
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/c_36Tu-SxvmjhSMsAn4CPY-mIpo.roa
File: c_36Tu-SxvmjhSMsAn4CPY-mIpo.roa (raw, json)
Hash identifier: m/NRiTWSPdaU0JwQVsOe4WpLTMPJGM6jkZViaWIv/jE=
Subject key identifier: 73:FD:FA:4E:EF:92:C6:F9:A3:85:23:2C:02:7E:02:3D:8F:A6:22:9A
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: 01C6
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/c_36Tu-SxvmjhSMsAn4CPY-mIpo.roa
Signing time: Tue 31 Mar 2026 07:54:07 +0000
ROA not before: Tue 31 Mar 2026 07:54:07 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4694
IP address blocks: 211.133.253.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 454 (0x1c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Mar 31 07:54:07 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=73FDFA4EEF92C6F9A385232C027E023D8FA6229A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f2:09:9b:fe:a5:a2:0e:59:df:f5:16:0b:4c:
11:4f:bc:5a:3f:24:80:3d:e4:65:f0:be:12:0e:a8:
94:20:93:d2:70:5c:ca:2f:53:4a:fe:b3:61:72:9e:
a5:cd:49:78:7c:10:74:90:9f:d7:d2:b0:f0:99:92:
39:d4:78:c7:3c:a7:b4:46:67:49:19:e9:1d:6c:f6:
52:c5:77:6e:40:88:fd:5f:79:eb:ab:66:f5:89:90:
53:02:7c:bc:2f:38:7d:d9:1a:74:b0:ca:52:73:2e:
a8:36:13:91:f4:69:7f:4c:dd:2c:dc:32:b6:5a:3a:
4e:4d:1f:12:14:35:d4:59:8a:53:dd:d9:51:8b:0d:
da:14:3a:d3:e3:24:7e:b4:6a:56:85:00:57:18:e2:
0e:bd:b4:03:e2:4d:82:ec:5f:21:fc:13:09:0c:13:
bc:e0:4c:6c:fe:1a:91:a6:62:db:76:c7:80:4e:14:
33:55:ee:0b:1e:37:2f:98:83:23:b1:f1:d9:c0:95:
c9:2e:99:a1:fd:da:b5:1f:4a:44:48:4b:2d:5d:65:
6f:31:22:bc:00:6f:38:71:67:dd:81:2c:23:24:fd:
8f:8a:15:04:e1:20:fd:10:5c:ba:b7:8e:9d:6b:00:
bb:9b:46:9e:1a:c3:62:b9:4d:0d:4f:4f:7c:cd:fd:
69:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FD:FA:4E:EF:92:C6:F9:A3:85:23:2C:02:7E:02:3D:8F:A6:22:9A
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/c_36Tu-SxvmjhSMsAn4CPY-mIpo.roa
sbgp-ipAddrBlock: critical
IPv4:
211.133.253.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:76:7a:e9:86:a8:0c:57:3f:7d:22:39:c3:c4:42:1a:be:9f:
08:31:f2:e2:06:31:14:a8:dd:32:19:c6:31:3a:ae:d2:f7:7f:
6c:ee:6e:59:5f:96:0d:20:ec:57:94:4d:a3:46:2f:35:5f:76:
d6:48:5e:8b:7d:cd:ee:4e:8d:87:0d:9b:85:18:05:ab:af:e5:
f2:b1:7c:81:c2:7b:ee:c8:01:3e:27:eb:77:e8:cd:9f:14:0e:
51:a0:5f:b5:6e:a1:ab:9a:76:02:8d:e4:22:93:51:e0:6d:a0:
0a:8e:56:f5:9a:44:b3:00:b6:05:0c:f4:b9:b9:1d:3e:d4:13:
f0:b6:79:83:41:e1:19:4c:f0:1f:35:43:5c:d6:4d:ae:d4:29:
9b:6a:42:b8:73:5b:02:cc:bf:3b:3f:f3:e1:00:a8:99:2b:00:
30:84:c0:f2:3c:56:49:e2:11:09:1e:60:7d:7c:01:eb:e9:ea:
c7:05:18:82:d5:ba:bd:19:52:41:35:4d:8e:84:99:87:ee:6a:
72:c1:c9:bb:62:45:c8:c2:07:88:32:cb:58:df:6a:02:c0:61:
a4:fd:7c:a9:70:4c:9f:9c:18:53:8a:44:31:ce:4f:a9:1f:a2:
2c:29:5d:7b:8a:df:63:7e:36:b4:63:0f:42:ef:2a:7d:cc:f7:
3d:e1:0f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:56:28 2026 by rpki-client