
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/955/mABZONt6zg9aw3O0mjq6ZNJHPKk.roa
File: mABZONt6zg9aw3O0mjq6ZNJHPKk.roa (raw, json)
Hash identifier: JsgBcXy1rn/NJtmWUmXOLoXK1QCPBOic5FpGHOv5V4Q=
Subject key identifier: 98:00:59:38:DB:7A:CE:0F:5A:C3:73:B4:9A:3A:BA:64:D2:47:3C:A9
Certificate issuer: /CN=0BBCA90DCB80D622B18884EA1E0B3B7D40C61C52
Certificate serial: 51
Authority key identifier: 0B:BC:A9:0D:CB:80:D6:22:B1:88:84:EA:1E:0B:3B:7D:40:C6:1C:52
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/C7ypDcuA1iKxiITqHgs7fUDGHFI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/mABZONt6zg9aw3O0mjq6ZNJHPKk.roa
Signing time: Tue 31 Mar 2026 08:15:29 +0000
ROA not before: Tue 31 Mar 2026 08:15:29 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 55385
IP address blocks: 202.213.64.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/C7ypDcuA1iKxiITqHgs7fUDGHFI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/C7ypDcuA1iKxiITqHgs7fUDGHFI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/C7ypDcuA1iKxiITqHgs7fUDGHFI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81 (0x51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0BBCA90DCB80D622B18884EA1E0B3B7D40C61C52
Validity
Not Before: Mar 31 08:15:29 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=98005938DB7ACE0F5AC373B49A3ABA64D2473CA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f6:01:14:d6:7b:b3:f7:52:09:e9:6f:27:73:
47:cd:30:43:6b:ba:59:96:ff:54:0a:fd:98:ec:45:
c8:3b:dc:f1:8e:ee:d5:ca:20:82:09:80:e2:40:a4:
de:46:6a:37:b5:42:ab:f7:c6:6d:f7:f4:21:0d:7e:
10:cf:bd:ef:95:53:d5:d6:a8:82:dc:43:29:9e:ce:
a6:ec:7d:0c:a1:a7:43:b6:53:d7:d4:93:f1:64:ac:
14:14:e1:3d:2a:00:18:86:68:3f:e6:8e:c9:20:d2:
d9:5f:fa:9f:cc:4a:72:bc:4d:41:02:68:67:57:73:
8c:0b:b8:db:6c:d5:52:44:f5:2a:87:fd:0d:b9:23:
27:59:23:84:c8:12:62:cb:09:a9:77:2e:46:03:ec:
54:fc:b6:cf:cb:a4:73:97:16:91:df:26:34:e0:59:
c4:2c:a2:b5:da:25:91:e9:9c:53:92:13:9c:ef:99:
7a:b6:77:2f:9c:59:d3:30:99:ea:c0:d7:69:c6:83:
68:ce:cd:c2:a4:ae:80:a3:22:65:6d:55:f6:58:a3:
3c:5f:9b:bf:4d:1f:d3:ef:1c:24:66:b2:b6:9c:b0:
30:fa:f4:15:50:f8:a6:cf:79:bf:58:74:6a:78:2d:
22:a9:5f:5d:74:3d:5b:d5:fb:aa:ca:2c:75:7f:3a:
6d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:00:59:38:DB:7A:CE:0F:5A:C3:73:B4:9A:3A:BA:64:D2:47:3C:A9
X509v3 Authority Key Identifier:
keyid:0B:BC:A9:0D:CB:80:D6:22:B1:88:84:EA:1E:0B:3B:7D:40:C6:1C:52
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/C7ypDcuA1iKxiITqHgs7fUDGHFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/C7ypDcuA1iKxiITqHgs7fUDGHFI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/mABZONt6zg9aw3O0mjq6ZNJHPKk.roa
sbgp-ipAddrBlock: critical
IPv4:
202.213.64.0/21
Signature Algorithm: sha256WithRSAEncryption
36:87:c0:fb:95:30:63:80:e0:f0:83:15:42:b4:3b:6b:4f:c1:
5e:5a:38:ef:1c:4f:8f:21:3a:10:a9:19:75:8e:7e:12:3e:a6:
d9:5e:2d:a2:1c:3a:50:a4:90:a8:91:32:e6:85:25:51:48:3a:
56:48:2a:3e:04:9e:f2:96:25:a9:fe:c5:6d:4c:90:d0:87:fc:
1c:90:12:46:b9:e8:b7:34:9d:88:e1:d3:24:b7:b9:6d:82:de:
f9:3b:ff:75:03:b9:43:6e:ff:2a:ee:3f:c6:3a:86:ce:44:96:
82:f4:84:66:2b:2b:c2:00:d8:7b:b8:89:33:35:f3:14:c6:60:
68:95:82:1f:75:e0:bf:6c:63:53:fd:a1:68:d3:6d:aa:d9:e5:
34:7f:03:19:bb:51:e5:31:e7:80:05:71:01:6d:33:a8:e6:3f:
16:7d:dd:44:bd:cf:2e:9a:4a:30:30:0f:d1:0e:1c:a3:ab:d8:
c3:91:7e:49:b7:26:23:07:53:57:c9:da:f1:01:65:ff:62:20:
25:0d:a2:a0:40:1c:db:bb:a1:24:b2:77:c2:4b:27:d1:de:30:
ea:e7:d0:db:44:19:38:81:bb:fd:96:c3:90:96:51:9b:44:a4:
2b:cc:f8:8b:b4:3f:76:c5:49:af:05:34:33:68:25:ad:1e:fe:
d3:0d:73:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:41:53 2026 by rpki-client