
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/948/waJeyjFCw1EINIAwt3UMyz49yQE.roa
File: waJeyjFCw1EINIAwt3UMyz49yQE.roa (raw, json)
Hash identifier: LZBJi+zj8/nA8wpmPxqoNyBLHzN1psqfaAPNIqx4jkQ=
Subject key identifier: C1:A2:5E:CA:31:42:C3:51:08:34:80:30:B7:75:0C:CB:3E:3D:C9:01
Certificate issuer: /CN=D7A784AA3FB01396E35DE2857639DEE06954706C
Certificate serial: 37
Authority key identifier: D7:A7:84:AA:3F:B0:13:96:E3:5D:E2:85:76:39:DE:E0:69:54:70:6C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/16eEqj-wE5bjXeKFdjne4GlUcGw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/waJeyjFCw1EINIAwt3UMyz49yQE.roa
Signing time: Tue 31 Mar 2026 08:24:03 +0000
ROA not before: Tue 31 Mar 2026 08:24:03 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 38628
IP address blocks: 45.75.0.0/17 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/16eEqj-wE5bjXeKFdjne4GlUcGw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/16eEqj-wE5bjXeKFdjne4GlUcGw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/16eEqj-wE5bjXeKFdjne4GlUcGw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 03:54:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7A784AA3FB01396E35DE2857639DEE06954706C
Validity
Not Before: Mar 31 08:24:03 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=C1A25ECA3142C35108348030B7750CCB3E3DC901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dc:d7:f4:e4:87:93:c5:85:e8:91:6a:b6:8a:
62:a8:b7:76:31:62:7d:bb:78:cd:ff:51:38:23:cb:
59:7b:d3:01:23:20:bb:58:1a:e5:2e:2b:11:06:d6:
61:ec:33:65:8f:9f:11:19:ad:1b:84:f5:5a:83:1f:
10:c6:87:72:5b:48:dc:c2:81:2e:08:72:03:05:99:
b8:2b:b8:c2:22:d5:98:4b:1c:f2:15:26:42:be:70:
74:36:64:de:0d:eb:cc:45:01:3c:85:43:7c:ad:a4:
fd:07:cf:9c:eb:63:7a:9c:23:de:d2:7c:9b:d4:c7:
f0:3d:ca:85:e0:a7:a1:7d:f6:5f:6d:b6:02:b6:fb:
b5:4a:bc:9f:41:21:70:89:cb:7c:ce:5f:ce:35:54:
31:0f:61:6f:30:ec:79:b8:89:70:9f:2a:d0:eb:75:
7b:41:f6:a5:c9:70:37:4e:ff:10:98:a3:f7:7f:26:
d7:71:e9:4b:b2:9c:45:f5:fd:9a:5d:4a:06:79:46:
fe:a9:89:80:f1:49:72:8b:5e:c5:50:e5:8c:2b:c5:
11:46:9b:e1:d8:5b:c4:61:60:b7:1c:e8:57:8a:32:
2a:b9:3d:52:2d:c7:db:7c:b9:61:ae:08:a2:37:6c:
5e:ed:ec:fc:f5:dc:7e:6e:ed:a2:6b:64:f4:25:64:
89:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A2:5E:CA:31:42:C3:51:08:34:80:30:B7:75:0C:CB:3E:3D:C9:01
X509v3 Authority Key Identifier:
keyid:D7:A7:84:AA:3F:B0:13:96:E3:5D:E2:85:76:39:DE:E0:69:54:70:6C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/16eEqj-wE5bjXeKFdjne4GlUcGw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/16eEqj-wE5bjXeKFdjne4GlUcGw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/waJeyjFCw1EINIAwt3UMyz49yQE.roa
sbgp-ipAddrBlock: critical
IPv4:
45.75.0.0/17
Signature Algorithm: sha256WithRSAEncryption
4c:79:aa:59:17:39:d4:01:af:b5:f2:4b:cb:a0:49:4b:81:cf:
d6:09:2c:ef:c2:fd:36:f5:6d:a2:74:63:42:91:d3:b1:d5:22:
91:2d:28:c8:f7:3d:56:de:bb:63:5e:59:f3:62:2c:60:54:40:
0b:d6:c3:af:ee:30:23:a2:b8:39:fa:da:3e:0d:04:f3:94:77:
2d:9c:87:c5:1c:3b:ec:04:23:94:90:54:9f:22:69:b2:0a:11:
2d:30:38:e5:6e:e6:f9:b1:1a:1b:02:fa:44:57:e7:c1:79:5e:
11:3c:33:69:92:25:67:6d:3d:fa:aa:3e:65:fb:c0:0e:4b:c5:
5d:e1:62:f0:5a:72:44:1c:91:d6:8a:4a:28:45:89:4f:13:d6:
de:3f:f9:11:65:08:2f:11:85:df:bf:0a:04:25:2c:2e:6b:c2:
36:9c:69:4e:12:92:89:ae:11:90:9a:25:9c:75:a9:61:bb:bd:
25:54:ad:c5:52:46:72:5d:ff:d3:87:e5:de:db:76:c3:21:5c:
7a:54:45:34:86:55:e4:a6:3c:52:8c:0b:01:29:d6:61:e2:95:
c1:5f:ec:a0:75:23:c6:cf:16:86:fe:3f:11:e7:7c:ee:2f:06:
bf:84:1d:2b:72:3c:08:ac:e0:2f:6f:33:0a:73:6f:5e:e5:cb:
a7:d5:48:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 16:28:54 2026 by rpki-client