
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/SZTa2sr60SnoQ8wwOjciHraGZLM.roa
File: SZTa2sr60SnoQ8wwOjciHraGZLM.roa (raw, json)
Hash identifier: R4w+VOrAlfi0uJw51QipUFnk81lnykHIHjfg0hUM+iA=
Subject key identifier: 49:94:DA:DA:CA:FA:D1:29:E8:43:CC:30:3A:37:22:1E:B6:86:64:B3
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: 01DA
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/SZTa2sr60SnoQ8wwOjciHraGZLM.roa
Signing time: Tue 31 Mar 2026 07:54:16 +0000
ROA not before: Tue 31 Mar 2026 07:54:16 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4694
IP address blocks: 210.152.64.0/18 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 474 (0x1da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Mar 31 07:54:16 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=4994DADACAFAD129E843CC303A37221EB68664B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:67:1c:1b:f2:3f:24:f5:c4:75:9c:c4:7b:f2:
68:34:4c:03:d0:93:73:32:56:69:c9:5b:db:74:03:
e5:0d:cb:06:b2:76:3d:1e:76:01:b9:19:9b:af:7e:
39:f2:9e:86:64:10:a7:ad:ee:3d:3f:17:51:ac:ef:
d0:8c:78:01:4f:d7:a5:cc:27:b9:a8:dd:74:0d:de:
26:0e:2d:c6:ac:e9:a9:d3:81:09:38:7e:2a:23:8f:
57:51:a3:83:f8:2e:39:e1:5f:fe:98:b7:2b:b2:0b:
b9:bc:76:87:ac:64:c3:6c:37:7d:dc:13:2d:db:9e:
2e:49:50:08:29:dd:bd:a9:b2:3f:5b:41:34:4a:05:
7b:c7:18:bb:93:19:10:f3:a0:a4:8a:b9:e4:2a:c9:
0b:77:42:1c:0e:78:15:9c:7c:19:8c:40:83:02:9c:
6a:1d:46:04:82:33:99:c3:f4:f9:03:ce:71:59:b5:
e1:9c:2a:d0:28:dc:ff:72:ea:00:41:37:29:71:22:
0d:1f:af:0d:34:41:6a:54:92:2c:93:4e:d2:bd:f8:
44:07:16:13:7c:d7:fd:00:1a:b0:f5:6d:cb:02:bd:
97:76:64:c9:76:d2:bf:fb:5f:97:a2:d1:91:54:fb:
0a:00:41:be:08:97:d5:36:6a:8a:6e:1e:ab:68:38:
71:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:94:DA:DA:CA:FA:D1:29:E8:43:CC:30:3A:37:22:1E:B6:86:64:B3
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/SZTa2sr60SnoQ8wwOjciHraGZLM.roa
sbgp-ipAddrBlock: critical
IPv4:
210.152.64.0/18
Signature Algorithm: sha256WithRSAEncryption
17:8b:eb:c5:bd:6c:7a:4f:ac:dc:fc:f2:ad:85:e8:55:a2:5c:
da:14:f1:57:4c:a5:ad:73:35:31:d3:f8:96:8d:f3:b4:dc:6c:
64:c4:af:8f:42:91:2f:2c:3d:f2:14:7d:36:60:af:3c:26:e1:
95:23:6e:08:93:c5:a0:a4:6c:0a:a0:f3:dc:7d:b4:cb:b1:88:
04:b4:92:f6:8c:9f:d3:61:ec:17:2a:8c:c4:47:4a:f5:e8:d9:
b5:93:9a:43:59:8b:bf:f3:86:5d:2a:16:be:a4:98:09:9a:f6:
24:c2:89:06:6e:65:e8:bf:88:20:05:32:9d:52:e0:30:bb:76:
61:51:9c:a9:06:57:65:01:0c:69:b0:b9:0e:6c:bf:d4:92:48:
21:33:f0:6d:eb:3b:7c:3f:cb:04:98:71:51:30:ce:85:52:f9:
54:0c:4a:9b:fe:a0:0a:8a:1d:79:5b:ca:eb:61:31:8f:d1:e1:
d2:2e:96:43:41:2a:76:82:85:4b:81:89:5c:ba:5e:a7:b8:6e:
17:cf:94:ab:2b:50:c2:67:ac:a0:cd:4e:33:b2:27:fc:64:82:
67:5e:7a:e8:3f:e2:50:c4:c4:5e:7d:fb:9e:68:81:2f:d5:6c:
37:77:a6:ce:a2:20:3c:34:b5:eb:09:37:ab:93:32:d2:9d:43:
fb:7b:89:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:57:39 2026 by rpki-client