
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/QLcyO1Q5ED8Wqga_iCEaqLaBXoU.roa
File: QLcyO1Q5ED8Wqga_iCEaqLaBXoU.roa (raw, json)
Hash identifier: ouPgTTjU9NNOxUJhGno5QSu9JrQ/76pyW3XrKE7MTM8=
Subject key identifier: 40:B7:32:3B:54:39:10:3F:16:AA:06:BF:88:21:1A:A8:B6:81:5E:85
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: 014F
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/QLcyO1Q5ED8Wqga_iCEaqLaBXoU.roa
Signing time: Tue 31 Mar 2026 07:53:08 +0000
ROA not before: Tue 31 Mar 2026 07:53:08 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4694
IP address blocks: 202.218.15.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 335 (0x14f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Mar 31 07:53:08 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=40B7323B5439103F16AA06BF88211AA8B6815E85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ed:53:9d:f2:a5:68:dd:93:e0:7d:43:ed:88:
f8:70:57:30:b0:4f:1c:b0:51:c6:a4:f8:c8:69:f4:
59:25:e3:78:3e:86:86:1d:42:a7:d0:de:77:62:f9:
61:c4:bc:21:bc:6b:ce:74:07:94:f8:2d:1c:18:9f:
53:a2:9d:c8:dd:83:f0:9e:fa:2e:c0:aa:19:7e:73:
47:d3:77:85:dc:f7:53:19:d6:d9:28:f0:a4:f2:b5:
15:3a:9f:e3:26:4c:f1:f5:de:8c:85:c8:36:62:8a:
68:05:a4:88:e3:4f:99:88:c6:b6:a8:8e:ef:e2:79:
a1:bf:eb:48:2b:b2:72:a1:7e:72:db:e0:32:d3:d8:
8a:da:89:dc:25:d4:c4:6e:45:18:df:6a:97:04:10:
d2:94:79:ce:ea:4d:e1:58:20:7a:e1:5a:21:0b:e8:
eb:9f:12:1a:07:f9:2b:00:75:d1:ed:31:40:ac:44:
41:47:53:3d:2b:a0:33:e1:0e:cc:89:c7:1b:c0:a6:
5d:8c:77:7f:b0:70:18:4f:f5:b0:74:0b:64:2a:74:
1b:43:0b:8c:56:c5:13:1b:03:26:34:83:d3:7c:82:
53:6d:8d:66:bb:b9:6b:2e:95:6d:a7:9d:16:8a:6d:
ab:ba:c0:6a:4b:1a:84:af:bb:2a:9e:44:a4:e1:ca:
f6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B7:32:3B:54:39:10:3F:16:AA:06:BF:88:21:1A:A8:B6:81:5E:85
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/QLcyO1Q5ED8Wqga_iCEaqLaBXoU.roa
sbgp-ipAddrBlock: critical
IPv4:
202.218.15.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:9d:56:3d:d3:47:9f:84:20:69:2a:64:63:71:54:25:44:00:
5e:54:f5:f0:b6:a4:c6:ae:7e:9c:c4:95:cf:11:7e:18:7b:40:
4d:6a:d0:81:f9:a1:c8:90:51:05:75:25:aa:0a:ce:a5:7b:ea:
8b:64:3c:6c:a1:bb:6e:2a:d7:e0:4c:58:8d:8e:98:32:4b:c4:
e1:d1:80:0e:64:1c:33:3d:48:76:00:fb:4d:b7:8b:aa:84:69:
d9:34:0f:b9:22:ea:0d:cf:6f:6a:93:c2:e4:58:cc:f6:ca:12:
67:ac:0a:88:22:c9:68:b9:0a:0f:07:c4:2c:35:83:5e:35:d0:
5b:4c:6f:b4:36:48:9e:2a:a5:85:20:06:ca:68:02:a6:40:db:
52:88:b3:88:92:2a:fe:8a:72:2c:48:ad:77:a6:c1:d4:21:d0:
59:46:af:c9:b3:a1:38:9f:7d:32:28:1f:ad:55:2b:96:07:78:
9f:cb:ae:a6:e9:9d:fd:22:3d:01:6b:47:4c:5c:f9:bc:87:66:
50:5c:06:5a:b2:b6:05:45:8a:7d:b2:55:bc:e4:eb:a4:16:eb:
01:c4:76:0e:7e:ab:0c:02:b5:08:dc:b1:24:46:cb:7f:96:96:
b5:d7:75:b8:28:0c:55:b5:7a:b6:e7:a6:db:4d:82:26:31:71:
8b:7a:65:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 16:01:48 2026 by rpki-client