
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/948/gZ3DeBVAd03hRagjQ0IJYCFjzfI.roa
File: gZ3DeBVAd03hRagjQ0IJYCFjzfI.roa (raw, json)
Hash identifier: CyAPSX+Ladt0+DtUqqLfnrfobkeAf5GazYOKLltcXvo=
Subject key identifier: 81:9D:C3:78:15:40:77:4D:E1:45:A8:23:43:42:09:60:21:63:CD:F2
Certificate issuer: /CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C
Certificate serial: 55
Authority key identifier: C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/gZ3DeBVAd03hRagjQ0IJYCFjzfI.roa
Signing time: Tue 31 Mar 2026 08:24:04 +0000
ROA not before: Tue 31 Mar 2026 08:24:04 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 38628
IP address blocks: 219.100.100.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 14:08:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85 (0x55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C
Validity
Not Before: Mar 31 08:24:04 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=819DC3781540774DE145A823434209602163CDF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:aa:93:da:dd:96:af:7e:00:a8:a2:88:d6:dc:
bd:2b:67:c1:03:95:d5:ab:b0:9f:d4:fc:8d:ee:16:
36:20:d2:47:3a:0a:e1:2b:2c:55:da:7b:15:fa:24:
7e:b9:b8:3d:05:8e:8d:d5:7c:cf:86:9e:c3:0a:a4:
19:9b:41:46:79:f1:ce:bc:06:d4:9f:a1:91:3c:84:
26:49:94:10:35:8b:50:ad:76:72:55:c7:4d:e6:60:
b4:7c:50:bb:b0:4c:16:58:3c:bc:8e:be:ee:11:8c:
41:69:bd:25:87:08:f8:e5:07:40:76:8e:49:8e:ae:
8a:3c:6d:b8:72:8d:b9:79:8e:7e:78:51:af:f2:a0:
4a:8a:86:21:65:4a:5f:a0:d8:94:28:c6:c0:1f:92:
39:08:44:bc:0f:74:0e:1a:c3:ee:df:0f:f1:18:ab:
ea:5b:c0:3b:2a:68:fa:b3:aa:56:8d:14:87:ba:eb:
72:ca:88:37:e0:d5:ad:0f:67:d8:f8:31:34:e1:63:
27:cf:c7:df:f4:58:f5:30:6a:d9:76:1f:39:f1:bf:
0a:64:a5:8a:2d:4d:f5:ee:c7:b9:08:87:28:9d:ef:
72:82:ee:20:ff:33:7a:89:a0:ae:dc:ed:8b:10:96:
78:bb:4e:90:1a:eb:0a:7b:e2:c2:6f:89:00:5b:c9:
de:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9D:C3:78:15:40:77:4D:E1:45:A8:23:43:42:09:60:21:63:CD:F2
X509v3 Authority Key Identifier:
keyid:C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/gZ3DeBVAd03hRagjQ0IJYCFjzfI.roa
sbgp-ipAddrBlock: critical
IPv4:
219.100.100.0/22
Signature Algorithm: sha256WithRSAEncryption
18:db:c1:48:71:ab:81:19:13:d8:cf:6d:42:a5:39:9e:15:aa:
c3:18:50:ae:a3:d3:22:9b:1e:35:0e:b6:07:e9:29:f5:61:df:
b7:13:91:ba:d4:ba:33:c7:36:27:54:ff:5a:64:d2:9b:19:25:
81:8e:97:0b:4c:3a:b0:e6:5a:0c:e6:4a:58:9c:48:f9:90:56:
f5:e3:fb:03:0b:1b:3a:da:83:fe:28:d4:8b:b3:43:98:65:f4:
5b:18:e4:e3:24:d5:ba:48:53:00:6d:74:4a:4d:87:19:ea:74:
4b:1b:18:b4:dd:14:f6:65:08:15:b0:64:85:24:17:03:34:fa:
0e:eb:4c:bd:cc:e6:e9:b4:ff:d2:b7:6f:8a:8f:08:dd:0b:b0:
2e:a0:b9:e5:14:4c:95:67:a6:2c:42:8a:1c:21:e7:5d:b5:6a:
4e:c5:57:b0:b7:77:2f:00:68:7f:e7:78:c1:58:27:38:11:c9:
08:db:45:1f:93:c4:bc:6c:df:6c:85:7d:fa:8e:34:af:40:5d:
e5:85:fb:2c:a2:80:0c:5f:71:e2:62:2a:ad:a4:a2:9a:e2:da:
01:f1:b8:76:e9:72:9c:4f:c8:7c:64:1f:91:25:ae:fe:a5:f1:
ba:dc:ff:3d:29:1f:70:31:e4:b0:19:92:fe:c1:94:7e:eb:80:
6d:44:af:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 16:28:47 2026 by rpki-client