
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/965/qtBLIf4fQ9dZDDQChW-_AFplLQg.roa
File: qtBLIf4fQ9dZDDQChW-_AFplLQg.roa (raw, json)
Hash identifier: 1PTsdUVfEyvA10hrOLRZ+yNXrDPcyTuAfUWVB8rL5oU=
Subject key identifier: AA:D0:4B:21:FE:1F:43:D7:59:0C:34:02:85:6F:BF:00:5A:65:2D:08
Certificate issuer: /CN=989E82672C98A627120ABA72DEBEBE22015849A0
Certificate serial: 31
Authority key identifier: 98:9E:82:67:2C:98:A6:27:12:0A:BA:72:DE:BE:BE:22:01:58:49:A0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mJ6CZyyYpicSCrpy3r6-IgFYSaA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/qtBLIf4fQ9dZDDQChW-_AFplLQg.roa
Signing time: Tue 31 Mar 2026 08:35:27 +0000
ROA not before: Tue 31 Mar 2026 08:35:27 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 59127
IP address blocks: 113.197.40.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mJ6CZyyYpicSCrpy3r6-IgFYSaA.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=989E82672C98A627120ABA72DEBEBE22015849A0
Validity
Not Before: Mar 31 08:35:27 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=AAD04B21FE1F43D7590C3402856FBF005A652D08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:28:55:53:f0:23:93:04:0b:b5:f8:22:85:dc:
02:cf:01:a4:14:66:59:d9:71:07:6c:33:9e:ea:f5:
0f:f0:ab:2d:04:b9:93:18:ff:fb:8e:ea:73:55:11:
3d:ef:66:f9:c4:00:7e:24:ef:68:db:a1:9c:8f:85:
90:43:42:c1:7a:6d:38:72:c7:28:aa:0f:25:8e:dc:
ba:d9:c9:b3:85:a1:91:55:f1:db:32:2e:23:98:90:
ce:c1:15:49:fa:d0:23:d1:af:45:c6:4a:31:af:5c:
88:d2:9d:99:7e:6d:cd:fc:10:59:8b:66:14:b5:9b:
c7:ab:2b:43:98:34:67:aa:13:a8:52:44:d2:cd:ca:
84:ae:09:79:d0:21:48:55:f3:b2:02:fa:6f:bb:20:
e8:ea:e0:74:d8:76:a8:bb:62:8d:2c:de:54:a3:92:
b3:7c:51:d7:04:7c:df:5d:15:1f:f2:1a:c6:e8:e6:
a0:18:f8:4d:d6:fc:a5:3c:c2:47:fb:56:8f:21:62:
01:19:ab:af:0c:50:48:27:c7:bf:e6:af:2e:77:4a:
d3:46:c8:4f:37:f7:d2:94:8b:80:37:d1:e3:90:c1:
d8:e1:a1:84:62:6d:2c:df:c6:35:f4:46:11:10:94:
14:41:ab:bb:c4:08:4e:80:52:37:b8:88:ce:13:40:
a4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D0:4B:21:FE:1F:43:D7:59:0C:34:02:85:6F:BF:00:5A:65:2D:08
X509v3 Authority Key Identifier:
keyid:98:9E:82:67:2C:98:A6:27:12:0A:BA:72:DE:BE:BE:22:01:58:49:A0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mJ6CZyyYpicSCrpy3r6-IgFYSaA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/qtBLIf4fQ9dZDDQChW-_AFplLQg.roa
sbgp-ipAddrBlock: critical
IPv4:
113.197.40.0/21
Signature Algorithm: sha256WithRSAEncryption
d7:fc:bf:e7:73:99:42:fb:2e:49:11:a6:dc:dd:88:2b:73:88:
1f:fa:fe:b9:0a:95:59:47:a5:79:48:63:50:08:c6:cf:90:cb:
d5:93:3d:d0:b3:7d:03:6a:b9:bb:f5:08:32:57:d8:b4:48:a0:
48:fd:af:09:05:62:e9:de:71:bf:ae:e6:6c:7f:57:36:29:03:
ff:77:d9:7c:6e:d0:66:94:95:1e:d5:0e:31:79:a5:9b:ea:0e:
7e:53:f6:17:08:f3:de:f9:6d:27:5f:10:68:1e:ba:8d:cb:39:
c3:9c:77:84:43:06:92:e9:55:7c:34:e3:3f:dc:d2:c9:46:6f:
dc:b6:c1:93:39:81:0b:08:25:82:aa:db:43:af:c2:08:63:c3:
a3:60:3b:22:75:9d:08:71:62:e9:fb:94:88:76:df:a8:e3:3e:
32:52:37:d8:14:89:25:54:c9:f1:76:36:92:43:f5:bf:80:3e:
7f:63:93:75:93:f0:a4:54:1e:3e:a6:8c:13:6e:f4:43:47:80:
64:da:52:a6:61:c9:e2:6d:87:ea:f7:80:a8:5e:4a:99:b1:e8:
ac:98:3e:2f:2e:2e:fd:9b:99:2a:c7:fb:2b:75:60:ae:97:19:
a7:d0:6f:4b:8b:79:68:3c:4c:3b:56:9b:1d:6f:19:f5:1a:30:
b3:60:c3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:33:50 2026 by rpki-client