
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10602/S9Ul_D5iB9rzhkLr6S--5zn0mPs.roa
File: S9Ul_D5iB9rzhkLr6S--5zn0mPs.roa (raw, json)
Hash identifier: lyqwYRg0bXZPVYPBSyq+XKb8Cg5QegMWUS2a/3Ye1PU=
Subject key identifier: 4B:D5:25:FC:3E:62:07:DA:F3:86:42:EB:E9:2F:BE:E7:39:F4:98:FB
Certificate issuer: /CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283
Certificate serial: 73
Authority key identifier: 28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/S9Ul_D5iB9rzhkLr6S--5zn0mPs.roa
Signing time: Tue 31 Mar 2026 07:37:44 +0000
ROA not before: Tue 31 Mar 2026 07:37:44 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 24295
IP address blocks: 122.255.76.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 23:16:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115 (0x73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283
Validity
Not Before: Mar 31 07:37:44 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=4BD525FC3E6207DAF38642EBE92FBEE739F498FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:30:26:e5:f8:67:76:f5:0b:69:56:79:13:36:
be:5b:c8:1c:45:be:55:3c:45:4d:35:fe:33:14:76:
30:27:6f:73:6a:84:ae:d3:d1:1a:3e:7b:dd:f9:1d:
e8:ec:25:c5:47:ca:87:58:81:a5:4a:51:2e:cc:40:
d2:88:ba:98:13:16:cd:9e:7b:31:08:28:22:40:0a:
09:2d:3d:84:6c:03:84:f6:d3:48:d5:71:85:74:ec:
bc:54:6a:d0:a0:0f:9c:24:67:21:c2:ff:26:1c:3f:
47:f8:d9:70:bd:ce:d8:20:ad:31:06:4f:68:14:aa:
16:e2:ca:28:15:18:eb:a7:2c:dc:53:fc:d5:bc:64:
35:c4:77:c9:1d:b5:48:16:ac:89:a2:db:f1:ac:53:
28:d2:ae:68:c8:87:b0:4e:21:30:3b:c6:10:f7:2c:
29:ac:3d:d0:ea:e7:69:64:76:90:40:23:b6:5a:35:
00:2b:8f:d2:d4:45:4b:81:35:e3:5f:de:34:26:1c:
d9:11:c8:37:64:58:72:9e:3e:04:92:b9:97:8e:ab:
bb:17:29:cf:37:d8:88:fc:6f:1c:ad:7c:e1:9f:54:
ee:c8:00:df:c2:cf:9b:aa:44:62:59:94:09:fa:81:
09:37:8d:42:78:6e:d7:ff:ee:5c:d3:e5:61:01:e1:
9e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D5:25:FC:3E:62:07:DA:F3:86:42:EB:E9:2F:BE:E7:39:F4:98:FB
X509v3 Authority Key Identifier:
keyid:28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/S9Ul_D5iB9rzhkLr6S--5zn0mPs.roa
sbgp-ipAddrBlock: critical
IPv4:
122.255.76.0/22
Signature Algorithm: sha256WithRSAEncryption
30:e8:39:bd:e7:a7:3d:62:d7:ce:e7:c6:1e:fe:ea:83:7b:ae:
67:ee:05:3c:f6:5d:59:3c:cb:41:a9:e9:49:ef:a7:6b:3e:85:
45:05:bd:87:19:9c:b1:d1:c1:5c:b0:7d:ac:54:2b:27:53:14:
9e:a2:90:e9:24:08:f3:97:74:b5:1a:91:bb:d4:e4:f0:93:76:
70:84:d8:fe:38:c8:1e:fc:eb:7e:42:e8:04:75:10:ad:00:d0:
5a:e2:12:4d:4d:88:c3:d4:29:eb:b8:cf:bb:19:2c:04:87:5d:
d2:68:2c:0b:5e:5c:c8:b2:44:5f:2e:ea:69:c4:59:34:b5:32:
92:5c:11:b0:95:86:c5:81:04:4f:3d:58:91:f5:bb:08:e5:cf:
dd:29:5a:90:54:c6:74:28:aa:9c:09:e0:5a:f1:58:a9:de:0e:
fd:42:03:68:4c:77:97:ac:e1:6b:90:d6:22:1b:02:28:72:7c:
97:fc:5a:aa:d6:34:26:50:52:89:36:6e:bf:16:08:dc:1e:84:
6c:9a:7a:cb:55:57:e1:f4:16:b5:f5:44:c3:63:d1:15:4d:a5:
d3:e4:fa:4f:c5:30:2e:59:ee:68:23:79:b6:57:2f:b1:6c:22:
81:99:45:40:03:87:7e:b8:db:79:79:2e:4b:f9:1f:af:25:c9:
2e:e4:a2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 02:20:34 2026 by rpki-client