
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/989/wCOi_NkXsuW2oUB9MeJk97uvLz8.roa
File: wCOi_NkXsuW2oUB9MeJk97uvLz8.roa (raw, json)
Hash identifier: TQAJysun5fxG3GigwYZjVsQ8ivpOX9IwyBx4+rrXIrY=
Subject key identifier: C0:23:A2:FC:D9:17:B2:E5:B6:A1:40:7D:31:E2:64:F7:BB:AF:2F:3F
Certificate issuer: /CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
Certificate serial: 8E
Authority key identifier: 8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/wCOi_NkXsuW2oUB9MeJk97uvLz8.roa
Signing time: Tue 31 Mar 2026 07:31:48 +0000
ROA not before: Tue 31 Mar 2026 07:31:48 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 45680
IP address blocks: 218.100.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142 (0x8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
Validity
Not Before: Mar 31 07:31:48 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=C023A2FCD917B2E5B6A1407D31E264F7BBAF2F3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:50:5d:30:59:f7:a4:5f:bf:4d:59:63:13:23:
15:f8:52:2d:ad:d7:38:62:cf:d5:0e:5b:45:95:70:
4b:a0:04:78:58:73:25:4c:f2:cd:c8:64:24:34:b4:
60:c8:ff:eb:8e:a2:b1:11:e7:05:6a:fe:9a:d0:08:
01:48:16:9d:e2:7a:ec:8c:d9:0b:7d:5d:ae:60:12:
77:15:f3:12:01:4c:b6:f7:1f:a1:65:2d:30:c9:d5:
a3:f3:11:61:6d:79:05:43:84:9b:dd:f7:e4:9b:b9:
9c:ae:ae:84:a9:ac:b0:4a:76:c6:d0:51:5b:1e:cf:
49:78:3c:fa:27:d0:d8:72:56:e7:48:d5:5d:45:25:
2a:ff:34:dc:85:6a:72:7a:c4:a8:68:9f:3e:cd:79:
20:6d:5a:44:70:7f:45:99:a0:38:f1:48:a6:1f:ea:
3c:72:59:ad:c8:6f:23:ec:ba:fb:db:13:31:44:d9:
f3:46:9a:d5:34:ff:d8:bd:d1:27:a0:83:21:f9:65:
80:5c:ff:48:d7:1c:4e:26:1a:db:37:20:11:1f:34:
d1:7b:89:5c:6b:60:e2:dc:d9:b1:7e:8a:0b:67:e1:
5a:00:d3:86:fd:23:d4:b4:f2:65:33:cc:d4:0d:28:
4b:04:7d:8e:61:ed:4b:dc:f3:97:3b:d9:6f:bf:19:
ad:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:23:A2:FC:D9:17:B2:E5:B6:A1:40:7D:31:E2:64:F7:BB:AF:2F:3F
X509v3 Authority Key Identifier:
keyid:8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/wCOi_NkXsuW2oUB9MeJk97uvLz8.roa
sbgp-ipAddrBlock: critical
IPv4:
218.100.67.0/24
Signature Algorithm: sha256WithRSAEncryption
61:0f:5d:03:48:e2:33:af:5b:05:d4:75:2a:15:26:42:7c:c9:
73:70:9c:a5:99:b9:f9:5c:60:ed:c9:cf:29:cc:a8:5c:3c:5e:
5c:ff:00:b2:26:05:e8:ab:e5:77:d3:15:02:f4:8f:fb:9c:c8:
78:0a:e9:71:76:3e:17:32:32:95:26:c1:cb:f1:0c:df:28:4c:
df:1c:67:4f:27:3b:cb:b5:57:4d:97:dc:04:74:66:e4:1f:c2:
f0:5a:8e:cb:e6:c1:09:af:85:f9:8b:a8:06:43:5d:58:1c:72:
2c:06:e4:6b:44:b8:81:85:a0:d3:5a:35:d4:74:f8:5d:66:6a:
9b:46:ba:9e:fb:b9:ed:25:89:da:22:33:a0:83:f8:23:99:6b:
89:cc:60:f2:5a:31:56:e7:06:41:6d:5e:27:79:43:08:c5:39:
5a:2c:d9:97:2b:12:93:da:79:c7:3d:01:a9:36:82:1e:db:99:
53:63:63:a7:95:7b:2f:9a:fa:a2:9a:57:a1:03:25:31:73:c9:
d8:83:43:5a:98:80:8b:a0:7b:e7:05:f2:7e:de:7a:cf:cc:53:
8f:32:16:d1:9b:08:6a:c1:97:45:45:62:bb:a8:ca:63:2b:6c:
c3:8c:8f:69:65:28:a4:1f:db:a5:34:12:a4:49:b7:08:27:e9:
c1:02:f9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:41:52 2026 by rpki-client