
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/BltA4BbM93i1oKhI6IlS2gcG8dw.roa
File: BltA4BbM93i1oKhI6IlS2gcG8dw.roa (raw, json)
Hash identifier: EOiSCu/31IKcOObGcqxLm72VBVpDvJxX99pfKMvwBQ0=
Subject key identifier: 06:5B:40:E0:16:CC:F7:78:B5:A0:A8:48:E8:89:52:DA:07:06:F1:DC
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: 016E
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/BltA4BbM93i1oKhI6IlS2gcG8dw.roa
Signing time: Tue 31 Mar 2026 07:53:24 +0000
ROA not before: Tue 31 Mar 2026 07:53:24 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4694
IP address blocks: 210.129.128.0/19 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 366 (0x16e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Mar 31 07:53:24 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=065B40E016CCF778B5A0A848E88952DA0706F1DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:90:0a:2a:76:17:50:9f:94:a2:00:b4:15:c5:
c5:cc:05:71:04:74:6d:a3:07:85:1d:49:27:1a:a6:
c1:a2:59:a1:8d:ca:d5:06:06:8c:48:1c:50:5a:8b:
bc:ad:c3:eb:bc:f8:a7:1b:13:93:ef:36:de:13:37:
9d:c6:f2:d7:b7:94:bf:ed:41:a9:35:f2:3e:22:d7:
4a:c1:ae:86:07:30:96:76:ae:a7:2f:fb:e7:b3:64:
0d:40:64:22:9f:b4:69:0b:75:54:3f:83:69:59:90:
41:f7:fa:c6:85:57:c8:6c:33:84:22:12:7b:e7:b7:
bf:2c:89:d0:24:d3:bd:61:7d:e6:60:29:0e:5e:91:
54:b8:9f:c4:db:7b:61:03:26:e6:d5:e9:e7:b3:89:
f0:61:51:d9:9a:48:44:7e:27:e8:c9:76:ab:f9:2b:
d0:c9:41:c7:d5:17:10:23:91:95:05:fc:a7:4a:6b:
ea:c0:2b:1f:fd:a3:93:be:7c:83:a8:57:32:f5:e4:
0a:76:bc:8b:10:c8:b2:9a:cb:7d:af:db:ae:de:85:
95:ad:a0:d5:d0:cd:59:ba:cb:10:bf:17:11:14:86:
dd:84:8a:33:a9:69:76:6b:4c:8e:c9:51:9b:80:5e:
41:f4:f1:df:6b:f6:9c:3a:07:a8:8d:eb:2a:ec:22:
f7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5B:40:E0:16:CC:F7:78:B5:A0:A8:48:E8:89:52:DA:07:06:F1:DC
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/BltA4BbM93i1oKhI6IlS2gcG8dw.roa
sbgp-ipAddrBlock: critical
IPv4:
210.129.128.0/19
Signature Algorithm: sha256WithRSAEncryption
99:e8:fb:a8:3c:4e:17:c5:0b:0e:5e:64:ab:2b:2b:a0:7d:45:
fe:23:81:50:99:eb:5e:ab:8c:ad:2b:10:cc:ba:89:0b:4f:bc:
4e:0f:13:de:7f:80:00:e4:1f:f0:8a:43:35:00:33:49:96:8f:
1c:d0:83:14:8d:f4:4b:5b:54:62:ed:b1:d6:0a:85:14:c2:67:
0f:94:9f:15:6b:98:02:b5:fd:05:41:53:dc:7b:48:f9:87:18:
70:3a:51:f8:5e:2f:ac:00:1d:cb:d5:f5:c0:5a:4d:85:63:23:
00:f4:7c:9a:4d:82:2a:74:c4:10:d9:39:ae:1e:40:31:06:b7:
d1:4b:5d:f5:25:2c:f5:46:67:80:51:b7:4c:31:9f:08:eb:1d:
3f:69:ea:e8:09:34:d7:09:46:50:f3:a5:f1:1f:e8:73:b3:c2:
98:e6:53:6e:15:e0:57:1c:78:c3:4c:f3:ef:1b:0a:8f:8c:09:
e4:e0:b3:af:a4:01:36:71:1d:c4:51:f0:ef:5b:d0:0f:a7:86:
0f:9c:69:fd:71:67:f5:7c:1b:6d:01:4d:6f:a8:68:ba:1a:75:
78:de:3a:a7:72:69:09:e7:63:da:41:1e:66:34:5c:a8:e1:f6:
87:d5:2f:ce:41:18:a9:e8:0b:7a:64:28:79:4c:d3:a1:7c:d7:
ca:b3:15:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:58:22 2026 by rpki-client