:21:A1:0B:8F:8D:B7:D5:78
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/HgICBi7AoCs2n4dhD4mAVak8-h8.roa
Signing time: Tue 31 Mar 2026 08:16:11 +0000
ROA not before: Tue 31 Mar 2026 08:16:11 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 37908
IP address blocks: 103.10.164.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A1E725176BFD9ABDA5CCB7B21A10B8F8DB7D578
Validity
Not Before: Mar 31 08:16:11 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=1E0202062EC0A02B369F87610F898055A93CFA1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8b:cd:e3:22:d9:29:17:20:57:b4:c6:ac:99:
b8:2c:80:60:76:d5:ce:d0:7b:a5:19:fd:9f:97:b8:
bb:15:60:ca:73:20:f4:62:be:51:ba:a2:76:c6:72:
82:95:61:11:e6:cf:9b:98:c1:32:cb:9e:9d:18:ea:
da:e3:8d:fb:44:f0:61:be:12:3e:48:8b:f4:04:b3:
1d:42:2b:e8:0a:96:7e:74:40:e9:01:c2:2f:18:1e:
a1:74:16:c6:ad:a8:f9:a2:a4:73:9b:8d:ee:b5:5a:
09:dd:16:eb:03:b5:14:ad:58:f9:85:0d:ba:8e:56:
c0:b9:b4:a2:50:3b:43:0f:79:6e:bb:8c:73:36:45:
7b:93:51:aa:2b:a2:34:84:4e:c2:99:af:11:ad:00:
9d:8e:f4:ac:09:06:e4:60:81:76:0d:41:ce:f9:90:
9a:a9:72:1a:23:4c:2a:f5:48:d5:f1:ac:c2:eb:0f:
2c:05:19:7e:d9:a1:46:d0:9b:e2:6b:ca:4e:3f:80:
1b:9c:bd:a6:c1:0f:3d:c4:96:10:d9:7c:25:ec:e1:
a9:01:6a:38:1a:c7:25:85:ca:83:8d:b6:86:15:30:
cb:f3:88:3c:60:c4:b7:14:72:19:6f:ad:c2:49:51:
5d:9a:5a:66:c7:91:42:98:78:86:5e:63:d4:72:1f:
10:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:02:02:06:2E:C0:A0:2B:36:9F:87:61:0F:89:80:55:A9:3C:FA:1F
X509v3 Authority Key Identifier:
keyid:8A:1E:72:51:76:BF:D9:AB:DA:5C:CB:7B:21:A1:0B:8F:8D:B7:D5:78
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/HgICBi7AoCs2n4dhD4mAVak8-h8.roa
sbgp-ipAddrBlock: critical
IPv4:
103.10.164.0/22
Signature Algorithm: sha256WithRSAEncryption
42:68:a9:df:c9:bf:5a:0f:3f:d5:a7:8a:4d:52:a3:95:46:3d:
86:02:00:5e:2c:95:e5:a6:02:98:e3:e8:ce:97:4a:c8:0c:be:
af:e4:ba:7b:9e:c7:d6:0b:de:1a:19:b0:be:09:3c:34:bc:2e:
18:c4:82:1e:aa:9d:ea:1d:ec:dd:e5:c1:5b:8d:ec:75:da:e7:
bb:54:33:f1:70:62:69:6b:93:e6:11:43:95:af:09:db:23:41:
77:36:a6:48:e1:83:95:70:11:ec:0e:ff:50:16:2c:7d:c3:94:
37:c0:4f:ca:16:e6:cf:d1:4f:1f:57:9b:05:95:84:df:92:fd:
4d:0f:19:6c:5d:00:13:cf:ef:b3:53:01:23:5e:2f:3a:75:f7:
17:26:39:1d:bd:5f:22:d1:0c:20:91:6a:14:57:7d:9b:59:2c:
e0:5a:45:10:89:15:78:0f:65:66:c1:d9:d5:2e:a1:6b:6f:8e:
06:cc:d6:5d:7c:92:ba:e7:cf:0e:6d:6a:90:5b:d5:9a:00:4f:
78:a5:b5:d3:ee:13:30:4b:df:f8:66:b7:a4:70:84:51:fc:d1:
9a:bd:09:53:94:8c:35:5f:38:4c:08:b1:3e:9a:02:51:8c:c8:
70:6d:1e:6f:90:e0:25:3d:ea:5a:4b:81:1f:bd:fc:7f:7d:59:
fb:bd:e6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:17 2026 by rpki-client