
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/RK5XC08T2dHFgzvRrBM42Tng3-0.roa
File: RK5XC08T2dHFgzvRrBM42Tng3-0.roa (raw, json)
Hash identifier: PHoGjym9lacpXps7u6duFn+1Mz5ZM85MTYBb8Uya3SU=
Subject key identifier: 44:AE:57:0B:4F:13:D9:D1:C5:83:3B:D1:AC:13:38:D9:39:E0:DF:ED
Certificate issuer: /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial: B0
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/RK5XC08T2dHFgzvRrBM42Tng3-0.roa
Signing time: Tue 31 Mar 2026 07:52:36 +0000
ROA not before: Tue 31 Mar 2026 07:52:36 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 15830
IP address blocks: 203.191.224.0/19 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 22:23:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176 (0xb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Validity
Not Before: Mar 31 07:52:36 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=44AE570B4F13D9D1C5833BD1AC1338D939E0DFED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c5:ec:fd:1c:1a:0d:ff:5f:3e:4c:82:64:71:
3c:89:15:e2:cf:0f:b9:96:30:89:9a:9e:3c:a3:f4:
62:f0:99:01:8c:46:da:47:79:c4:65:85:29:bf:f4:
f2:9c:94:0e:b6:49:27:0f:ad:fc:35:e4:e0:da:89:
78:44:5b:0f:8d:df:17:cc:92:ee:22:09:cb:d5:89:
89:9e:03:cd:cc:0f:b4:9d:58:51:10:0f:5f:4c:f9:
38:70:1a:bf:20:34:9e:96:17:3c:27:d9:4f:46:07:
bc:b4:f6:cf:29:84:83:44:a4:47:bb:37:c2:1e:82:
55:25:64:73:bb:c8:16:00:2b:11:bb:9b:96:6e:aa:
c2:d8:7c:e3:53:46:1d:4c:77:8a:df:6d:e0:8b:8a:
b1:35:09:0f:18:d2:5d:ea:d7:cd:9d:bf:61:13:b1:
72:94:60:28:7f:47:59:14:f2:ec:ff:ba:4b:7d:32:
27:81:5e:d7:a8:15:25:d0:e7:09:04:07:dc:3f:30:
be:e8:cc:9e:72:b1:2c:ad:5d:2c:04:c7:45:28:99:
24:88:ec:d0:e5:1a:60:a3:8f:9d:9b:2f:ca:38:77:
9c:83:3c:c0:a5:16:13:94:0c:96:ce:30:82:67:36:
90:36:50:4e:9d:bc:61:d2:43:32:07:d7:55:93:f8:
07:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:AE:57:0B:4F:13:D9:D1:C5:83:3B:D1:AC:13:38:D9:39:E0:DF:ED
X509v3 Authority Key Identifier:
keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/RK5XC08T2dHFgzvRrBM42Tng3-0.roa
sbgp-ipAddrBlock: critical
IPv4:
203.191.224.0/19
Signature Algorithm: sha256WithRSAEncryption
0a:3b:38:ae:c8:28:54:91:19:bd:82:f7:0b:f1:fb:41:b0:51:
ac:12:34:4c:96:2a:ef:98:56:17:b5:e5:e9:81:0c:58:ca:f6:
30:0b:84:15:d5:ed:99:ed:79:72:00:9b:30:18:32:60:4a:16:
46:0e:62:e3:de:30:8a:32:68:b2:75:5a:2c:75:7a:4a:b4:e1:
7b:9d:20:9b:11:cd:7a:22:ce:76:f5:bb:25:c2:4a:e1:99:4f:
d3:9c:0b:89:ed:38:16:bb:a6:13:6f:84:35:81:63:9d:82:91:
92:fc:b6:2e:4d:38:af:3e:64:36:82:17:35:a7:71:3a:c0:e4:
18:7a:f8:13:00:90:bd:d0:a5:fb:ac:52:c5:dd:b0:4a:ee:31:
d2:42:8b:fa:1a:5c:ef:ee:e2:f5:45:07:d2:34:27:16:43:07:
80:50:77:f9:52:f3:05:f8:7e:1c:ac:9f:98:45:69:46:3c:fe:
31:8c:4a:2e:76:3f:da:23:8f:38:fb:d1:1e:74:47:19:d5:1d:
e8:9a:27:8d:3d:5a:eb:f4:4c:21:ac:ff:c2:37:be:8e:da:50:
6a:4b:f6:a3:63:a4:24:12:f1:f7:dd:c2:15:fb:a1:77:3c:09:
62:73:94:87:8a:0d:9f:8e:ac:97:b4:cd:21:5e:c1:3e:53:e9:
eb:6f:60:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:57:17 2026 by rpki-client