
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9997/OHn0dDrgTKSQTBa6w1hpLZX0zCs.roa
File: OHn0dDrgTKSQTBa6w1hpLZX0zCs.roa (raw, json)
Hash identifier: h91vrOIkLmqmz474HrFrFnHmTGm+u9OYzEimi3VKMKc=
Subject key identifier: 38:79:F4:74:3A:E0:4C:A4:90:4C:16:BA:C3:58:69:2D:95:F4:CC:2B
Certificate issuer: /CN=A935D5AD33DC630C4611987140F5E468B7081D11
Certificate serial: 72
Authority key identifier: A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/OHn0dDrgTKSQTBa6w1hpLZX0zCs.roa
Signing time: Tue 31 Mar 2026 07:33:19 +0000
ROA not before: Tue 31 Mar 2026 07:33:19 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 131971
IP address blocks: 202.1.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114 (0x72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A935D5AD33DC630C4611987140F5E468B7081D11
Validity
Not Before: Mar 31 07:33:19 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=3879F4743AE04CA4904C16BAC358692D95F4CC2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3b:36:a8:7a:e8:dd:fa:fb:b9:c7:a5:c3:e9:
23:fd:5a:f4:fd:5a:c3:e0:0d:45:7c:a6:25:6b:55:
63:2a:d0:42:cf:af:0d:19:74:e1:21:52:76:28:69:
8c:d5:6b:bc:76:b0:b0:5a:fd:d5:8b:9c:8f:ac:97:
4b:02:1a:89:97:fa:6f:d4:05:77:e4:c7:db:e3:4c:
de:68:06:37:49:b3:cf:70:ed:6c:15:59:02:08:a5:
d8:39:3a:92:3d:1e:71:40:7f:70:11:2e:bb:84:5d:
a9:19:8a:8a:57:0a:9c:e5:bf:59:a3:bb:fc:1d:90:
e4:4f:b8:cc:51:4e:17:6e:61:3f:8e:f4:fb:72:19:
33:97:14:85:3c:72:23:24:d7:2d:68:c5:db:cb:30:
24:df:7a:38:75:8b:8c:5b:19:1a:c3:c0:1e:5d:3d:
b0:e4:ae:f3:64:cf:7c:20:7a:59:4f:13:0f:96:f2:
f5:3e:41:f2:4f:09:e3:d0:dd:1b:bf:b5:0c:48:5a:
8f:3d:5c:69:9b:7e:f1:bd:fe:0a:56:56:04:b1:dd:
58:4a:ee:76:b8:34:2f:08:6b:ad:4e:e3:10:c9:37:
e9:5e:48:74:c3:ec:a9:0d:77:66:a9:7a:4c:02:22:
ca:b6:1d:6d:1e:f8:b7:19:04:ec:c9:27:82:b5:2d:
96:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:79:F4:74:3A:E0:4C:A4:90:4C:16:BA:C3:58:69:2D:95:F4:CC:2B
X509v3 Authority Key Identifier:
keyid:A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/OHn0dDrgTKSQTBa6w1hpLZX0zCs.roa
sbgp-ipAddrBlock: critical
IPv4:
202.1.212.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:91:00:bf:77:ab:85:f1:87:26:3d:84:f2:0b:f8:6f:59:ff:
7b:6d:b5:32:cd:df:a9:b6:3c:a3:c5:70:a3:92:50:6e:63:63:
e3:23:de:81:52:36:7d:ca:8b:42:f9:8f:ad:65:0b:64:93:6d:
8d:5f:05:96:39:fa:da:4d:af:d9:9c:60:6e:a7:98:53:a1:30:
ed:fb:80:2f:42:c8:ac:25:9d:10:88:17:cb:1c:77:b4:3e:4c:
a7:6f:86:0d:8f:de:c7:b8:6d:26:0c:ee:1b:2f:3e:19:91:fd:
2c:4e:ab:b4:05:ac:97:c3:e4:1d:1c:fa:3a:04:23:9e:fd:a1:
ae:2c:14:b8:ff:b2:bd:89:08:f7:e1:d6:5b:f7:cc:89:b1:25:
ed:31:ab:1e:6d:fd:2f:62:2d:56:b9:9c:4c:fc:d6:bc:70:e6:
80:aa:29:1a:f0:8b:25:3e:c1:5f:db:fe:95:ab:a8:97:a4:ee:
24:7b:25:f6:8d:93:db:c0:7c:20:31:d0:c5:69:9c:1e:bd:7c:
e7:ce:7a:0c:36:ef:39:a0:5a:20:45:d4:84:02:2b:66:64:2c:
dc:ea:29:a0:50:39:63:d8:2f:ee:07:ba:fe:5b:13:15:75:5c:
d7:9a:a6:be:1a:ba:00:23:9d:f9:b1:4e:71:fb:aa:69:d4:df:
14:05:c1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:03:23 2026 by rpki-client