
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20058/kxTuUPNrumD4AcA6xlS2ji6rxyI.roa
File: kxTuUPNrumD4AcA6xlS2ji6rxyI.roa (raw, json)
Hash identifier: lYLKwrlMcIkEbWoCJuZPQx68mSDsc1lgUJJhuVHaDiQ=
Subject key identifier: 93:14:EE:50:F3:6B:BA:60:F8:01:C0:3A:C6:54:B6:8E:2E:AB:C7:22
Certificate issuer: /CN=E756D9A5CE9ACAC978360011F7A7CFC430181D53
Certificate serial: 33
Authority key identifier: E7:56:D9:A5:CE:9A:CA:C9:78:36:00:11:F7:A7:CF:C4:30:18:1D:53
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51bZpc6aysl4NgAR96fPxDAYHVM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/kxTuUPNrumD4AcA6xlS2ji6rxyI.roa
Signing time: Tue 31 Mar 2026 08:36:29 +0000
ROA not before: Tue 31 Mar 2026 08:36:29 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 24229
IP address blocks: 202.126.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/51bZpc6aysl4NgAR96fPxDAYHVM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/51bZpc6aysl4NgAR96fPxDAYHVM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51bZpc6aysl4NgAR96fPxDAYHVM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 13:54:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E756D9A5CE9ACAC978360011F7A7CFC430181D53
Validity
Not Before: Mar 31 08:36:29 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=9314EE50F36BBA60F801C03AC654B68E2EABC722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:30:d7:a3:1f:45:66:3c:47:ac:6e:6a:f4:37:
4e:3b:62:a4:83:83:34:59:d8:07:36:5c:94:87:20:
96:3b:26:9b:f7:fe:f6:a2:72:7d:2c:87:1c:1f:9c:
6f:98:61:69:f7:17:68:60:e5:b6:b6:dc:b1:36:66:
97:09:7e:db:4c:39:3f:4e:a1:68:e3:24:7b:67:ee:
0c:78:3f:25:38:c5:20:7f:57:f6:8f:d3:42:56:dc:
f6:19:87:dc:04:d0:d0:cd:40:13:c5:72:95:a0:2e:
b8:59:ad:85:4e:cc:a6:9f:59:b3:25:73:ed:2f:70:
df:e4:42:f1:8d:5a:35:2d:58:99:8c:39:ce:53:5a:
3b:89:a0:4c:dd:ef:15:78:b6:c8:84:4f:27:1c:91:
a5:67:13:20:9c:c4:c4:c9:29:47:8c:59:2d:ba:d5:
01:d2:39:ec:05:34:10:a6:ee:9b:d9:b7:b0:c7:6d:
0d:f4:bd:c5:17:a2:51:cf:81:1a:d8:e4:1c:36:88:
75:10:34:dd:84:b8:52:43:ea:58:a2:16:dd:7a:01:
c2:cb:ad:54:89:ea:51:86:48:46:49:5b:a4:a5:ee:
d2:9d:10:64:35:ac:9a:d2:a1:bb:fe:b7:d1:64:05:
65:c2:0d:09:8f:04:60:c3:cd:15:8e:4a:6c:ea:c8:
61:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:14:EE:50:F3:6B:BA:60:F8:01:C0:3A:C6:54:B6:8E:2E:AB:C7:22
X509v3 Authority Key Identifier:
keyid:E7:56:D9:A5:CE:9A:CA:C9:78:36:00:11:F7:A7:CF:C4:30:18:1D:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/51bZpc6aysl4NgAR96fPxDAYHVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51bZpc6aysl4NgAR96fPxDAYHVM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/kxTuUPNrumD4AcA6xlS2ji6rxyI.roa
sbgp-ipAddrBlock: critical
IPv4:
202.126.16.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:f2:3b:5e:40:68:82:1b:51:24:33:f9:a6:f8:09:89:21:f7:
f7:34:92:04:72:f4:67:cb:c5:68:51:cd:20:af:19:77:15:37:
e9:30:05:97:46:78:d3:7d:90:17:e7:21:11:64:52:16:b7:ae:
1d:ba:e5:da:73:f4:0d:6b:b4:39:4b:e3:14:01:56:30:38:90:
8f:5e:2f:7f:38:64:6c:7f:5d:b8:3d:ab:ca:7c:20:57:60:80:
ce:5f:4a:23:eb:84:9f:1b:9d:1d:bc:06:25:07:4b:ea:52:1c:
f2:4e:fc:25:79:b0:00:ae:14:42:55:0a:87:6a:2f:9e:ff:74:
f7:63:58:2b:60:43:d0:38:4f:76:ae:45:9d:c2:d4:c4:7c:ad:
b4:0b:44:bb:57:3b:9a:7d:77:cf:a6:a1:8b:a7:ba:22:f7:a4:
22:d8:c6:49:0e:4b:3d:b7:32:ca:82:a2:ea:7b:74:ce:ab:0a:
80:8c:ad:7a:6f:ad:78:36:14:cf:58:b1:02:d9:78:5e:53:4c:
9c:64:0f:b0:f3:24:fe:06:33:3a:34:7a:7b:30:6c:5e:a6:50:
61:9d:eb:75:01:06:92:4d:29:40:c6:d5:51:ec:45:91:8f:83:
79:e4:be:7f:ce:97:1a:48:67:80:f5:23:bd:2b:52:12:c9:ec:
08:29:95:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 16:04:26 2026 by rpki-client