
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/_CEeRaDvx2HA0K8IRATR-9Oy98w.roa
File: _CEeRaDvx2HA0K8IRATR-9Oy98w.roa (raw, json)
Hash identifier: eVMq+m5QIMF2P28HNVaiED0MbnPL1Li9HBRp4RfANdI=
Subject key identifier: FC:21:1E:45:A0:EF:C7:61:C0:D0:AF:08:44:04:D1:FB:D3:B2:F7:CC
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: 01BF
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/_CEeRaDvx2HA0K8IRATR-9Oy98w.roa
Signing time: Tue 31 Mar 2026 07:54:01 +0000
ROA not before: Tue 31 Mar 2026 07:54:01 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4694
IP address blocks: 211.120.32.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 447 (0x1bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Mar 31 07:54:01 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=FC211E45A0EFC761C0D0AF084404D1FBD3B2F7CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:56:d4:e5:12:a8:89:83:46:26:9a:e1:95:7f:
5f:6c:f8:4e:bb:e7:04:82:d0:f1:1a:16:6b:4d:af:
77:66:23:ab:75:12:4a:56:e4:f2:64:7d:88:52:24:
96:ed:6b:ce:30:9c:c4:39:dc:25:a1:31:3d:f0:f5:
36:98:15:12:06:3a:19:a5:8f:4c:e9:ee:73:dd:f9:
81:20:bc:4d:4e:2e:ed:29:0f:e6:4b:01:36:13:dd:
37:ff:90:90:ae:50:c0:71:a6:18:d3:32:1b:ca:68:
f6:6a:21:2d:2a:8a:56:b4:9b:01:12:b7:9e:87:1b:
99:d1:c1:5a:87:94:9d:0f:03:3d:85:62:0a:8b:55:
1b:56:23:15:3b:39:18:de:c3:d1:a3:14:99:4c:74:
15:ab:12:79:af:d2:f6:09:7e:da:87:90:96:7e:a5:
64:f4:ca:7e:d9:bb:cd:b1:0f:6b:3a:27:5a:02:08:
1c:ce:b2:d8:0e:60:9a:9b:21:99:22:00:64:6f:d7:
19:8f:c7:6e:c3:f5:69:f3:42:42:00:18:01:19:66:
e7:cf:1b:c9:67:42:23:9d:96:ca:28:1c:82:04:4d:
91:41:e5:e2:79:8f:94:1e:bb:27:e4:b6:6c:15:89:
46:28:d3:e9:52:c3:45:1b:a6:f9:d4:13:8b:f4:8f:
5d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:21:1E:45:A0:EF:C7:61:C0:D0:AF:08:44:04:D1:FB:D3:B2:F7:CC
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/_CEeRaDvx2HA0K8IRATR-9Oy98w.roa
sbgp-ipAddrBlock: critical
IPv4:
211.120.32.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:4d:a4:1b:37:95:11:c9:0a:d0:4b:1f:fc:a9:79:cf:9c:e2:
7f:ab:d1:5c:b1:c8:42:93:3a:80:ac:15:e8:89:57:92:59:5f:
7e:26:7d:e5:5a:81:e9:9d:fe:f2:13:70:1e:c5:8b:7b:65:65:
d5:d9:44:cd:ad:f4:a4:2f:ce:82:21:58:9a:e8:42:1f:b5:7e:
6b:52:fd:d6:30:9c:bc:95:be:00:4c:c4:f6:36:d8:1a:12:62:
1a:e7:ea:46:70:dc:11:21:70:13:28:06:0d:ce:e3:01:00:cf:
43:15:ba:42:61:a0:67:bf:b9:4e:48:78:7a:b5:a1:f3:31:17:
89:ad:ea:4f:90:d7:ff:50:b7:ff:64:16:ce:1f:8f:13:74:8e:
83:b7:a0:99:71:1a:05:24:b9:34:ee:3c:bb:ca:d7:f4:80:74:
f2:80:3d:71:de:1e:84:40:87:1e:a1:3f:1a:7a:82:eb:ce:0e:
d9:25:b8:c4:c8:04:ea:59:fb:92:8b:57:34:13:93:74:98:48:
76:0d:da:78:0e:ff:b7:c1:6c:56:bb:a4:a7:38:cf:5a:9e:c7:
3c:00:9d:0a:1f:2d:0a:e1:77:61:80:c4:81:d4:69:f0:95:52:
f1:f3:5f:35:4e:ca:f7:c2:9d:1e:02:53:fc:c0:e7:fe:21:04:
49:7b:69:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 16:02:25 2026 by rpki-client