
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10602/soKUj5utSjKPindnDWuwnDyh6qY.roa
File: soKUj5utSjKPindnDWuwnDyh6qY.roa (raw, json)
Hash identifier: suYiiscgG9zv6qrT7aGawFsQvXf+zLb3YM+g09hUG1o=
Subject key identifier: B2:82:94:8F:9B:AD:4A:32:8F:8A:77:67:0D:6B:B0:9C:3C:A1:EA:A6
Certificate issuer: /CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283
Certificate serial: 70
Authority key identifier: 28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/soKUj5utSjKPindnDWuwnDyh6qY.roa
Signing time: Tue 31 Mar 2026 07:37:43 +0000
ROA not before: Tue 31 Mar 2026 07:37:43 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 24295
IP address blocks: 122.200.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 23:16:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112 (0x70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283
Validity
Not Before: Mar 31 07:37:43 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=B282948F9BAD4A328F8A77670D6BB09C3CA1EAA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:26:2e:79:4d:1b:5f:bf:e6:9f:88:fc:a7:27:
b8:a4:c5:dd:9b:9f:82:07:ec:9d:46:12:4a:bd:d9:
c2:95:9e:67:a3:1c:c3:3a:e5:a2:98:2b:8f:60:ff:
be:bb:92:02:84:c3:55:fd:33:11:10:c5:77:f8:4b:
4e:a8:3a:90:eb:cf:84:e9:d9:3f:9d:0b:53:9d:a2:
84:70:c5:2c:a5:93:55:2e:ca:1f:53:59:e4:b3:8b:
fa:84:c8:5e:1d:e8:b5:b3:64:00:de:98:55:e0:91:
0b:d7:81:49:45:cc:3e:a6:3a:e7:b2:e3:5c:9f:63:
00:cd:47:40:7b:54:60:07:43:10:52:6a:fa:5d:06:
c3:89:dc:6b:69:a4:cf:e7:d2:6e:25:1e:b4:d8:b0:
33:a9:65:28:a5:08:b0:48:19:75:4a:46:58:0a:db:
38:95:55:6e:19:98:5a:70:a3:57:83:93:53:62:93:
52:3b:7e:80:da:06:5e:db:d1:da:d3:e8:7b:6c:eb:
bd:e6:40:68:57:5f:df:6b:60:76:6d:d5:50:5a:95:
4c:98:64:c1:7a:a0:18:26:26:01:3d:03:bb:21:76:
3e:68:6a:6a:d1:a8:45:11:7b:be:25:ed:86:d8:a7:
95:3f:bd:81:a5:32:76:af:00:28:7b:83:0c:1b:fa:
c6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:82:94:8F:9B:AD:4A:32:8F:8A:77:67:0D:6B:B0:9C:3C:A1:EA:A6
X509v3 Authority Key Identifier:
keyid:28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/soKUj5utSjKPindnDWuwnDyh6qY.roa
sbgp-ipAddrBlock: critical
IPv4:
122.200.32.0/22
Signature Algorithm: sha256WithRSAEncryption
95:e8:c8:4e:79:fa:0d:d1:67:de:68:8c:3f:c1:b0:9b:f4:a4:
b3:59:b3:18:25:08:f5:e9:fb:66:76:08:b0:0b:0c:bf:5a:ee:
fb:94:c8:c8:a6:c1:18:ed:fe:e9:43:9b:b5:47:65:f5:51:96:
fa:24:29:16:f8:a6:e4:f7:7c:e9:9a:25:6b:82:c1:54:2f:c7:
94:e7:22:ab:61:34:cf:f6:f4:52:a2:0d:fc:6a:61:7f:7b:83:
60:cd:5e:16:9a:ba:88:61:8e:a4:07:2a:1d:87:02:ee:3e:22:
4a:bd:55:ac:45:d3:43:7e:66:50:b4:03:e3:f5:38:95:52:69:
99:28:7a:26:2d:b9:71:c4:10:d0:8f:32:8d:96:2d:6d:51:2e:
4d:f2:03:8a:3e:90:5f:fc:60:cf:e3:d9:1a:f0:94:f3:a8:5e:
f6:66:df:f0:eb:a4:b8:c1:f8:ab:be:8e:3e:93:03:33:4c:1a:
c5:73:25:e8:3c:be:71:21:6b:be:33:a5:af:d9:eb:d6:81:fb:
87:15:50:27:8c:52:aa:17:72:1c:19:d6:fa:e8:1c:8d:52:44:
47:c6:71:39:0d:a9:c3:93:cc:64:28:74:65:7b:f6:75:67:ae:
64:bd:c8:47:90:91:95:c9:65:c6:41:7b:03:4a:68:de:07:b7:
9e:e3:ee:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 02:20:34 2026 by rpki-client