
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/YTRVBoC0DjFS8nnrwj5VIUnLlIw.roa
File: YTRVBoC0DjFS8nnrwj5VIUnLlIw.roa (raw, json)
Hash identifier: t+CKpDiLpw2YX8KcdhcgwtfgCPdIo8R7FCx+vp9leao=
Subject key identifier: 61:34:55:06:80:B4:0E:31:52:F2:79:EB:C2:3E:55:21:49:CB:94:8C
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: 015A
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/YTRVBoC0DjFS8nnrwj5VIUnLlIw.roa
Signing time: Tue 31 Mar 2026 07:53:14 +0000
ROA not before: Tue 31 Mar 2026 07:53:14 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4694
IP address blocks: 202.230.48.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 346 (0x15a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Mar 31 07:53:14 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=6134550680B40E3152F279EBC23E552149CB948C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e5:0f:50:67:9f:bd:38:0b:0e:93:33:80:bf:
2d:bc:28:a8:44:5c:71:52:1b:75:fa:b5:a2:2f:08:
44:a7:b4:96:97:c6:e7:22:63:df:92:e5:09:a7:c9:
0f:79:84:fc:08:7b:14:eb:13:f3:a8:c7:56:9b:6a:
df:48:88:98:41:13:b8:ce:62:f9:56:84:31:22:ae:
52:0b:60:7d:8d:29:76:f7:8d:22:66:70:1e:3c:58:
e9:9c:77:bc:e8:21:5f:8d:78:bd:74:9d:0a:77:9f:
ab:36:6c:72:9d:18:cb:4e:59:d8:9a:00:7d:95:4c:
ac:09:86:3a:79:55:12:f4:92:af:26:73:67:d0:89:
06:20:dc:4f:a7:4e:55:4c:07:19:5d:99:ec:25:60:
c8:24:ba:28:8c:7e:9a:3d:1e:8e:f0:ca:15:4d:b0:
ca:f5:0b:0b:81:01:0f:9a:44:4d:40:f9:9c:d0:02:
37:29:49:e2:a5:11:8d:52:f2:3a:ce:44:23:fb:71:
8c:f4:7e:b7:c8:10:b1:38:1d:0e:2e:73:86:84:6a:
80:1c:46:73:81:33:cf:7c:81:9c:a1:87:22:c4:0f:
d8:f4:53:ed:11:48:17:49:fc:6d:fa:97:20:0c:ca:
e6:c9:d9:64:af:4a:0b:b0:fb:66:85:14:10:7a:c2:
e0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:34:55:06:80:B4:0E:31:52:F2:79:EB:C2:3E:55:21:49:CB:94:8C
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/YTRVBoC0DjFS8nnrwj5VIUnLlIw.roa
sbgp-ipAddrBlock: critical
IPv4:
202.230.48.0/21
Signature Algorithm: sha256WithRSAEncryption
4e:f3:22:e6:6a:9c:41:f1:99:6f:69:ae:1e:20:e1:c4:1a:20:
40:fb:e8:39:f0:36:68:f9:7c:e2:9c:d8:c2:a2:6c:a3:32:84:
2a:2d:98:a5:40:89:03:a7:26:ab:0c:1f:bb:dc:d6:94:b3:a8:
2d:d1:08:22:ee:5e:69:f4:46:06:2f:63:6a:75:10:1c:47:97:
63:1f:05:b5:03:4b:d9:4e:3a:86:05:bf:2a:d6:92:06:e0:8a:
96:2f:b6:f2:0c:68:b4:ac:4d:dc:f0:c7:80:52:b9:91:f7:45:
c5:83:7c:de:8d:2e:71:a9:e9:13:9b:96:0d:b1:09:6b:7d:ba:
8f:fe:2e:4f:ee:0b:b7:1a:02:08:d5:6a:0e:a9:ed:31:c3:b5:
06:3a:0c:0b:93:f7:66:be:22:2e:5a:18:23:d3:14:e2:33:60:
cf:da:79:3d:b8:eb:2e:96:37:01:9d:a5:33:6b:0f:b9:f4:ef:
a6:14:be:51:cd:42:bf:e8:02:28:4d:e2:07:04:0b:25:8f:3a:
8d:3d:1c:88:c3:97:c6:42:16:53:b8:14:c7:53:fd:4a:11:db:
ea:34:ca:1b:15:c3:93:b0:8b:01:ac:41:9c:47:bd:32:e9:cf:
0b:e5:c2:6a:e9:e7:b2:57:a3:9c:65:8d:cf:fc:a2:9f:e9:27:
f0:d0:4a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:56:28 2026 by rpki-client