
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/28_zxpoSCMWfuUwacTktvqgX_5w.roa
File: 28_zxpoSCMWfuUwacTktvqgX_5w.roa (raw, json)
Hash identifier: 4kILdEoFmwFP64NxLHAQQFMJiDlEB3Xvq+N5Qy54+wY=
Subject key identifier: DB:CF:F3:C6:9A:12:08:C5:9F:B9:4C:1A:71:39:2D:BE:A8:17:FF:9C
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: 01A7
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/28_zxpoSCMWfuUwacTktvqgX_5w.roa
Signing time: Tue 31 Mar 2026 07:53:50 +0000
ROA not before: Tue 31 Mar 2026 07:53:50 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4694
IP address blocks: 210.239.76.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 423 (0x1a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Mar 31 07:53:50 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=DBCFF3C69A1208C59FB94C1A71392DBEA817FF9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a7:79:3e:29:a2:0a:4a:8b:ca:cd:33:ba:15:
9c:60:94:60:7e:6f:c5:a9:7a:a1:de:f9:09:99:c4:
93:3d:93:f0:7e:03:e7:76:a8:ef:23:bc:ec:9f:18:
61:c6:14:a1:f7:91:c1:27:8a:58:e7:07:be:f9:f5:
a3:76:13:6e:8c:2b:bf:8a:a6:c8:62:30:55:41:98:
1e:d5:ad:85:5a:1b:d3:51:ce:2c:cd:2a:d9:71:a0:
56:df:40:cb:ef:e0:3d:17:da:d7:77:88:96:77:1a:
b7:2c:5a:73:04:14:c0:f6:fd:a4:03:c0:b7:cc:fd:
1d:b6:cd:28:10:ba:ce:72:45:d4:91:59:e8:8c:34:
86:46:3a:1e:75:31:04:3c:a4:bf:a1:91:93:69:f6:
06:16:8c:ce:2c:58:c7:5d:a6:44:b3:41:5e:f2:6a:
65:81:9c:10:46:5b:1a:19:da:04:d0:05:c0:78:9f:
32:71:06:2d:9f:c5:91:d5:d7:21:3d:23:6c:4c:4f:
0b:b1:ae:93:f5:4d:31:d8:3b:2a:65:c2:59:8b:1c:
7d:50:91:5f:b7:47:d0:47:85:5a:64:3f:f8:ce:4c:
ef:07:3e:90:2b:22:61:e8:8f:d5:13:45:b2:e6:e4:
9f:34:5a:97:d5:2f:31:77:1d:63:63:c1:9c:0c:95:
4c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:CF:F3:C6:9A:12:08:C5:9F:B9:4C:1A:71:39:2D:BE:A8:17:FF:9C
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/28_zxpoSCMWfuUwacTktvqgX_5w.roa
sbgp-ipAddrBlock: critical
IPv4:
210.239.76.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:32:01:92:03:2e:2b:2e:f9:16:63:54:c9:c3:23:fb:33:a9:
da:f4:5a:6e:1b:f4:c8:ed:c0:ec:a3:09:db:a4:5c:2b:a7:e0:
da:ea:b1:13:86:81:22:e7:8a:ef:09:f9:f8:28:82:04:00:42:
e4:52:18:a5:ed:f4:a6:00:ab:04:d5:1d:b7:ea:00:3f:48:f8:
ab:fa:a9:f6:c8:7b:3d:9d:f6:6b:49:ba:46:0e:fe:5f:ee:31:
17:4e:f6:b9:f3:94:6f:13:df:bf:06:81:a2:94:28:00:48:d6:
cd:64:4c:ab:11:c2:da:8f:f4:fd:32:15:89:f6:8a:56:ed:e4:
78:8a:a3:d9:db:e5:fc:0f:17:ed:b6:01:34:cb:42:f7:f1:f3:
14:69:c1:e8:8b:7b:74:93:8c:89:eb:df:37:45:1f:16:06:0d:
58:73:ea:9f:c9:e4:e8:4d:62:6a:ba:07:68:17:44:ff:c7:d3:
b9:97:a3:48:39:18:61:4f:5b:b1:0c:59:42:a5:a9:27:5e:23:
62:ed:ba:ed:9e:8f:f1:aa:94:50:e2:e1:51:79:40:74:69:3d:
d6:2b:f7:47:c7:3a:a1:b3:e7:bb:9f:37:70:4c:53:1d:8d:10:
d2:45:00:5c:f9:c3:3d:db:7b:01:fb:da:e9:44:b5:07:17:8f:
ed:cd:97:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 16:00:11 2026 by rpki-client