
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/1YBkJl8Yz23cQ4HZLsIeQ1GnwME.roa
File: 1YBkJl8Yz23cQ4HZLsIeQ1GnwME.roa (raw, json)
Hash identifier: vIiAyVwYDuJ6j20xhy+AybArgp1egF/incmCDLOprs0=
Subject key identifier: D5:80:64:26:5F:18:CF:6D:DC:43:81:D9:2E:C2:1E:43:51:A7:C0:C1
Certificate issuer: /CN=A9415FE9377F3F4B8EA838C662C4BCD8DCFCF1BA
Certificate serial: 4F
Authority key identifier: A9:41:5F:E9:37:7F:3F:4B:8E:A8:38:C6:62:C4:BC:D8:DC:FC:F1:BA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qUFf6Td_P0uOqDjGYsS82Nz88bo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/1YBkJl8Yz23cQ4HZLsIeQ1GnwME.roa
Signing time: Tue 31 Mar 2026 07:52:51 +0000
ROA not before: Tue 31 Mar 2026 07:52:51 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4694
IP address blocks: 64.56.160.0/19 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/qUFf6Td_P0uOqDjGYsS82Nz88bo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/qUFf6Td_P0uOqDjGYsS82Nz88bo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qUFf6Td_P0uOqDjGYsS82Nz88bo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79 (0x4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9415FE9377F3F4B8EA838C662C4BCD8DCFCF1BA
Validity
Not Before: Mar 31 07:52:51 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=D58064265F18CF6DDC4381D92EC21E4351A7C0C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ae:68:fd:74:4b:77:df:0a:fc:a5:42:41:ba:
58:bf:82:f7:46:34:e4:67:60:3b:74:ac:f8:b8:c7:
15:b4:08:f0:21:3b:09:84:37:c2:5e:c1:d3:fb:57:
a4:42:8f:d6:4c:9a:a2:ef:db:b2:b3:6f:78:33:b1:
8d:ff:fd:fb:06:0b:02:0f:e0:47:7b:e4:02:a6:71:
a3:a9:81:3d:7d:4b:6e:18:8c:32:4d:fd:5d:4f:1e:
a6:32:ea:d0:52:1f:1d:08:d7:c8:df:c5:8a:9d:09:
97:0d:20:bf:eb:4d:83:38:2b:a2:89:cc:a7:ba:e6:
83:55:db:96:9e:be:a2:6a:f2:21:1f:99:04:8f:19:
e4:3f:f5:40:85:b4:32:e3:2a:19:d5:d8:de:ed:0d:
32:ea:32:7d:de:67:61:c2:9e:5a:d1:7e:0a:bf:a6:
3c:a0:0f:92:c5:5f:dd:27:8b:f4:a5:84:ac:1b:62:
64:f4:87:60:d8:45:61:0a:9f:b4:cf:c7:54:34:17:
7e:b5:6e:84:c2:8d:c9:a3:4d:23:28:64:fa:f2:c6:
a7:da:55:dd:55:64:14:62:c3:c1:d5:78:65:f6:0d:
66:a7:4b:82:64:c6:9a:5d:f7:71:28:c7:a6:8e:2a:
e5:ef:f5:33:e2:8b:14:fd:61:1f:b1:b0:aa:1c:87:
56:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:80:64:26:5F:18:CF:6D:DC:43:81:D9:2E:C2:1E:43:51:A7:C0:C1
X509v3 Authority Key Identifier:
keyid:A9:41:5F:E9:37:7F:3F:4B:8E:A8:38:C6:62:C4:BC:D8:DC:FC:F1:BA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/qUFf6Td_P0uOqDjGYsS82Nz88bo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qUFf6Td_P0uOqDjGYsS82Nz88bo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/1YBkJl8Yz23cQ4HZLsIeQ1GnwME.roa
sbgp-ipAddrBlock: critical
IPv4:
64.56.160.0/19
Signature Algorithm: sha256WithRSAEncryption
01:24:17:ca:31:f9:5c:11:6a:2c:ee:5e:91:ff:08:27:e1:45:
89:17:be:7c:16:f5:18:95:a8:9c:5e:e3:45:35:b3:98:50:1c:
a8:e4:d7:b8:38:b1:3c:e7:90:07:11:12:d2:af:59:d1:1d:98:
ed:07:93:8e:7d:2a:bf:97:df:43:25:54:5e:2c:66:27:22:7c:
57:0f:8c:1d:31:ac:d8:80:30:ee:bb:30:91:3a:25:20:d0:c0:
ad:bb:a6:9a:60:9c:d7:48:47:fb:83:5f:71:34:fa:41:d3:89:
67:ea:27:e3:e0:f3:0f:f2:fd:e6:fd:f6:79:95:7d:c5:47:b6:
a4:35:9e:4a:dd:bc:a2:dc:1f:0a:48:e0:15:1a:5a:ab:9d:5f:
a3:c6:8f:19:da:f7:53:38:25:95:55:ac:62:80:36:a9:26:b4:
2f:1c:fc:5d:60:b3:e9:f6:a5:5b:90:e3:11:38:31:f2:54:7e:
40:8e:7b:ce:fb:ed:3c:90:34:5c:5e:cf:60:7b:bb:3c:24:63:
c0:c4:16:b4:1e:6b:b9:ca:42:f5:82:b8:a5:0c:3d:f5:ae:57:
b4:5e:e9:bd:6d:d0:e2:d7:ca:57:fb:76:d5:1e:5f:38:82:fc:
a1:2e:7e:27:b9:e0:e9:fa:45:b0:0b:98:ab:12:c4:6e:16:1b:
ac:52:f1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 16:02:50 2026 by rpki-client