
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1203/VFyPFGluoJVgVQ0tESNOpeQZxRU.roa
File: VFyPFGluoJVgVQ0tESNOpeQZxRU.roa (raw, json)
Hash identifier: oU+75THyn5mTmFHrmrCJYuEqunCuuhWDxFNqHvWVg/E=
Subject key identifier: 54:5C:8F:14:69:6E:A0:95:60:55:0D:2D:11:23:4E:A5:E4:19:C5:15
Certificate issuer: /CN=85A6C369C1A9C7A52C3E3805727A5FD31185A773
Certificate serial: 24
Authority key identifier: 85:A6:C3:69:C1:A9:C7:A5:2C:3E:38:05:72:7A:5F:D3:11:85:A7:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/habDacGpx6UsPjgFcnpf0xGFp3M.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/VFyPFGluoJVgVQ0tESNOpeQZxRU.roa
Signing time: Tue 31 Mar 2026 08:43:53 +0000
ROA not before: Tue 31 Mar 2026 08:43:53 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4694
IP address blocks: 154.34.64.0/18 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/habDacGpx6UsPjgFcnpf0xGFp3M.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/habDacGpx6UsPjgFcnpf0xGFp3M.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/habDacGpx6UsPjgFcnpf0xGFp3M.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yMD7hwR0w-hMq4NZfEaoYsR_iII.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yMD7hwR0w-hMq4NZfEaoYsR_iII.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yMD7hwR0w-hMq4NZfEaoYsR_iII.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85A6C369C1A9C7A52C3E3805727A5FD31185A773
Validity
Not Before: Mar 31 08:43:53 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=545C8F14696EA09560550D2D11234EA5E419C515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e1:4c:5e:84:3e:39:df:6f:a6:c0:6f:16:13:
ba:03:8c:fd:69:a6:a2:9b:ce:30:4e:b0:3e:7c:f7:
40:46:f9:69:e8:d9:17:30:95:7d:dc:dd:eb:ae:4e:
2b:87:45:7c:48:e5:01:2f:e9:d1:74:32:dd:3a:33:
db:1f:e6:01:27:b5:11:12:2a:8f:9f:c4:da:3c:9b:
11:31:71:35:48:5e:3d:cd:de:18:7e:69:33:9c:28:
20:bd:10:a9:33:ac:3e:93:e6:87:03:f6:b8:e7:9f:
4a:94:eb:62:e7:b8:9d:07:42:62:52:85:d2:68:1d:
73:bf:58:89:e3:a6:60:79:5e:d6:2e:9a:77:9d:2c:
d1:24:5a:3f:a7:84:ec:4e:14:7c:d8:15:78:16:18:
5c:a7:af:59:a4:bb:a2:76:99:c2:b1:8c:1e:28:75:
db:d6:0e:cb:a0:87:69:df:cc:30:4a:6e:c0:87:a9:
a0:8a:95:99:74:96:18:87:7a:32:21:86:37:d0:f7:
a3:d1:9b:7d:f2:d2:b1:a5:f1:81:62:95:ef:97:48:
85:93:d5:54:fc:39:3c:71:92:23:0b:8c:c5:e2:aa:
2f:a4:a5:9b:32:c6:b1:01:09:47:67:75:a1:ba:cf:
7a:04:1b:6d:6b:03:8f:64:55:b9:ec:1b:55:fa:3b:
ca:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5C:8F:14:69:6E:A0:95:60:55:0D:2D:11:23:4E:A5:E4:19:C5:15
X509v3 Authority Key Identifier:
keyid:85:A6:C3:69:C1:A9:C7:A5:2C:3E:38:05:72:7A:5F:D3:11:85:A7:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/habDacGpx6UsPjgFcnpf0xGFp3M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/habDacGpx6UsPjgFcnpf0xGFp3M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/VFyPFGluoJVgVQ0tESNOpeQZxRU.roa
sbgp-ipAddrBlock: critical
IPv4:
154.34.64.0/18
Signature Algorithm: sha256WithRSAEncryption
51:a5:21:bf:fe:69:44:a7:f2:02:39:0f:38:10:6b:71:7c:fa:
4a:31:ad:4d:85:b5:2b:c8:da:70:42:17:b9:6b:9e:3b:2b:7e:
30:ac:98:6f:c4:13:be:73:ae:ad:1d:e3:33:2a:d9:fa:ec:a8:
f7:71:93:8b:59:39:0b:9f:06:c9:7d:6a:0d:60:39:44:fe:e9:
21:dd:b1:ea:57:98:56:c0:8f:d1:9e:ab:de:c6:08:14:bd:f7:
41:f0:c8:6e:be:e4:22:db:98:d7:09:4c:58:ec:c8:a1:41:6b:
68:33:bc:ef:8c:b1:7b:b1:60:78:8f:f5:f0:bd:c8:42:e9:ee:
50:20:ce:d3:2a:7a:4e:c9:cb:84:df:46:13:95:ef:56:91:a0:
9d:73:cc:6e:34:6a:27:f0:de:a9:e5:8a:d3:e5:c5:45:a9:44:
03:3b:2f:7d:24:9f:8c:32:29:d0:2a:99:83:5b:3c:7b:ea:6a:
70:4d:fc:15:0a:d3:80:e9:b8:98:1d:13:9a:46:0a:63:72:82:
e8:00:93:30:48:e5:56:09:16:eb:76:b5:83:47:32:8b:70:7f:
b4:92:d2:cf:05:57:ef:63:bd:3f:df:60:79:ee:4c:19:96:e1:
28:e8:8b:b8:c0:9b:1b:59:e2:0f:34:ca:6d:71:ff:51:77:66:
c8:0c:40:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 13:58:43 2026 by rpki-client