
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/SSksw9oXSKURzHcdDIP8bJNHLuA.roa
File: SSksw9oXSKURzHcdDIP8bJNHLuA.roa (raw, json)
Hash identifier: eFyrhDGGDEHPlEsXdMBcZ+Q/yrl881/z845Gd82OqqA=
Subject key identifier: 49:29:2C:C3:DA:17:48:A5:11:CC:77:1D:0C:83:FC:6C:93:47:2E:E0
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: 01D2
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/SSksw9oXSKURzHcdDIP8bJNHLuA.roa
Signing time: Tue 31 Mar 2026 07:54:12 +0000
ROA not before: Tue 31 Mar 2026 07:54:12 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4694
IP address blocks: 61.195.160.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 466 (0x1d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Mar 31 07:54:12 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=49292CC3DA1748A511CC771D0C83FC6C93472EE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4f:80:f2:94:eb:6b:38:e2:37:8d:ba:61:15:
ab:11:88:11:36:2f:52:6b:0f:2b:a8:db:62:47:78:
fc:c2:b9:32:f8:7e:40:68:78:b7:ad:0a:f8:32:d9:
ec:d7:8b:e5:04:31:03:eb:23:35:a6:10:a2:b8:20:
52:27:62:b2:88:88:5d:32:35:97:20:62:76:12:83:
76:19:9f:55:90:50:18:2e:f3:ed:14:0a:31:62:4f:
c7:dc:62:12:c3:24:b7:b2:cd:2a:df:20:90:8e:43:
23:b1:80:a3:3b:1c:7d:15:d7:e3:a3:f0:15:24:91:
79:c3:68:e8:12:0e:fc:5c:f4:f8:27:61:87:2c:ed:
ce:a6:93:fb:92:48:1b:c9:4b:39:38:78:d9:ea:c7:
e6:2d:66:a3:ef:85:6d:7d:39:cb:fe:5a:10:7d:87:
c8:d2:56:87:4b:aa:27:3a:36:1c:e5:b9:f1:de:64:
c0:44:3b:dc:d2:b9:6a:6d:8c:83:f9:5e:91:ad:2d:
53:bd:ed:1d:2c:54:56:ec:94:83:f2:71:e5:42:d7:
e5:b9:76:8d:c5:3f:51:cd:30:86:fc:31:80:ec:06:
68:0b:8c:f6:14:04:9c:a0:27:b3:fd:4d:55:9c:eb:
3d:f0:ef:7e:95:e3:de:d1:46:ac:7d:b6:89:82:88:
be:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:29:2C:C3:DA:17:48:A5:11:CC:77:1D:0C:83:FC:6C:93:47:2E:E0
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/SSksw9oXSKURzHcdDIP8bJNHLuA.roa
sbgp-ipAddrBlock: critical
IPv4:
61.195.160.0/20
Signature Algorithm: sha256WithRSAEncryption
19:54:9c:a2:63:44:24:1e:89:c5:dc:09:f9:1c:c9:de:15:a4:
2c:3f:8d:9b:2c:b6:de:22:c5:91:37:0c:61:b5:09:77:0c:36:
6b:ca:9a:77:a1:1f:c8:97:16:da:65:57:45:a9:d8:2b:b8:a1:
8f:4a:02:56:16:56:dd:51:c0:9c:24:f8:07:80:47:7a:88:9d:
70:59:5e:49:64:90:20:b4:71:23:2c:91:ab:61:67:70:de:37:
01:67:0d:ae:60:5c:01:a8:39:ca:84:32:65:0d:c5:c8:a4:e8:
e0:d1:30:ab:e3:89:f0:4d:e3:16:e8:3b:e8:11:93:8d:47:02:
4b:75:36:36:77:f6:12:74:4b:90:ca:21:2a:ca:cf:a3:c0:81:
ca:f0:c9:14:d2:55:b2:dd:88:6a:3e:8b:22:29:74:8a:32:48:
06:88:57:ee:f9:eb:f8:50:a7:1b:f2:2d:26:ae:b2:7f:35:bd:
26:21:07:67:40:96:0e:e5:cc:90:2d:42:91:2c:5c:96:78:1f:
a4:f0:cd:09:6e:0f:b3:56:a3:f5:8a:52:63:30:8b:48:49:3c:
eb:2e:a2:cb:aa:fc:52:df:01:b2:29:98:fa:d1:5c:f4:c6:f6:
1e:62:d9:55:de:92:73:bb:90:a5:4d:4a:52:37:ed:ef:d5:b4:
68:31:83:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:58:22 2026 by rpki-client