
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/996/q0J2XF0j-QrPbLMj1muWk-RCL4M.roa
File: q0J2XF0j-QrPbLMj1muWk-RCL4M.roa (raw, json)
Hash identifier: 4jcW2ioE518nQ0RKJsS9Q+Zh6ZifQxZUykU0Cy5ga1Q=
Subject key identifier: AB:42:76:5C:5D:23:F9:0A:CF:6C:B3:23:D6:6B:96:93:E4:42:2F:83
Certificate issuer: /CN=9260577566E47EDA0F5866CE0F4714A9198FA5F5
Certificate serial: 36
Authority key identifier: 92:60:57:75:66:E4:7E:DA:0F:58:66:CE:0F:47:14:A9:19:8F:A5:F5
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kmBXdWbkftoPWGbOD0cUqRmPpfU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/q0J2XF0j-QrPbLMj1muWk-RCL4M.roa
Signing time: Tue 31 Mar 2026 08:40:15 +0000
ROA not before: Tue 31 Mar 2026 08:40:15 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 45687
IP address blocks: 103.74.160.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kmBXdWbkftoPWGbOD0cUqRmPpfU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9260577566E47EDA0F5866CE0F4714A9198FA5F5
Validity
Not Before: Mar 31 08:40:15 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=AB42765C5D23F90ACF6CB323D66B9693E4422F83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:04:77:c7:01:4c:64:be:7e:b3:b6:34:a9:96:
3e:df:25:86:04:15:e5:dc:d9:f2:92:6d:da:1a:70:
bc:f5:55:de:b4:45:c6:a9:b2:01:76:86:d5:0b:40:
27:51:38:80:35:46:40:90:65:9b:63:de:07:08:7c:
74:64:5d:85:32:92:76:3b:ee:e8:17:8b:c0:7b:1c:
60:a4:6f:66:87:a3:1f:36:62:49:0e:9e:d1:1f:24:
44:81:32:01:52:77:04:0f:f4:d8:25:28:29:bb:88:
5a:4f:06:cc:09:28:2a:70:74:f1:a6:a3:e1:f5:10:
e2:b2:30:12:1c:ab:8b:db:ef:dd:bd:53:56:bd:c2:
a8:0c:75:fd:6f:94:cb:2c:11:63:c9:d6:ff:6f:db:
b8:4e:f2:04:ef:9a:27:7c:38:0c:82:1e:ef:55:2e:
83:1d:5a:c0:e9:48:02:33:cd:72:fa:3b:1f:9d:96:
58:1d:16:6e:a8:66:f5:dc:4b:f4:c6:7e:b2:2a:15:
31:45:64:39:62:83:68:f7:8b:86:a7:a4:d6:99:ad:
f0:b2:87:a7:45:d0:a2:7c:70:0b:25:ac:7b:c8:d6:
9f:76:29:37:be:18:52:46:95:76:40:a7:9a:ce:a5:
17:ce:69:13:f9:20:ed:be:e8:59:55:65:17:7b:25:
42:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:42:76:5C:5D:23:F9:0A:CF:6C:B3:23:D6:6B:96:93:E4:42:2F:83
X509v3 Authority Key Identifier:
keyid:92:60:57:75:66:E4:7E:DA:0F:58:66:CE:0F:47:14:A9:19:8F:A5:F5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kmBXdWbkftoPWGbOD0cUqRmPpfU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/q0J2XF0j-QrPbLMj1muWk-RCL4M.roa
sbgp-ipAddrBlock: critical
IPv4:
103.74.160.0/22
Signature Algorithm: sha256WithRSAEncryption
17:d5:c2:1b:7d:aa:30:b4:b6:e5:e0:b6:01:c7:46:a4:da:cc:
88:f9:c7:30:8e:a4:b9:20:20:36:98:d0:a2:5e:78:a4:35:35:
aa:66:35:1f:c9:a8:c8:6c:15:82:e2:6f:71:2b:18:82:23:e3:
dc:b0:e0:a0:7c:a4:ef:ce:a7:94:ac:a2:ef:5c:74:43:1e:35:
da:f9:14:9f:83:30:92:8d:76:e6:b4:e6:2a:fe:02:ad:b7:3a:
dd:12:ca:2f:14:82:ea:a7:68:cc:9e:4a:60:7f:89:cb:bb:30:
85:24:62:01:e8:23:34:c7:3a:64:a3:61:55:91:1d:27:c8:d0:
29:3e:01:8a:3a:9c:7e:fa:56:52:76:78:e1:0b:44:13:20:b2:
62:65:f2:ec:79:c8:e9:8f:ce:34:fc:64:70:e0:c8:62:7e:b5:
cc:33:1b:c8:c5:c0:16:1b:30:10:ee:9f:1b:56:2b:db:16:17:
23:c1:af:c8:73:fa:87:5d:b0:72:0c:be:a2:62:67:38:58:8c:
18:3d:6c:db:97:35:c7:64:10:1a:73:28:cc:57:b7:fa:07:cd:
5c:f4:02:cb:a0:06:06:50:7c:0e:71:8c:00:cc:89:44:4c:ca:
47:c5:19:bb:f8:19:64:f5:7d:af:76:b6:5e:8b:f4:d0:99:94:
de:6f:97:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:19 2026 by rpki-client