
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/omzn4FuPVHEXyHZjR0xqzu6Fsqc.roa
File: omzn4FuPVHEXyHZjR0xqzu6Fsqc.roa (raw, json)
Hash identifier: ypDpd3Ht92n6dCJRcKCXRROsrxY5i49lIamI8wMyQU4=
Subject key identifier: A2:6C:E7:E0:5B:8F:54:71:17:C8:76:63:47:4C:6A:CE:EE:85:B2:A7
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: 0187
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/omzn4FuPVHEXyHZjR0xqzu6Fsqc.roa
Signing time: Tue 31 Mar 2026 07:53:37 +0000
ROA not before: Tue 31 Mar 2026 07:53:37 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4694
IP address blocks: 210.152.188.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391 (0x187)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Mar 31 07:53:37 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=A26CE7E05B8F547117C87663474C6ACEEE85B2A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1a:62:53:32:15:22:d7:af:f2:b1:ca:d2:84:
bf:f0:34:97:fb:28:80:32:ec:b9:59:ab:82:4f:09:
dd:c1:36:b3:6c:d9:53:20:ce:47:2e:3d:c2:04:7c:
17:33:5b:31:b9:57:cc:47:c7:21:d7:e8:01:71:7d:
6a:8a:69:ed:f7:4b:4b:e0:66:86:d0:a5:e2:86:a5:
3a:20:28:2b:c2:c7:59:10:30:73:b7:e9:7f:9c:ab:
24:1b:83:47:cf:9d:79:b6:5c:6e:9d:ef:71:46:62:
62:25:96:26:77:17:53:a7:14:fc:4e:f7:f1:2f:3c:
ca:50:1d:d4:bb:f2:75:d9:19:d0:b6:c9:5b:71:ce:
5e:17:f3:92:04:85:92:1f:7d:86:18:16:fa:a3:65:
ac:b9:91:d5:9e:80:06:4f:ff:3a:aa:da:93:b1:5f:
ee:de:62:10:e1:d1:bb:51:c5:82:45:df:2a:1e:44:
40:d4:6f:3e:00:8c:1b:84:e3:6b:80:5a:d5:b2:e6:
9a:f7:af:7e:f2:8d:15:4b:b5:eb:9f:f8:8e:42:53:
12:24:25:18:ba:08:71:b0:71:1a:4a:a8:22:68:f9:
96:a0:65:0e:95:dc:2c:6c:df:d4:43:8e:8d:b1:bf:
8e:47:ee:eb:58:e7:bc:52:1b:dc:8e:7b:e4:6c:0a:
2a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6C:E7:E0:5B:8F:54:71:17:C8:76:63:47:4C:6A:CE:EE:85:B2:A7
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/omzn4FuPVHEXyHZjR0xqzu6Fsqc.roa
sbgp-ipAddrBlock: critical
IPv4:
210.152.188.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:5f:e8:4d:df:f7:a5:5a:13:9a:3e:07:b5:a1:65:9d:2b:b0:
eb:9d:f1:6a:04:d9:0a:02:ec:19:6a:8d:2c:fd:69:1d:df:bb:
17:1a:29:c4:8f:22:0f:86:a4:12:f4:c8:0e:8e:9a:ae:84:11:
ef:e4:b6:01:32:0a:58:b4:93:79:2e:bf:3c:5e:f0:64:ff:4a:
f9:ce:03:5e:99:b2:58:0a:79:44:3e:32:f8:a3:f6:59:44:1b:
54:15:43:ee:1c:dc:0d:37:72:db:84:71:16:28:22:3b:c9:fb:
ba:c6:62:ce:c2:f4:c2:91:39:dc:06:d1:84:b3:47:00:60:32:
e9:29:34:03:60:8a:71:c5:6a:f6:9b:e5:9a:4a:f3:b3:00:ab:
aa:54:05:de:1b:eb:48:f0:50:5d:98:39:de:b1:ae:64:40:3f:
64:13:2b:25:ec:0c:ef:ca:e9:91:80:09:52:84:ea:61:4f:9f:
90:aa:4e:cc:8a:1d:c6:fd:b2:99:ba:b3:2e:ec:3c:6b:55:a5:
fd:c1:be:c3:d8:bb:7d:84:e8:6f:6c:d8:80:c8:26:bb:f9:a3:
18:0a:fe:62:0d:9a:05:b9:41:1c:bb:50:62:12:7e:e3:53:da:
af:a0:06:18:6f:ec:8e:ef:e7:02:fd:b5:d3:5b:0e:41:1b:35:
96:f7:5a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:56:28 2026 by rpki-client