
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/6j8EfZB0zEYM231jLyPitWUMPBA.roa
File: 6j8EfZB0zEYM231jLyPitWUMPBA.roa (raw, json)
Hash identifier: 29nj+8eJKtY3MPF6/jfCENeux8QfxaQMuthnECspwNo=
Subject key identifier: EA:3F:04:7D:90:74:CC:46:0C:DB:7D:63:2F:23:E2:B5:65:0C:3C:10
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: 0156
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/6j8EfZB0zEYM231jLyPitWUMPBA.roa
Signing time: Tue 31 Mar 2026 07:53:12 +0000
ROA not before: Tue 31 Mar 2026 07:53:12 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4694
IP address blocks: 202.230.18.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 342 (0x156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Mar 31 07:53:12 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=EA3F047D9074CC460CDB7D632F23E2B5650C3C10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:04:a6:fe:13:a7:60:fe:0b:14:cd:a4:63:7b:
27:3a:30:34:9d:e2:16:85:51:ea:dd:81:f7:e5:ab:
cb:3f:fc:5b:c8:af:d2:82:e9:ce:28:fe:c1:18:71:
eb:d0:6b:95:a3:08:af:02:20:d5:60:21:f5:80:da:
18:8b:f4:41:e0:f8:b0:14:4a:02:04:0f:b6:e6:f9:
3f:96:dd:d8:9d:8d:bf:21:b8:6f:ee:e1:cf:f5:8f:
d0:02:8a:37:72:cd:76:3f:0a:fa:b5:2b:9f:93:7e:
ad:a0:cb:4c:a6:e5:de:2e:0d:78:75:b7:46:e1:c7:
40:9d:18:43:92:9b:9e:4b:40:23:c5:1f:fe:fa:97:
6b:ac:61:32:bf:64:2f:08:8e:a6:a6:7b:cd:de:30:
d1:6f:6c:b1:b5:e8:eb:91:0b:0f:8a:c5:5d:f4:21:
40:48:52:68:f1:ab:d6:85:16:4c:01:7d:3d:64:47:
52:60:19:aa:5b:6a:13:e7:91:b0:d6:30:90:08:40:
cb:0f:f6:e5:aa:dd:58:2a:57:73:93:d2:a6:96:d3:
45:6c:53:31:c8:6d:3c:a0:c6:25:5d:41:22:51:9d:
88:37:e3:3a:48:15:ab:4d:fb:88:b6:91:db:76:0a:
12:e2:29:6b:ab:4e:d4:eb:9a:82:0e:b4:a7:47:ec:
99:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3F:04:7D:90:74:CC:46:0C:DB:7D:63:2F:23:E2:B5:65:0C:3C:10
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/6j8EfZB0zEYM231jLyPitWUMPBA.roa
sbgp-ipAddrBlock: critical
IPv4:
202.230.18.0/24
Signature Algorithm: sha256WithRSAEncryption
05:4d:79:92:c0:f6:ad:23:e7:2c:56:57:45:bb:b1:1b:05:e6:
98:6e:3d:30:c6:1d:4d:48:0b:a9:99:54:aa:1a:83:31:07:21:
51:d1:9d:59:65:a5:0e:ce:dc:9c:49:33:3b:dc:b8:9f:55:e3:
f2:fd:9a:4c:02:29:37:0f:4a:66:af:c5:62:09:85:86:63:68:
44:f4:ff:cd:de:ff:c7:13:da:ba:8c:0b:b4:34:3c:ac:47:0d:
be:ce:b8:e9:0c:45:8d:fe:5a:00:45:2c:d1:60:b3:c6:0f:dd:
cd:1d:72:96:49:d8:69:43:33:56:4d:b8:52:f8:d2:e1:77:71:
54:3c:d7:d2:d0:9d:ec:93:02:f8:6b:45:0e:4f:38:8d:06:6b:
7b:7c:96:08:c5:26:1e:13:47:95:fa:17:ea:14:8a:a2:63:fa:
1b:61:a1:0d:ce:b4:06:40:e4:74:a7:70:70:83:cb:a1:cb:fa:
a0:0c:e7:88:bc:7a:09:90:cb:89:3d:6c:51:b4:41:80:12:72:
6b:01:73:48:c4:5a:3e:79:90:fe:61:98:e4:05:12:9c:4a:b1:
66:bf:6c:27:8f:72:91:48:b0:fd:0c:d5:e8:84:f7:0c:1c:c3:
b7:65:ad:c0:e4:78:84:85:76:4f:e8:25:9b:20:7e:66:a2:8e:
ba:d2:a4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:55:52 2026 by rpki-client