
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9997/y8UnMUxhgVKnv7_CMjd-n0dr1hY.roa
File: y8UnMUxhgVKnv7_CMjd-n0dr1hY.roa (raw, json)
Hash identifier: T31vwqPEqq3KqGSXnQrjf+1ArlIQ9t5ETo4C+2N+BgE=
Subject key identifier: CB:C5:27:31:4C:61:81:52:A7:BF:BF:C2:32:37:7E:9F:47:6B:D6:16
Certificate issuer: /CN=A935D5AD33DC630C4611987140F5E468B7081D11
Certificate serial: 77
Authority key identifier: A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/y8UnMUxhgVKnv7_CMjd-n0dr1hY.roa
Signing time: Tue 31 Mar 2026 07:33:21 +0000
ROA not before: Tue 31 Mar 2026 07:33:21 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2515
IP address blocks: 211.120.240.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119 (0x77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A935D5AD33DC630C4611987140F5E468B7081D11
Validity
Not Before: Mar 31 07:33:21 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=CBC527314C618152A7BFBFC232377E9F476BD616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:46:8b:f4:65:dd:ae:64:47:89:8a:5f:46:33:
ac:d3:a1:18:64:a0:a6:61:c5:6e:b1:ea:87:a0:d0:
f3:24:4d:d4:ea:ee:a9:7e:9b:1d:f7:f6:1a:76:a7:
3b:05:96:fd:00:d5:33:45:b6:bf:3f:2a:14:a9:2d:
dc:cb:fa:23:96:12:a8:02:1b:ab:27:46:62:e1:4d:
77:75:2b:ec:d4:eb:7c:24:ca:23:3d:a0:3f:51:51:
3f:15:e2:7e:86:57:ed:fb:db:4f:38:c9:40:15:12:
91:9e:81:50:3c:c8:cb:90:27:fc:a1:ed:5d:5b:30:
d4:9b:66:3b:19:d8:7d:44:3c:aa:eb:db:c6:d3:86:
f9:84:08:b3:98:94:12:56:6f:f1:d7:d8:cc:c9:53:
38:13:b4:50:54:b8:fd:88:de:13:47:c8:e3:86:b7:
9c:d9:d4:90:eb:8c:29:56:5f:7a:b6:67:2c:e4:bd:
0b:fb:ac:d3:1d:45:ce:a6:5b:23:bc:06:c8:fa:16:
ae:f3:b0:47:5b:9c:c5:d9:c6:f1:8e:c1:c3:c7:7d:
67:7b:13:d6:80:b2:18:51:e0:49:3a:14:ec:e2:cb:
d4:06:66:7c:47:47:19:17:1c:e5:2c:fb:66:60:f3:
a3:4c:50:7a:af:d1:62:8a:aa:b7:c7:e4:a4:92:c2:
69:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C5:27:31:4C:61:81:52:A7:BF:BF:C2:32:37:7E:9F:47:6B:D6:16
X509v3 Authority Key Identifier:
keyid:A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/y8UnMUxhgVKnv7_CMjd-n0dr1hY.roa
sbgp-ipAddrBlock: critical
IPv4:
211.120.240.0/21
Signature Algorithm: sha256WithRSAEncryption
b0:a8:c0:0f:67:e5:a5:ce:10:ad:2d:92:50:34:e3:cc:00:35:
60:60:d0:fc:10:c4:65:33:d2:ef:f2:8d:9a:1b:7e:5c:e8:b4:
d2:d3:a4:5c:0f:83:d2:f4:93:ff:76:13:42:4d:3d:3a:d5:40:
ac:f2:99:6d:8a:b8:2e:80:a9:9b:ef:ba:c6:f1:76:1b:ee:79:
0c:82:f4:a6:74:1f:01:65:8b:83:c5:84:b0:79:c3:9e:7e:09:
bb:70:ac:62:40:d5:df:d2:b2:19:e2:83:a0:06:be:2b:a1:0f:
2f:3f:3c:cc:46:99:9c:f6:79:f9:c0:1b:83:6f:71:41:36:ef:
f8:0e:3f:57:bd:1e:b1:13:13:a8:79:3b:09:a7:9f:a2:57:7d:
2b:97:b6:e7:e1:e6:d2:fc:23:4a:52:19:8b:b0:61:7c:bf:85:
79:03:ca:eb:78:bc:90:ff:56:35:be:98:c1:b8:32:68:ff:a6:
de:02:17:68:cc:f4:76:da:01:78:07:77:fe:6c:d0:5f:9d:72:
a0:ea:17:e1:f4:e6:05:bf:d9:3e:e8:ae:ab:c6:1f:8b:49:02:
c8:c0:19:93:89:4f:d2:46:79:f5:50:17:38:08:4e:f9:fa:25:
85:fc:f6:0a:1a:7d:2f:35:e5:53:96:fd:e8:47:38:25:da:76:
b0:5b:72:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:38 2026 by rpki-client