
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/948/sjJ3Gzlk7xqpGYfsaKdfLn7uHJA.roa
File: sjJ3Gzlk7xqpGYfsaKdfLn7uHJA.roa (raw, json)
Hash identifier: 9t03xoecKlZAnN3jHKO3+B/DbbDPVNicXjPKAYA77js=
Subject key identifier: B2:32:77:1B:39:64:EF:1A:A9:19:87:EC:68:A7:5F:2E:7E:EE:1C:90
Certificate issuer: /CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C
Certificate serial: 5C
Authority key identifier: C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/sjJ3Gzlk7xqpGYfsaKdfLn7uHJA.roa
Signing time: Tue 31 Mar 2026 08:24:10 +0000
ROA not before: Tue 31 Mar 2026 08:24:10 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 38628
IP address blocks: 103.16.236.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 13:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C
Validity
Not Before: Mar 31 08:24:10 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=B232771B3964EF1AA91987EC68A75F2E7EEE1C90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2a:7e:71:59:38:66:43:26:34:c3:b5:ec:58:
08:4d:45:c3:9e:7e:fb:e8:0f:81:1e:6b:66:84:5f:
c8:bc:5f:c0:66:52:55:1b:d3:a2:96:47:3c:e4:71:
e6:13:41:54:7f:41:d0:5d:c8:75:7a:7c:df:dd:c9:
f1:af:5e:78:d2:ef:e3:f2:7a:c3:a7:a6:a0:31:14:
63:d4:36:55:c9:55:62:c2:1e:ad:d7:79:c1:0c:61:
a9:6e:5f:b9:3e:93:68:4c:ff:4c:2d:1f:b2:72:e6:
05:e7:4a:b2:89:a4:38:a1:ca:41:4d:48:68:c4:e3:
a0:c0:30:ee:e1:fb:b1:0d:99:07:a8:c0:5f:6f:c7:
88:df:ec:9b:d3:7d:d8:af:8e:83:c9:a2:2c:f6:62:
9b:6e:fd:9d:22:63:26:66:cc:8a:f2:d0:be:89:1b:
35:bd:86:ae:a5:1c:b7:6a:74:d6:5c:53:06:62:82:
a4:25:56:71:a3:af:11:43:2c:2d:da:02:10:d1:ff:
c1:98:c0:35:61:93:fb:1f:61:17:98:17:c3:a8:08:
ce:7d:66:33:a8:18:ab:24:01:00:22:d3:1b:d4:2c:
49:7d:2d:65:1d:0d:46:74:d4:b8:ee:61:3d:94:a7:
b7:42:90:57:35:ac:11:33:4e:43:d4:82:8b:11:42:
c5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:32:77:1B:39:64:EF:1A:A9:19:87:EC:68:A7:5F:2E:7E:EE:1C:90
X509v3 Authority Key Identifier:
keyid:C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/sjJ3Gzlk7xqpGYfsaKdfLn7uHJA.roa
sbgp-ipAddrBlock: critical
IPv4:
103.16.236.0/22
Signature Algorithm: sha256WithRSAEncryption
65:54:10:2e:bc:bc:61:9a:10:c8:fe:c0:3e:19:81:ec:e3:aa:
26:f9:e8:38:bd:4e:20:1c:be:c8:84:7d:47:b8:48:28:88:59:
e3:ed:6b:a8:8b:91:ff:2c:9c:0d:33:41:cd:6c:42:f2:aa:b2:
78:2e:c5:c3:68:ff:d2:82:ef:64:1b:47:46:0a:64:0b:db:1f:
df:83:39:0d:b1:49:4d:a6:a1:c7:0b:9f:ee:8b:ca:71:80:f0:
7f:e3:95:c4:77:09:dc:cd:45:9a:7a:7b:f1:5a:96:1a:b0:de:
ea:ac:5e:30:e4:53:f5:90:3e:2c:0f:bc:1d:c4:f5:17:b9:21:
61:e3:ff:74:5e:30:60:26:d7:77:a9:78:65:13:db:d5:af:e5:
93:7c:39:58:78:9e:aa:ba:72:8f:e0:16:f4:25:c1:38:57:5d:
e6:9f:5a:e0:38:67:ab:58:b0:ce:6d:1f:c8:a0:ff:b6:38:2f:
84:e8:dd:aa:2a:ea:c8:b3:17:ad:4a:bd:9b:0d:ef:78:0a:08:
22:0c:7b:f3:b1:df:1a:45:e8:70:cc:d2:7b:98:08:fc:ec:79:
e0:f0:e8:30:71:db:d3:b4:eb:e2:26:a3:98:70:b9:15:15:49:
18:67:4b:a2:fb:f3:17:b6:d3:d9:6e:f9:c0:85:a0:64:a9:26:
68:92:44:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 16:28:43 2026 by rpki-client