
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/pb2WJjDgZdwvRVKxf1NFOSW8okw.roa
File: pb2WJjDgZdwvRVKxf1NFOSW8okw.roa (raw, json)
Hash identifier: 36gue1rrF406rxq5H+mMpQcozjhE3Y0hHx6N4Di6iNE=
Subject key identifier: A5:BD:96:26:30:E0:65:DC:2F:45:52:B1:7F:53:45:39:25:BC:A2:4C
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: 0144
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/pb2WJjDgZdwvRVKxf1NFOSW8okw.roa
Signing time: Tue 31 Mar 2026 07:53:01 +0000
ROA not before: Tue 31 Mar 2026 07:53:01 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4694
IP address blocks: 202.230.200.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 324 (0x144)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Mar 31 07:53:01 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=A5BD962630E065DC2F4552B17F53453925BCA24C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7f:e2:66:0f:a2:37:a6:50:f2:7f:84:8b:0d:
4f:2e:5b:7d:04:8e:54:e0:9d:0f:aa:bb:cd:f8:cc:
5d:8f:cd:3f:ec:0b:84:75:da:82:0c:b9:dd:99:ca:
58:38:b9:b0:6c:6e:13:85:35:47:b7:f7:b7:2e:df:
16:09:65:93:27:04:9b:a0:b1:5b:9b:ab:fb:ec:c9:
d2:48:1b:a3:a5:ad:db:77:c8:18:f5:37:59:4e:a1:
48:ab:18:5b:88:e6:dd:49:64:e1:8a:44:e3:26:97:
da:35:28:00:aa:56:8b:77:00:18:03:db:e8:7b:5f:
6d:31:f0:c4:0e:a9:0f:85:5d:d2:42:c6:aa:07:2d:
a3:90:5d:89:c5:11:7b:43:30:9d:0a:eb:64:e4:78:
98:52:44:70:7f:53:5c:57:0f:a3:50:dd:dd:34:f6:
c6:a5:b1:9e:bc:08:d8:1f:84:03:72:f8:f8:a6:18:
30:86:85:b7:f3:dc:19:37:27:55:4f:0b:bb:63:30:
d9:ae:4e:95:64:6d:e9:95:b9:2d:d2:19:2c:62:41:
e0:c7:74:2d:ee:ab:5b:02:25:ac:bf:69:24:54:0e:
b5:44:98:e1:ec:e4:7d:e9:6d:63:e0:bc:f9:8b:3f:
c2:12:ba:d3:54:fa:41:e5:33:78:48:bc:c6:ca:52:
23:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BD:96:26:30:E0:65:DC:2F:45:52:B1:7F:53:45:39:25:BC:A2:4C
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/pb2WJjDgZdwvRVKxf1NFOSW8okw.roa
sbgp-ipAddrBlock: critical
IPv4:
202.230.200.0/22
Signature Algorithm: sha256WithRSAEncryption
68:ba:dc:6f:9b:5b:38:63:d9:ce:0a:f6:fc:b9:fb:34:78:7f:
10:6d:7d:23:1e:51:cf:ad:b3:21:31:4c:71:1e:b1:3f:7a:9f:
92:a0:ae:18:a0:3d:9f:10:7d:f2:0b:35:ff:ca:20:7d:dc:2f:
ac:a2:94:9f:bc:e2:9e:ab:c0:21:9e:07:2d:65:fd:75:bc:d2:
84:4b:b5:9f:c2:b8:95:8e:a9:d5:e1:49:15:b1:a1:06:b3:db:
3c:e3:11:ea:0c:1e:b4:34:dd:6d:da:1f:47:2a:b0:ae:a0:85:
8b:b3:1c:8c:17:8e:71:72:41:66:ef:da:b5:9f:6b:43:9c:e1:
f0:33:76:d5:86:1e:ae:21:12:be:42:21:61:8c:78:d3:12:b9:
b7:fb:e0:be:72:87:50:72:b9:a8:27:72:a9:87:45:92:bf:33:
16:71:2d:ab:4a:db:1f:16:f3:89:69:b1:51:3b:6d:e7:9e:c3:
95:a1:f1:56:d7:78:85:d5:67:1d:f8:f4:14:14:25:74:91:4b:
6c:6c:a4:f6:a5:de:fc:3d:c2:e3:b2:d1:62:09:78:81:39:16:
05:2b:bf:58:8b:2b:3e:af:64:0d:b8:36:29:28:ce:8b:a9:40:
71:f8:d8:be:80:fe:22:ce:a7:70:16:2e:9a:f0:bb:23:90:91:
86:30:05:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 16:02:34 2026 by rpki-client