
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/lAKTpwz1PKkPHi2jD-TwRevdPVA.roa
File: lAKTpwz1PKkPHi2jD-TwRevdPVA.roa (raw, json)
Hash identifier: IX7y+9CEJx+Anw8etqKER8VuFDqRWO+7YDMiXw6qqf8=
Subject key identifier: 94:02:93:A7:0C:F5:3C:A9:0F:1E:2D:A3:0F:E4:F0:45:EB:DD:3D:50
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: 0158
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/lAKTpwz1PKkPHi2jD-TwRevdPVA.roa
Signing time: Tue 31 Mar 2026 07:53:13 +0000
ROA not before: Tue 31 Mar 2026 07:53:13 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4694
IP address blocks: 202.230.24.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 344 (0x158)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Mar 31 07:53:13 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=940293A70CF53CA90F1E2DA30FE4F045EBDD3D50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:54:80:66:ce:ee:c6:ea:59:b6:7e:1c:65:ca:
e6:c3:1d:21:d9:31:c9:a6:a9:96:b5:69:e7:63:52:
19:cd:00:f9:89:2a:16:79:6c:37:4c:0c:99:27:56:
be:d2:48:6f:3a:6f:40:91:70:ae:23:6a:8c:52:7c:
15:dc:87:d4:8d:44:97:e2:10:4f:ee:22:46:84:c2:
41:48:6e:0f:45:33:93:b1:c6:a1:f2:82:ed:ca:ce:
81:ec:61:f8:d9:5b:c0:10:89:f4:cc:e2:59:81:e1:
f2:81:53:cb:dd:e9:ee:3b:d0:fd:23:c2:bb:47:86:
fb:96:c8:5b:ad:24:d7:85:ca:13:28:a2:75:fe:37:
8d:af:cc:6f:f9:59:b9:ac:23:2d:fb:5e:56:1c:d9:
b6:a6:12:cf:40:67:ac:3f:22:24:a1:aa:ae:90:db:
1e:a0:36:af:00:7b:37:a5:49:0d:4b:81:cc:7c:8a:
89:3a:91:47:55:9e:b2:bd:9c:e8:b7:2d:25:5e:3e:
23:1a:50:78:96:44:42:72:07:72:8d:da:ce:67:7b:
87:eb:f4:a4:38:ff:2b:3b:54:28:21:f0:0e:3b:ca:
76:ea:8f:f3:9f:7c:90:6e:37:1c:b0:9c:60:15:ac:
39:7a:6a:a1:dd:4d:58:82:c1:09:9f:bd:13:41:a9:
b2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:02:93:A7:0C:F5:3C:A9:0F:1E:2D:A3:0F:E4:F0:45:EB:DD:3D:50
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/lAKTpwz1PKkPHi2jD-TwRevdPVA.roa
sbgp-ipAddrBlock: critical
IPv4:
202.230.24.0/21
Signature Algorithm: sha256WithRSAEncryption
3c:d2:f9:0e:14:8d:67:48:d1:36:0c:e5:d8:a6:4e:c9:26:ec:
a9:88:db:58:8b:d5:fd:77:39:ee:b7:67:c9:02:d7:f1:72:96:
4f:eb:c2:94:e2:98:75:85:c9:e8:cd:bb:75:36:fb:db:e1:be:
ab:08:84:b6:41:ec:66:25:75:ab:da:e7:83:97:32:21:af:82:
22:88:9f:f9:f6:f2:d9:bf:74:ba:e9:01:da:24:cb:07:ae:6c:
5c:18:62:83:30:09:b1:8c:5f:fd:43:0c:15:07:46:59:ca:0b:
6b:01:dd:c3:26:3c:42:41:bb:b1:05:24:01:61:fd:76:eb:65:
25:09:88:06:e6:12:2c:77:d3:cd:e7:50:f0:57:7d:d0:f1:7b:
dd:db:2d:64:f4:3a:b4:92:ae:84:23:46:5c:70:1f:38:b3:f2:
cb:d2:aa:6a:ff:f4:22:8c:a2:e0:f1:a3:85:f3:31:a1:71:44:
3d:a1:fb:e6:c8:be:e2:23:8c:30:eb:dc:d0:04:94:d8:1b:be:
ed:2b:f1:d5:eb:dc:83:78:df:a5:6f:d0:e9:70:cd:20:6a:06:
cb:d7:d7:2e:5a:25:1f:b7:19:b9:a2:0c:e9:d0:e8:b0:42:ae:
f2:2f:70:23:b2:ea:f4:2e:de:18:64:86:2f:b2:a9:08:f8:44:
bd:07:cb:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:57:37 2026 by rpki-client