
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/CQrr13K70Mp2grLwaUnJtxsFCo4.roa
File: CQrr13K70Mp2grLwaUnJtxsFCo4.roa (raw, json)
Hash identifier: myWX/slM+vNvB3HQKvLu/r/yYYPkP52IqfGkpmtwZM8=
Subject key identifier: 09:0A:EB:D7:72:BB:D0:CA:76:82:B2:F0:69:49:C9:B7:1B:05:0A:8E
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: 0198
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/CQrr13K70Mp2grLwaUnJtxsFCo4.roa
Signing time: Tue 31 Mar 2026 07:53:44 +0000
ROA not before: Tue 31 Mar 2026 07:53:44 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4694
IP address blocks: 210.189.240.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 408 (0x198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Mar 31 07:53:44 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=090AEBD772BBD0CA7682B2F06949C9B71B050A8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7b:bb:c4:6b:cc:25:64:f8:2b:da:f4:79:d4:
ca:14:64:d6:45:ce:c5:6f:f9:c3:ac:af:0f:9d:7d:
26:08:c6:80:ad:32:f5:71:13:ee:a6:e0:a4:ac:27:
a9:1a:e8:66:82:70:49:32:5b:db:d7:e7:39:5d:ff:
c3:50:33:e3:f4:66:91:07:1a:68:9c:09:60:c9:66:
fe:9f:fd:64:b3:81:18:40:65:56:76:9c:47:05:7f:
7c:75:42:3a:77:2f:38:40:75:47:d1:40:dc:13:da:
b3:cf:51:55:3f:4a:d1:13:7b:ee:28:59:84:9c:f9:
50:7d:15:72:9d:e6:14:8d:7b:e1:b1:0f:6e:47:26:
ba:ac:93:7a:71:ba:10:72:5b:b5:98:59:78:11:5d:
f8:cb:47:d1:76:41:39:31:03:b5:2d:4f:19:c9:7a:
5d:52:b3:f2:f2:78:ee:56:05:38:ce:dd:c2:e4:02:
29:1e:bb:b0:6e:ba:43:fa:fe:26:f7:0f:59:17:4b:
b1:2c:8c:ff:89:c9:8a:1e:26:23:8f:9d:63:8f:82:
48:39:02:a8:de:74:5d:91:94:09:ac:94:3b:49:38:
22:f0:77:77:5e:47:f6:de:83:66:e4:2a:a4:84:b8:
e9:31:75:0e:7e:37:ea:60:cb:4d:dd:72:dc:a6:24:
09:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0A:EB:D7:72:BB:D0:CA:76:82:B2:F0:69:49:C9:B7:1B:05:0A:8E
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/CQrr13K70Mp2grLwaUnJtxsFCo4.roa
sbgp-ipAddrBlock: critical
IPv4:
210.189.240.0/21
Signature Algorithm: sha256WithRSAEncryption
ce:20:07:bd:ea:2c:6d:a5:61:fd:cb:49:81:40:15:4c:8f:59:
db:5a:5e:fd:bf:f9:b7:57:ab:75:3c:73:20:8d:c7:0d:e0:5f:
5f:56:bb:c7:39:64:99:ab:bb:43:02:34:c4:91:6a:4e:ed:c3:
4a:19:ff:de:7c:b9:83:fa:f9:a7:f1:2d:d6:00:72:62:0d:2d:
25:cb:68:ec:4a:24:11:02:5c:6a:69:d3:10:e9:17:1b:38:01:
28:33:cf:34:07:92:33:92:b5:ff:16:fb:42:88:3b:8e:fa:c6:
f2:0e:0b:6e:f4:1a:d0:4e:4b:42:87:12:60:06:d6:9e:30:49:
97:2a:2a:ba:7e:b0:06:77:e9:7c:be:4c:00:fc:1f:78:00:d1:
fb:76:8a:a1:98:81:13:6d:a1:bb:6e:41:4d:42:43:cf:08:47:
9d:94:dd:8a:3e:92:7b:da:8d:2b:22:f5:65:b5:e3:b2:cd:0e:
70:c0:ae:68:28:5a:9a:2d:f0:f0:6e:d2:5f:b3:7a:5e:d5:dc:
66:73:f2:d9:09:ad:43:d3:c3:bd:d1:55:9a:26:57:f3:21:46:
72:6f:37:11:42:fb:4e:f2:1e:70:c5:67:0e:f6:9e:53:ec:28:
e0:6d:81:38:f3:de:7f:c0:91:6f:6a:de:e7:43:3e:0e:25:88:
ce:c5:14:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:57:41 2026 by rpki-client