
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/GOcrAQQunQsBff4PECbaYLY3k_0.roa
File: GOcrAQQunQsBff4PECbaYLY3k_0.roa (raw, json)
Hash identifier: LKU7pKemaLZKcGS2I1jHQN3DGS9ehf7jwkbQick2S2I=
Subject key identifier: 18:E7:2B:01:04:2E:9D:0B:01:7D:FE:0F:10:26:DA:60:B6:37:93:FD
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: 0192
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/GOcrAQQunQsBff4PECbaYLY3k_0.roa
Signing time: Tue 31 Mar 2026 07:53:41 +0000
ROA not before: Tue 31 Mar 2026 07:53:41 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4694
IP address blocks: 210.171.104.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 402 (0x192)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Mar 31 07:53:41 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=18E72B01042E9D0B017DFE0F1026DA60B63793FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:87:9a:97:64:89:6a:2b:83:6c:db:8a:64:ca:
dd:2f:0f:85:ae:4c:85:78:a9:d9:80:cd:51:ae:fc:
23:6a:a7:08:9d:80:bb:11:9a:c8:60:f5:fc:b8:b1:
f7:3e:e4:3d:09:6a:63:51:ae:74:3a:f8:f0:b4:e3:
4f:c0:d3:04:26:f4:72:19:e3:37:28:2c:6a:10:a7:
bf:5a:49:f8:40:f4:6a:30:f7:34:4a:ab:bb:27:ee:
41:74:94:dd:6e:09:23:0f:9b:16:c3:bf:38:53:24:
da:89:00:30:41:4f:68:44:65:b8:64:5c:f5:34:0d:
50:83:98:95:06:3c:8d:97:5b:32:9f:73:1f:cc:43:
7c:1d:8a:3a:75:5e:4e:14:8f:52:95:a6:9a:0d:d4:
13:14:d5:57:ea:cd:48:af:e2:d8:13:85:07:28:60:
7a:fc:56:bf:b2:f2:b9:61:8c:9e:4b:ab:b1:ee:49:
28:f7:50:6d:25:66:3c:73:c3:5a:f5:c5:cc:cb:1f:
6c:62:97:8d:9c:2b:4a:39:ff:45:b8:72:37:de:e2:
f8:fa:47:4d:75:bc:35:0e:a4:4d:2f:d7:fc:94:5e:
89:84:41:0f:73:a2:36:eb:f7:24:9e:37:bd:50:0d:
f9:15:3f:05:5b:9d:b8:a0:ca:51:60:42:59:96:9b:
b7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E7:2B:01:04:2E:9D:0B:01:7D:FE:0F:10:26:DA:60:B6:37:93:FD
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/GOcrAQQunQsBff4PECbaYLY3k_0.roa
sbgp-ipAddrBlock: critical
IPv4:
210.171.104.0/21
Signature Algorithm: sha256WithRSAEncryption
71:84:d2:0d:7b:20:0b:bd:f1:1d:47:40:0b:b9:50:ba:b8:49:
55:ec:6e:ec:06:80:85:da:84:ba:06:d2:9d:0d:89:c4:80:cd:
ae:36:44:d3:2e:93:58:ee:8d:5e:f8:57:b2:30:4f:36:4e:1a:
c3:14:3b:22:78:a9:29:6c:61:40:4a:54:de:01:37:8a:70:a3:
d7:d4:7b:6a:fa:d2:00:6c:af:e0:8f:4f:7f:58:bd:f5:9d:47:
33:85:ab:45:d1:d8:44:7b:02:af:ba:19:e0:05:df:6e:58:6f:
94:f8:6f:a3:65:07:59:94:1b:d6:93:9e:da:6b:51:44:3c:bd:
ac:e4:d6:71:a7:34:6d:e2:25:84:ec:b7:2e:e5:e0:7f:6c:c4:
91:83:b3:76:9e:2c:7e:98:db:3c:84:3d:4d:72:85:0d:8d:81:
16:04:2a:b4:9b:1d:fc:a9:25:83:6a:6b:1d:6a:34:47:9b:02:
cb:d7:e3:4a:ee:b5:32:1f:d6:c4:64:ef:98:9c:e8:7e:bb:92:
9c:0a:d4:71:f9:88:8f:02:0e:e7:02:88:60:dd:06:09:1e:47:
5e:be:fb:28:e3:13:1e:9a:32:c3:f6:80:45:bc:f3:68:ba:71:
6e:62:c8:96:13:26:bd:79:21:44:65:38:16:61:e8:7c:1c:7c:
90:c5:2e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:57:42 2026 by rpki-client