
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/1ErHb_aRpwlwWYB1wpo_bPLwMrU.roa
File: 1ErHb_aRpwlwWYB1wpo_bPLwMrU.roa (raw, json)
Hash identifier: UT6+yXQSshyv9lYGu45F8hZVREcSSEzLoFsctKq3FVY=
Subject key identifier: D4:4A:C7:6F:F6:91:A7:09:70:59:80:75:C2:9A:3F:6C:F2:F0:32:B5
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: 01D3
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/1ErHb_aRpwlwWYB1wpo_bPLwMrU.roa
Signing time: Tue 31 Mar 2026 07:54:12 +0000
ROA not before: Tue 31 Mar 2026 07:54:12 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4694
IP address blocks: 211.133.128.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 467 (0x1d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Mar 31 07:54:12 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=D44AC76FF691A70970598075C29A3F6CF2F032B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:58:31:71:4d:bc:2f:40:37:94:0f:8b:21:0e:
80:98:c9:a7:c5:0e:43:de:f5:f3:21:92:85:d9:83:
c4:50:14:8b:49:5a:db:9d:d9:54:4d:3a:d3:69:5f:
5e:3e:03:3e:50:27:b9:14:a1:08:78:6a:aa:94:e0:
a3:74:c8:1f:da:ef:b5:03:ee:2c:1a:b8:2c:fe:1e:
f1:d8:fc:b3:f3:cb:af:ef:c0:5c:a2:c0:37:a3:91:
64:96:d6:16:48:78:be:80:eb:81:28:e2:60:4b:5b:
c4:b6:8b:31:de:4f:94:51:95:1f:80:2f:36:13:d9:
fb:a0:d1:30:0b:b6:d0:a4:c7:05:46:8b:35:20:2e:
23:1a:64:05:ba:f4:ec:03:11:6e:c8:ed:e9:3e:63:
32:f7:96:04:86:0e:60:48:4c:08:a7:c4:95:26:0b:
6a:4e:71:e6:54:93:7b:37:1f:44:90:4c:b7:d3:e5:
bd:1c:6d:30:ec:d7:0d:f8:ed:88:04:16:d8:51:ce:
e6:b3:ec:09:f6:4d:93:fd:a3:24:52:23:1c:8b:34:
69:7b:99:61:21:d6:03:f4:f0:45:2e:a8:ae:81:b2:
1d:08:98:9c:e7:57:b3:e3:c9:fb:85:45:cf:33:40:
74:8f:23:32:d6:89:35:d1:a4:da:64:9d:c3:85:37:
a1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4A:C7:6F:F6:91:A7:09:70:59:80:75:C2:9A:3F:6C:F2:F0:32:B5
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/1ErHb_aRpwlwWYB1wpo_bPLwMrU.roa
sbgp-ipAddrBlock: critical
IPv4:
211.133.128.0/20
Signature Algorithm: sha256WithRSAEncryption
c5:a8:70:94:bc:d4:98:16:8d:8f:cf:37:d9:9a:6e:d6:8d:91:
0f:76:32:7a:bf:08:79:e4:2c:f3:c2:b4:96:52:73:9d:3b:43:
27:68:64:cd:04:2d:12:4c:9c:2c:4c:13:8a:8d:33:fa:ed:78:
6e:86:d0:87:7c:46:16:2c:5d:d8:53:3e:e8:97:88:41:de:63:
0d:06:e4:6d:57:e8:8a:c0:60:5c:0d:86:af:23:88:0d:5b:9c:
90:27:27:02:a2:6c:b0:2a:f5:67:aa:4d:1f:ad:db:0f:8f:18:
aa:dc:71:d9:20:00:7a:37:0b:3f:41:df:ed:01:62:07:ae:87:
04:8d:f1:22:68:94:6c:cc:51:e1:e3:e1:e7:97:15:0d:98:b8:
f5:4a:9c:68:7b:e0:54:2b:ec:78:ff:7c:3c:1c:fd:7a:60:03:
6e:61:1c:76:a9:ca:00:3d:1e:98:bf:11:16:21:ef:54:c9:13:
76:7f:c2:e7:4c:75:1e:38:9d:8f:df:57:28:e9:1c:99:c4:9a:
78:e7:da:9e:e4:8e:e5:1b:7e:1c:88:5b:5e:ac:df:c2:ef:06:
89:5f:7f:06:c7:d1:80:f2:65:0a:63:80:b6:fc:3c:b7:fc:0d:
7e:1d:0d:70:c0:69:56:ee:fc:74:2c:08:9f:39:dc:7f:4d:87:
96:e8:ab:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:57:42 2026 by rpki-client