
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/X3zP6KisyFQHP0XcuHfResicuug.roa
File: X3zP6KisyFQHP0XcuHfResicuug.roa (raw, json)
Hash identifier: L5z2rynwk7YN+ZdkuvlABomLjWM6Pepysdg8OAmVnHM=
Subject key identifier: 5F:7C:CF:E8:A8:AC:C8:54:07:3F:45:DC:B8:77:D1:7A:C8:9C:BA:E8
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: 0165
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/X3zP6KisyFQHP0XcuHfResicuug.roa
Signing time: Tue 31 Mar 2026 07:53:20 +0000
ROA not before: Tue 31 Mar 2026 07:53:20 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4694
IP address blocks: 202.239.24.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 357 (0x165)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Mar 31 07:53:20 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=5F7CCFE8A8ACC854073F45DCB877D17AC89CBAE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:70:0f:78:a5:f0:1f:ee:ff:8a:4c:f5:7c:e0:
20:27:e8:25:4d:f2:ff:83:46:d9:5f:81:24:4f:8e:
17:8d:7c:7a:99:fa:93:a4:c7:9e:ef:be:4d:9f:2c:
cb:71:2b:92:7a:e5:8b:a8:eb:c6:d6:7a:a6:3c:ae:
d8:25:e2:6a:29:a3:52:c8:52:81:49:d0:a1:d5:15:
1b:0f:4e:bc:3f:70:ee:dd:6f:b2:51:ad:4a:d9:84:
09:eb:ff:8c:61:27:6a:21:2f:38:6f:49:7f:ae:0a:
dc:9c:b1:86:a6:09:a6:f8:ed:9d:22:e8:94:f7:6e:
41:fb:ed:5b:f4:d5:b8:c3:c6:af:4c:04:72:56:ba:
68:81:59:82:7e:bd:3f:5c:05:ed:7b:29:ab:1d:4c:
64:3e:03:43:18:99:ef:1f:11:6e:7d:3c:8c:6b:90:
ee:28:b6:ad:a1:64:37:27:13:6a:0c:cd:14:b5:0b:
41:5e:c0:5b:27:59:dc:ed:e1:97:7a:15:f2:a4:ad:
80:47:b0:c2:d6:95:86:49:ff:29:75:97:15:df:0f:
1b:ff:97:31:d2:f3:f8:06:69:6b:5a:e6:e4:b8:9b:
ad:a7:67:d2:35:91:98:a1:3f:c9:07:b9:71:ab:77:
0a:5c:40:7b:f3:7e:eb:68:ff:a0:cb:8d:b5:55:db:
58:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:7C:CF:E8:A8:AC:C8:54:07:3F:45:DC:B8:77:D1:7A:C8:9C:BA:E8
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/X3zP6KisyFQHP0XcuHfResicuug.roa
sbgp-ipAddrBlock: critical
IPv4:
202.239.24.0/21
Signature Algorithm: sha256WithRSAEncryption
a6:ed:95:38:d4:3c:d1:46:1a:33:10:76:66:c6:ef:cf:2f:34:
57:87:11:c3:e7:df:e7:ad:85:65:72:50:ee:eb:88:89:df:6f:
ab:33:ce:83:6e:55:23:ac:c9:1f:92:bc:67:7e:65:7a:47:b2:
ec:9e:a5:89:e8:7d:d7:5d:db:02:f6:e9:bb:a4:98:30:58:e6:
e7:61:50:3d:f2:70:f9:33:1e:5b:3d:46:5d:5f:f0:ee:3d:f3:
23:15:70:be:4e:0d:99:20:c4:66:3e:64:45:b6:20:78:18:ab:
8f:7d:9b:bf:59:26:b2:7e:f9:6a:ef:a3:78:01:11:4b:26:60:
60:f4:36:c6:ac:fb:a6:8b:69:52:32:73:0b:04:15:0e:69:28:
95:d8:bf:d1:c3:6b:c6:74:d2:93:da:40:08:85:2d:e2:b0:09:
79:76:b1:e6:af:1c:ef:0e:e3:99:d9:a5:86:ad:53:54:d2:1d:
ad:be:51:2a:23:4a:9b:48:d7:bc:70:55:78:91:12:be:36:5d:
db:5e:3c:f5:ee:fc:77:f6:e2:27:4f:58:19:73:fc:83:39:80:
54:98:b1:52:6e:c6:d2:68:b1:38:a3:86:3f:01:0d:4f:22:50:
72:cf:ff:7f:63:57:77:73:fc:34:72:93:0f:6b:77:3e:6f:18:
a8:03:bd:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:55:58 2026 by rpki-client