
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/hqkkpNBfVEGPg5rakdRdig_2-0A.roa
File: hqkkpNBfVEGPg5rakdRdig_2-0A.roa (raw, json)
Hash identifier: PdC8CyxxaYuER7/TEITL3p/slMZEN4xcP2PZW1lnp4Q=
Subject key identifier: 86:A9:24:A4:D0:5F:54:41:8F:83:9A:DA:91:D4:5D:8A:0F:F6:FB:40
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: 0171
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/hqkkpNBfVEGPg5rakdRdig_2-0A.roa
Signing time: Tue 31 Mar 2026 07:53:26 +0000
ROA not before: Tue 31 Mar 2026 07:53:26 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4694
IP address blocks: 210.129.186.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 369 (0x171)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Mar 31 07:53:26 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=86A924A4D05F54418F839ADA91D45D8A0FF6FB40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:27:db:6d:90:b0:5c:cb:ba:6b:e5:ce:81:af:
e1:ac:af:36:53:ce:5e:65:7c:dc:f9:61:9b:06:87:
ae:61:54:aa:25:12:4b:f1:e1:c4:e1:80:4a:57:d8:
65:78:a1:05:a3:37:d2:1c:53:f2:a5:aa:83:3b:92:
a6:81:7a:a9:cf:8a:1c:68:5a:62:a8:5a:ff:c3:63:
bd:5c:3e:d7:8d:7a:8e:85:4c:66:04:33:a9:12:fc:
1e:f5:5d:89:c0:c7:f2:8c:1e:e7:6f:70:29:85:00:
00:83:67:e5:63:6a:ec:6a:a9:59:8f:ba:d3:89:15:
2b:23:dc:37:5e:91:d3:7f:1e:ab:bc:f5:e9:d0:0d:
54:5a:4f:3d:07:10:b5:bd:37:70:ba:b7:53:8c:c0:
df:30:bb:3a:25:2a:6b:b6:2f:d9:1a:d0:8f:72:65:
d8:88:70:58:02:80:b7:3a:5b:6d:a7:a3:66:10:79:
ab:10:7f:8f:30:ac:9b:9b:33:92:89:c3:51:50:b7:
af:21:81:c5:24:b8:65:a8:f4:a8:90:d2:77:13:2b:
84:e4:8c:8c:45:52:c4:77:f2:6a:46:96:f1:ed:0d:
ed:43:be:74:ae:0f:c3:65:ad:50:f5:3c:68:d0:71:
dd:a9:91:d6:4b:05:25:b3:97:4b:34:f0:33:4d:6e:
4d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A9:24:A4:D0:5F:54:41:8F:83:9A:DA:91:D4:5D:8A:0F:F6:FB:40
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/hqkkpNBfVEGPg5rakdRdig_2-0A.roa
sbgp-ipAddrBlock: critical
IPv4:
210.129.186.0/23
Signature Algorithm: sha256WithRSAEncryption
63:91:c9:ca:e0:5e:e4:ea:64:ae:1e:8b:f8:53:0d:b3:43:ce:
6e:ba:3c:01:fb:3a:96:31:3c:df:96:92:14:3e:2a:f9:55:53:
a7:41:e2:83:24:a9:44:73:70:ef:67:e3:15:e3:bc:29:9a:e3:
6a:ce:c5:85:28:59:d6:29:54:e7:5a:f6:a3:8b:98:4b:0b:ee:
6e:7d:07:0c:0d:af:e4:e4:e8:9e:a4:a6:9b:79:4e:6b:f8:33:
d5:4c:72:41:d9:42:4f:d8:6c:79:06:66:f6:50:18:ce:7f:ef:
5e:e8:cf:33:b4:74:d6:1f:58:ec:be:10:08:e1:fc:5f:5f:ff:
ec:c6:db:b3:66:f0:57:a3:07:6c:75:ee:0e:75:e9:b2:a0:8a:
03:e7:08:30:bf:e7:2c:06:6a:41:b5:7e:4e:49:ee:74:5c:29:
f9:b7:9e:c5:c5:48:29:b3:5a:1a:3a:2e:6a:d5:e7:ee:e0:c4:
98:db:08:2d:41:d6:7d:23:b6:b6:7b:cf:e1:d1:f5:32:7a:1b:
fc:5a:53:c9:48:42:f8:67:f3:b0:93:4a:c6:99:14:7c:12:26:
11:f0:59:40:d9:52:81:e1:db:63:33:ee:da:53:cc:02:9b:be:
24:78:f1:79:f7:d7:4c:72:04:c6:d1:7f:7e:76:39:9c:7f:f4:
7f:8a:66:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:55:57 2026 by rpki-client