
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/954/WGv-uKhFJlRebGlq0Qwn_W0J1aQ.roa
File: WGv-uKhFJlRebGlq0Qwn_W0J1aQ.roa (raw, json)
Hash identifier: YphHPqiid+k/RPeBn0bohgNBu2/+SguTxtkx85q2B9w=
Subject key identifier: 58:6B:FE:B8:A8:45:26:54:5E:6C:69:6A:D1:0C:27:FD:6D:09:D5:A4
Certificate issuer: /CN=1678DD6B61CB673BA4423C81BF63A61DD724E840
Certificate serial: 53
Authority key identifier: 16:78:DD:6B:61:CB:67:3B:A4:42:3C:81:BF:63:A6:1D:D7:24:E8:40
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/WGv-uKhFJlRebGlq0Qwn_W0J1aQ.roa
Signing time: Tue 31 Mar 2026 08:16:21 +0000
ROA not before: Tue 31 Mar 2026 08:16:21 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 131954
IP address blocks: 202.226.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83 (0x53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1678DD6B61CB673BA4423C81BF63A61DD724E840
Validity
Not Before: Mar 31 08:16:21 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=586BFEB8A84526545E6C696AD10C27FD6D09D5A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b0:a1:ef:5d:46:75:aa:a6:c8:07:ff:7e:5a:
0a:3d:7a:8d:72:28:1c:24:e4:42:ca:7b:f3:4b:e8:
5c:d8:d9:06:10:19:75:d5:77:28:70:64:f4:4d:c3:
7c:cd:f2:57:2d:3c:6f:57:37:1b:0d:ae:e5:d3:cb:
d8:35:69:ef:5b:a4:e4:91:b5:65:4b:45:f4:3e:f8:
c2:1c:8c:72:d0:da:9d:c5:75:d2:19:55:eb:f6:f6:
a6:71:2d:a4:c7:4d:ae:54:a9:01:62:72:ea:23:62:
3e:09:7b:c5:9f:18:78:da:ee:e6:32:05:60:3d:e7:
2a:2f:e9:c9:8d:03:e7:cd:aa:df:e4:a1:34:56:10:
69:36:9f:f7:cc:bc:ca:82:41:81:79:12:8b:57:91:
a4:0e:47:99:15:69:25:cd:9e:42:cc:f6:dc:01:1a:
bc:25:dd:5d:a9:37:d2:0f:6a:76:58:18:b1:a2:28:
8d:0f:a6:9f:94:7d:9c:39:0e:a6:6d:78:75:7c:0b:
90:9c:36:f7:78:d1:a1:1f:85:cc:bf:79:89:fc:fb:
15:75:6e:31:f2:53:e7:34:43:fa:11:77:10:a0:7c:
89:21:1b:72:ac:34:7b:69:1c:f7:e4:2b:ef:e8:ff:
54:1c:8c:78:7d:c7:3c:54:ce:74:b4:1d:95:ba:98:
db:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6B:FE:B8:A8:45:26:54:5E:6C:69:6A:D1:0C:27:FD:6D:09:D5:A4
X509v3 Authority Key Identifier:
keyid:16:78:DD:6B:61:CB:67:3B:A4:42:3C:81:BF:63:A6:1D:D7:24:E8:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/WGv-uKhFJlRebGlq0Qwn_W0J1aQ.roa
sbgp-ipAddrBlock: critical
IPv4:
202.226.12.0/22
Signature Algorithm: sha256WithRSAEncryption
15:de:cf:12:58:5d:18:a1:09:a9:d7:db:29:fa:59:c1:66:25:
50:98:65:c2:26:1c:08:b9:ad:4c:10:68:53:17:4e:44:53:34:
55:a5:f5:b4:02:51:d2:18:45:6c:92:b1:6f:0b:8c:5d:b4:7c:
94:77:c0:fe:20:4b:5c:8f:4e:a4:00:ed:a6:42:10:7c:24:de:
c5:c5:39:9b:41:66:5d:7c:a3:48:44:4b:64:8f:94:34:ff:4c:
cd:8d:d6:3a:96:4e:8f:a4:a5:7e:c4:00:e4:55:c4:19:a5:93:
82:ca:8c:82:55:26:33:83:8d:1b:64:52:f3:4b:31:e1:19:7e:
26:4d:f6:28:3f:b9:6d:e6:88:3c:92:cf:0e:91:62:61:e8:ad:
ac:2b:d6:9b:c1:3f:69:e5:7e:20:89:28:74:0a:ee:d7:ff:da:
ef:7c:0f:76:46:a4:9f:5a:c2:2f:de:c7:c2:ee:0f:54:f5:67:
de:dd:ff:d2:bc:64:ab:19:eb:1c:30:df:2a:1e:df:38:00:ac:
55:0d:79:a9:2b:b0:5e:40:53:e5:0f:ed:d1:3a:11:d0:69:fb:
a6:9e:26:9f:45:31:12:00:8c:d2:0b:ff:45:8d:80:40:7c:81:
c0:f9:0b:c8:45:fa:8e:2d:7e:5d:21:8b:ff:13:6c:7d:4a:2b:
89:5c:b7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:40:10 2026 by rpki-client